任何问题、建议或意见，欢迎来信，我们会尽快回复： For any question, suggestion, or feedback, email us and we'll get back to you as soon as we can:
如何添加第一台主机？ How do I add my first host?
点击右上角 + 按钮，填写主机 IP 地址、端口（默认 22）和用户名，选择认证方式（密码或 SSH 密钥），保存后即可点击连接。 Tap the + button in the top-right corner, enter the host IP, port (default 22), and username, choose an authentication method (password or SSH key), then save and tap to connect.
支持哪些认证方式？ What authentication methods are supported?
支持密码认证和 SSH 密钥认证（OpenSSH / RSA PEM 格式）。密钥文件加密存储在系统 Keychain 中，不会以明文保存。 Both password and SSH key authentication are supported (OpenSSH / RSA PEM format). Key files are encrypted and stored in the system Keychain — never in plaintext.
如何在 Windows 服务器上开启密钥登录（免密码）？ How do I enable key-based login on the Windows server?
在服务器上打开管理员 PowerShell，先生成一对密钥（已有可跳过）： On the server, open an elevated PowerShell and generate a key pair (skip if you already have one):
ssh-keygen -t ed25519然后把公钥内容写入服务器的授权文件——文件位置取决于账户类型，是最容易配错的一步： Then add the public key to the server's authorized-keys file — the location depends on the account type, which is the step most people get wrong:
C:\Users\<用户名>\.ssh\authorized_keys
Standard account: C:\Users\<username>\.ssh\authorized_keys
C:\ProgramData\ssh\administrators_authorized_keys
Administrator account (most Windows accounts are, by default): C:\ProgramData\ssh\administrators_authorized_keys
用 net user <用户名> 可查看账户是否属于 Administrators 组。管理员账户还必须收紧该文件的权限，否则 sshd 会拒绝使用它、静默退回密码登录：
Run net user <username> to check whether the account is in the Administrators group. For an administrator account, the file's permissions must also be tightened, or sshd will silently reject it and fall back to password auth:
$path = "C:\ProgramData\ssh\administrators_authorized_keys"
icacls $path /inheritance:r
icacls $path /grant "SYSTEM:F"
icacls $path /grant "Administrators:F"
改完执行 Restart-Service sshd 生效，然后在 App 里把该主机的认证方式切换为「密钥」，导入对应的私钥文件即可。确认密钥登录成功后，如需彻底禁用密码登录，可在 C:\ProgramData\ssh\sshd_config 里把 PasswordAuthentication 改为 no 并重启 sshd。
Run Restart-Service sshd to apply, then switch that host's auth method to "Key" in the app and import the matching private key. Once key login is confirmed working, you can fully disable password login by setting PasswordAuthentication no in C:\ProgramData\ssh\sshd_config and restarting sshd.
如何导入 SSH 密钥？ How do I import an SSH key?
进入主机编辑页，将认证方式切换为"密钥"，然后选择"导入密钥文件"（支持从文件 App 导入），或选择"粘贴"直接粘贴私钥内容。如果密钥设有口令，连接时会提示输入。 On the host edit screen, switch the auth method to "Key", then choose "Import Key File" (from the Files app) or "Paste" to paste the private key directly. If your key has a passphrase, you'll be prompted for it at connection time.
连接失败怎么办？ What should I do if the connection fails?
先按报错信息对号入座： First, match your error message:
| 报错信息Error | 含义Meaning | 主因与处理Cause & fix |
|---|---|---|
Connection refused |
端口被拒——机器可达，但没有服务在监听。 Port actively rejected — host is reachable but nothing is listening. | sshd 未运行或端口填错。启动"OpenSSH SSH Server"服务，核对端口。 sshd not running or wrong port. Start the "OpenSSH SSH Server" service and check the port. |
Connection timed out |
完全没有响应。 No response at all. | IP 错、不在同一网络、防火墙静默丢包或主机关机。核对 IP、放行防火墙入站、确认同一网络。 Wrong IP, not on the same network, firewall dropping packets, or host down. Verify the IP, allow inbound in the firewall, and confirm the same network. |
Permission denied |
已连上，但认证失败。 Connected, but authentication failed. |
用户名/密码/密钥或口令不对。核对凭据；密钥认证需确认公钥已加入服务器的 authorized_keys。
Wrong username / password / key / passphrase. Check credentials; for key auth, ensure the public key is in the server's authorized_keys.
|
Host key changed |
主机密钥指纹与首次记录不符（即"主机密钥已变更"警告）。 Host key fingerprint differs from first connection (the "host key changed" warning). | 服务器重装或存在中间人。确认合法重装后，在主机菜单选「忘记主机密钥」再连。 Server reinstalled or a man-in-the-middle. If legitimately reinstalled, choose "Forget host key" in the host menu, then reconnect. |
No route to host |
网络路由不通。 No network route to the host. | 网段 / VPN / 代理问题。检查设备网络与到主机的可达性。 Subnet / VPN / proxy issue. Check the device network and reachability to the host. |
仍连不上，再按以下通用项排查： Still failing? Run through these general checks:
services.msc 中找到"OpenSSH SSH Server"并设为自动）。
Make sure the OpenSSH SSH Server service is running on Windows (find it in services.msc and set it to Automatic).
localhost。
Check that the IP and port are correct. On a real device, use the Windows LAN IP — not localhost.
10.0.2.2 而非 localhost。
If using the Android emulator, use 10.0.2.2 instead of localhost to reach the host machine.
连上后是 cmd 不是 PowerShell 怎么办？ Landed in cmd instead of PowerShell?
Windows OpenSSH 的默认 shell 是 cmd.exe，所以 PowerShell 命令（如 Get-Process）不被识别，目录恢复、预测建议等功能也不生效。在服务器上用管理员 PowerShell 执行下面任一条，把默认 shell 改成 PowerShell，然后重新连接：
The default shell for Windows OpenSSH is cmd.exe, so PowerShell commands (like Get-Process) aren't recognized and features such as directory recovery won't work. On the server, run one of the following in an elevated PowerShell to set the default shell to PowerShell, then reconnect:
PowerShell 7（pwsh）：PowerShell 7 (pwsh):
New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell `
-Value "C:\Program Files\PowerShell\7\pwsh.exe" -PropertyType String -ForceWindows 自带 PowerShell 5.1：Built-in Windows PowerShell 5.1:
New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell `
-Value "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -PropertyType String -Force出现"主机密钥已变更"警告是什么意思？ What does the "host key changed" warning mean?
Bolt SSH 在首次连接时会记录服务器的主机密钥（TOFU 机制）。如果密钥与之前不符，可能意味着服务器被重装或存在中间人风险。若你确认服务端刚刚重装过，请在主机菜单选择「忘记主机密钥」后重新连接。 Bolt SSH records the server's host key on first connection (Trust On First Use). A mismatch could mean the server was reinstalled or that there's a man-in-the-middle risk. If you know the server was legitimately reinstalled, select "Forget host key" from the host menu and reconnect.
如何开启多个终端标签？ How do I open multiple terminal tabs?
连接成功后，点击右上角 + 按钮即可新开一个会话标签（连接同一台主机）。长按标签可重命名，点击 × 关闭。 Once connected, tap the + button in the top-right corner to open a new session tab (on the same host). Long-press a tab to rename it, or tap × to close it.
断开后如何重连？ How do I reconnect after a disconnect?
切回 App 前台时会自动重连。也可点击终端顶部的状态栏（显示"已断开 · 点此重连"）手动触发。重连后会自动恢复到上次所在的工作目录。 Bolt SSH reconnects automatically when you bring the app to the foreground. You can also tap the status bar at the top of the terminal (showing "Disconnected · Tap to reconnect") to reconnect manually. Your last working directory is restored automatically.
什么是应用锁？ What is App Lock?
应用锁开启后，每次打开 Bolt SSH 需通过 Face ID 或指纹验证。可在右上角设置菜单中开启或关闭。适合在共享设备上保护终端会话不被他人查看。 When App Lock is enabled, opening Bolt SSH requires Face ID or fingerprint authentication. You can toggle it in the settings menu (top-right corner). It's useful for protecting terminal sessions on shared devices.
免费版有什么限制？ What are the free version limitations?
免费版最多保存 2 台主机。如需管理更多主机，可升级至 Pro 版本解锁无限主机。 The free version allows saving up to 2 hosts. Upgrade to Pro to unlock unlimited hosts.
如何购买或恢复 Pro？ How do I buy or restore Pro?
Pro 为一次性购买（买断），解锁无限主机，无需订阅、不会自动续费。购买通过 Apple App Store 完成；更换或重装设备后，在应用内选择「恢复购买」即可重新获得 Pro 权益。 Pro is a one-time purchase that unlocks unlimited hosts — no subscription, no auto-renewal. Purchases are made through the Apple App Store; after switching or reinstalling on a device, choose "Restore Purchases" in the app to regain Pro.