Skip to main content

Cloud Sync

Pro feature

Cloud Sync is part of the Pro plan.

What syncs

Cloud Sync keeps the following in sync across your machines:

  • SSH hosts
  • SSH keys
  • Cron jobs
  • Deploy presets

Zero-knowledge encryption

Cloud Sync is zero-knowledge. Your data is encrypted locally with AES-256-GCM before it's uploaded, using a key derived (via a KDF) from a passphrase you set. The server only ever stores ciphertext and cannot read your data.

No backdoor

If you forget your sync passphrase, your encrypted data cannot be recovered. There is no backdoor and no reset that restores your data.

Setup

  1. Enable Sync.
  2. Set a sync passphrase — this is used to derive the encryption key.

You can rekey (re-encrypt your data) at any time using your account password.

Sync status

The status panel shows:

  • Whether Sync is enabled.
  • Whether an encryption key is set.
  • Reachability of the sync service.
  • The number of synced resources.

Sync now

Trigger a manual sync at any time with Sync now.

See also Account & plans and SSH hosts.