Profiles are connection recipes
A profile stores the details you choose: a display name, address, port, username and authentication selection. Groups and tags help distinguish machines with similar names. A profile is not a running session and does not grant access by itself. The server still checks authentication when you connect.
Groups are organizational aids, not automatically security boundaries or team permission rules.
Add and organize a server
- Open Servers, choose Add server, and enter its connection details.
- Give it a distinctive name, such as Development database rather than only Database.
- Open Advanced settings to choose a group, add tags or set supported per-host preferences.
- Check authentication and routing before saving.
- Reopen the profile and verify the destination before your first production action.
Use separate profiles when the same address requires different accounts or materially different routes. Do not assume changing a saved profile changes the connection already open in another tab.
Review group defaults
For local profiles, Groups & tags offers Inherit group protocol and Inherit group connection route after you select a group. Nested groups can supply these defaults when the host opens. Review the effective protocol and route before connecting, especially after changing a parent group. Missing or cyclic inherited groups block opening the profile until corrected.
Import an existing host list
Choose Import hosts on Servers where available. Review the preview, warnings, nondefault ports, groups and conflicts before committing the import. Imported password and key references need selection in the host or vault editor; plaintext passwords are not saved by the import. Imported SSH host keys become trusted connection pins only after you accept their source; follow host verification.
Keep secrets in the right place
Saving a host does not necessarily save its password. Reusable credentials belong in the vault, not in names, tags, snippets or notes.
Cloud inventory, local profiles and enrolled local vaults have different storage behavior. Signing in does not automatically upload every local server. Review cloud and offline data before changing modes.
For a local profile backup, use Local Vault Sync and recovery. A host list alone is not proof that every private key or device-bound credential can be restored.