# Sign in once, reach every machine

Sign in to ace on your computers and your phone, and every machine on your account is a tap away, at home, at the office or on cellular. No pairing codes, no VPN, no ports to open.

- Sign in with email, Google or GitHub
- Every machine on your account, on every device
- End-to-end encrypted: the relay can't read your work
- A machine code adds a second lock to any computer

## One sign-in for your whole fleet

Sign in from the desktop app and that computer joins your ace account. A headless build server joins by running ace login, which prints a sign-in link you can open anywhere. Your phone, the web app and your other computers then list every machine on the account and open it in one tap.

A device signed in to your account gets full access to the machines on it. There is nothing to scan or copy, and a new machine shows up everywhere as soon as it signs in.

## Works from anywhere, readable only by you

When your phone can't reach a machine over your network or Tailscale, ace connects them through its relay on Cloudflare. The connection is end-to-end encrypted between your device and your machine, so the relay forwards what it can't read: never your prompts, code, transcripts or screens.

Every connection needs a fresh pass from your account that lasts five minutes. Sign a device out and it loses access to your machines within minutes.

## A second lock on the machines that matter

Set a machine code, a PIN or a password, on any computer. Each device then enters it once before it gets in, so a stolen account sign-in alone doesn't open that machine. The machine checks the code itself, inside the encrypted connection; ace's servers never see it. Five wrong tries lock code entry for 15 minutes.

## Optional, and still yours to run

You don't need an account to use ace. Pairing with a link or QR code, your local network, Tailscale and a relay you host yourself all keep working without one. Either way, your agents, code and provider logins stay on your computers.

## Questions

### Do I need an ace account?

No. An account is for reaching your machines through ace's relay from anywhere. Everything else works without one, including pairing over your local network or Tailscale and running your own relay.

### Can ace read my code through the relay?

No. Traffic between your devices and your machines is end-to-end encrypted. The relay sees addresses, timing and the size of encrypted messages, and keeps none of it after the connection ends.

### What does an ace account store?

Your account id, email and name, and for each machine you sign in, its name, platform, key fingerprint and when it was last seen. Never your code, prompts or provider credentials.

### What if someone gets into my ace account?

They could open machines that have no machine code. Set a code on the machines that matter, use multi-factor sign-in, and sign out devices you no longer use.

Page: https://acehq.dev/features/remote-access/