Connect to Olares One via SSH 10 min
Because Olares One is a headless device, you access its terminal remotely rather than through a directly connected monitor or keyboard. This is required for tasks such as cluster setup, system configuration, and maintenance.
You can connect to the host shell using one of the following methods:
- Control Hub Terminal is a web-based interface for direct
rootaccess. It is recommended for quick or occasional tasks. - Secure Shell (SSH) is the standard protocol for remote management and more advanced or automated operations.
Prerequisites
Hardware
- Your Olares One is set up and connected to a network.
- A client device, such as a computer, is required to access the terminal.
Experience
- Basic familiarity with terminal commands and the command-line interface (CLI).
Method 1: Access via Control Hub
For quick access without configuring an SSH client, use the web-based terminal built into Control Hub.
- Open the Control Hub app.
- In the left sidebar, under the Terminal section, click Olares.

You can now execute system commands directly in the embedded terminal.
Run as root
The Control Hub terminal runs as root by default. You do not need to prefix commands with sudo.
Method 2: Access via SSH
SSH establishes an encrypted session over the network, allowing you to run command-line operations on Olares One from your current device.
Step 1: Get the local IP address of Olares One
Open the LarePass app, and go to Settings > System to navigate to the Olares management page.

Tap the Olares One device card.
Scroll down to the Network section and note the Intranet IP.
Check via Control Hub
You can check the IP using the ifconfig command in the Control Hub terminal.
Look for your active interface, typically enp3s0 (wired) or wlo1 (wireless). The IP address appears after inet.
Step 2: Check SSH password in Vault
Right after you activate Olares, you will be prompted to reset the SSH password on the LarePass app. The password is automatically generated and saved to your Vault.
To view the saved password in Vault:
Tap Vault in the LarePass app. When prompted, enter your local password to unlock.
In the top-left corner, tap Authenticator to open the side navigation, then tap All vaults to display all saved items.

Find the item with the terminal icon and tap it to reveal the password.

Step 3: Connect via SSH
The default username for Olares One is olares.
- Open a terminal on your computer.
- Run the following command, replacing
<local_ip_address>with the Intranet IP:bashssh olares@<local_ip_address> - When prompted, enter the SSH password.
Advanced: SSH into Olares One from a different network
If you are not on the same local network as Olares One, use LarePass VPN to establish a secure connection without exposing your device to the internet.
Step 1: Find the Tailscale IP of Olares One
- On Olares, go to Settings > VPN > View VPN connection status.
- Find olares, and click it to expand the connection details.
- Locate the IP address that starts with
100.64, and note it down.
Step 2: Check SSH password in Vault
Right after you activate Olares, you will be prompted to reset the SSH password on the LarePass app. The password is automatically generated and saved to your Vault.
To view the saved password in Vault:
Tap Vault in the LarePass app. When prompted, enter your local password to unlock.
In the top-left corner, tap Authenticator to open the side navigation, then tap All vaults to display all saved items.

Find the item with the terminal icon and tap it to reveal the password.

Step 3: Allow SSH access via VPN
- On Olares, go to Settings > VPN.
- Toggle on Allow SSH via VPN.
- On your computer, open the LarePass desktop client.
- Click your avatar in the top-left corner and toggle on VPN connection.

Step 4: Connect via SSH
The default username for Olares One is olares.
- Open a terminal on your computer.
- Run the following command, replacing
<tailscale_ip_address>with the Tailscale IP address:bashssh olares@<tailscale_ip_address>INFO
After you enable SSH over VPN, the first SSH access is slower because VPN routes are being applied. Wait a short time for the connection to complete.
- When prompted, enter the SSH password.
Connect using the local IP address instead
If Subnet routes is enabled in Settings > VPN, all devices on Olares One's local network become reachable through the VPN. You can then SSH using the local IP address (192.168.x.x) instead of the Tailscale IP (100.64.x.x), even when accessing from a different network.
Reset SSH password
If you prefer to use an SSH password instead of the automatically generated one, you can manually reset the password in Settings.
Open Settings. On the My Olares page, select My hardware.
Select Reset SSH login password at the bottom.

In the dialog, enter a new SSH password that meets all strength requirements, then click OK.
Open the LarePass app and scan the QR code shown on the screen.
Click Confirm on LarePass to finish. Your reset SSH password will be saved to Vault.