Do I need an account for SSH?
Not for an ordinary direct SSH connection from a supported native app to your server. Managed relay and cloud services have their own account requirements, even when a free allowance is offered. See sign-in and account security.
Does a relay need my server password?
Relay admission and target authentication are separate. A forwarding relay token is not a server password. However, a Gateway that operates the remote protocol can handle credentials and session data in its own environment. Read how relay works for the route-specific distinction.
Is self-hosting free?
The self-hosted software and the infrastructure running it are different things. Your hosting provider can impose limits and charges, and a kit does not automatically supply every cloud or sharing feature. See managed and self-hosted relay.
Will account recovery unlock my vault?
Not by itself. Two-factor backup codes, account recovery codes and vault recovery material have different purposes. Keep the material required by your vault and test backup and recovery before losing a device.
Does cloud-only mean no local traces?
No. Session memory, clipboard history, downloaded files and screenshots can still exist locally. An enrolled Account Vault in a native app can retain encrypted local data and queue edits offline; publishing those edits requires current account access. The hosted browser cloud workspace has no general offline-mode switch or durable offline write queue. See cloud and offline data.
Does syncing a workspace give another device control?
No. Syncing saved panes does not authorize a device to operate the original session. For a supported agent-owned session, open workspace recovery and choose Continue here to request input control or View here to view it. The original runtime must still be available, and an independently trusted installed app needs its own approved device access. Recovery can require reauthentication or report that the session ended. See workspaces and sessions.
Does ending a share stop every remote command?
No. It can remove supported access, but it cannot undo executed commands, retract copied output or guarantee that every detached process stops. Confirm the remote state separately. Live-room approval is also not a verified personal identity; protect the complete invitation. See Live Share.
Why can I not find a feature from a guide?
The release, platform, route and service policy all affect availability. A provider being supported in principle does not mean it is configured for your account. Check features and availability and include those details in a support report.