Device and account management

A registered device is a remote control target owned by your Pontia Cloud user. Its registration, local encryption identity, selected Edge, and local service must all agree before remote access works.

Check a device

Run on the registered device:

pontia remote status

The command checks the local device ID, Cloud registration, selected Edge, and stored end-to-end encryption identity. It requires a valid CLI credential from pontia login.

Rename a device or change its handle

Use Device settings, or run:

pontia remote edit --name "Build workstation"
pontia remote edit --handle build-workstation

Both options may be supplied together. Changing the handle changes the device URL at app.pontia.dev/HANDLE; it does not rotate keys or change the selected Edge.

Rotate the device key

Run:

pontia remote rotate-key

Pontia creates a new device E2E identity, updates the Cloud registration, writes the replacement to $PONTIA_HOME/e2e-identity.json, and restarts the local service. Existing browser/device encrypted sessions no longer match the new identity and must reconnect.

Rotate the key when the identity file may have been exposed or when deliberately replacing the device’s cryptographic identity. Do not edit the key version or private key manually.

Disable remote access

On the device:

pontia remote disable

This unregisters the device, removes its local E2E identity, updates local configuration, and restarts the service. It preserves the CLI credential, so pontia remote enable does not require another login.

Removing a device in Device settings also revokes all of your CLI credentials. Run pontia login before using Cloud commands again.

Manage sign-in methods

In Account settings, link Google or GitHub as sign-in methods. Each provider account can be linked to only one Pontia user. Pontia identifies provider accounts by their stable provider identity rather than treating matching email addresses as the same account.

Do not unlink the only sign-in method you can still use.

Manage browser sessions

In Session settings, you can revoke one browser session or sign out every other browser. A revoked browser session cannot refresh after its current access token expires.

CLI credentials are revoked by removing a device through Device settings, not by pontia remote disable.