Question 1

Is remote access to my devices safe?

Accepted Answer

Yes. New devices start in restricted mode: only signed apps can be installed and arbitrary commands are blocked. Devices only open outbound, encrypted connections. Every change is written to an audit log on the device. When you want a full shell, you unlock power mode yourself, and you can lock it again when you're done.

Question 2

Who has access to my device key?

Accepted Answer

You. Your device key (an SSH key) is stored encrypted and can only be unlocked in your browser with your passphrase. Our team, our servers and our admins can't use it.

Question 3

Can Obacht see what I type in the terminal?

Accepted Answer

No. Terminal sessions are streamed and never stored or analysed. The audit log on the device records that something ran, when and in which mode. It doesn't record what you typed or what came back.

Question 4

What if my device or account is compromised?

Accepted Answer

Lower the odds first:

Question 5

What does Obacht store about my devices?

Accepted Answer

Only what we need to run the service:

Question 6

Is Obacht GDPR compliant?

Accepted Answer

Yes. The service is built to meet the GDPR. That includes:

Question 7

Where are the servers?

Accepted Answer

In data centres in the European Union, at Hetzner in Germany.

Question 8

How do I set up a Raspberry Pi?

Accepted Answer

No curl-pipe-shell, no SSH session. Add a device in the browser, download the install bundle (a small ZIP) and copy it onto the boot partition of a Raspberry Pi OS SD card. On first boot:

Question 9

Do I need to open ports on my router?

Accepted Answer

No. Devices only connect outwards. Traffic to your web addresses comes in through the Obacht proxy. No router settings, no static IP, no dynamic DNS.

Question 10

Does Obacht work next to my existing network or VPN?

Accepted Answer

Yes. The Obacht network (WireGuard) only connects outwards, so it doesn't need hole punching or changes to your setup.

Question 11

Which devices work?

Accepted Answer

Three kinds. A Raspberry Pi, set up by copying a bundle onto the SD card. A Linux machine you already have (Ubuntu, a mini PC, an old laptop), set up with one command. A Mac with Apple silicon (iMac, Mac mini), through the Obacht app. Intel Macs and MacBooks that travel aren't the target.

Question 12

Can I use my Mac?

Accepted Answer

Yes, a Mac with Apple silicon (M1 or newer, macOS 26 or newer). Obacht runs as an app: install it, sign in, click “Register this Mac”. Apps run in a Linux VM in the background while you keep working. Meant for Macs that stay on, like an iMac or a Mac mini.

Question 13

Is it safe to run a server on my work machine?

Accepted Answer

Yes. Apps run in a separate Linux VM, not on macOS itself. The VM only sees its own data folder, never your files, and can't reach your home network. Plus the usual: signed apps, an encrypted network, no open ports, restricted mode by default.

Question 14

Do I need to know Docker?

Accepted Answer

No. Apps do run in containers, but Obacht sets them up, updates them and keeps them running. You never have to touch Docker.

Question 15

Is my device secure?

Accepted Answer

Yes. Encrypted network, no open ports, signed apps (minisign), restricted mode by default.

Question 16

What happens if Obacht goes offline?

Accepted Answer

Your device keeps running. Your apps live on your hardware. You lose remote access and the browser view until we're back. Your data stays where it is.

Question 17

Can I use Obacht for industrial or safety-critical systems?

Accepted Answer

No. Obacht is for people and small teams running their own apps. It is neither meant nor allowed for systems where a failure puts people or property at risk, like medical devices, industrial plants, emergency infrastructure or vehicles. You use it at your own risk.

Question 18

Is Obacht right for home or a small team?

Accepted Answer

Yes. That's what it's built for. A few examples:

Question 19

What happens if I stop paying?

Accepted Answer

Your devices keep running. They're yours. You lose the Obacht network and access from the browser.

Question 20

Is Obacht free right now?

Accepted Answer

Yes. Obacht is in a closed pilot phase and everything is free. Put yourself on the list. We let people in a few at a time, so it can take a while.

Question 21

What about projects that can't take money?

Accepted Answer

Then the app costs nothing. We only charge the fee where we can pass it on. About a third of the apps have no payout channel. Some are backed by a company that lives off licences or cloud plans, some never set up a donation channel, a few decline donations. Every app page says which case applies and where the money goes.

Question 22

What happens to my data if I cancel?

Accepted Answer

It stays on your hardware. Obacht doesn't see the data in your apps. You lose the Obacht network and the browser view. Your device keeps working.

Question 23

Why pay for free software?

Accepted Answer

You don't have to. You can install software by hand and use Obacht only to give its port a web address, no app needed. That works. Obacht is built for people who want the whole thing done: signed apps, one install sheet, settings in the browser, HTTPS, monitoring and updates in one place. The app fee pays the people who wrote the software. Not us.

Question 24

Can I use my own static IP instead of the Obacht proxy?

Accepted Answer

Not yet. It's on our list. If you're thinking at that level, you can probably run your own reverse proxy, DNS and TLS, and Obacht may not be the tool you need. Obacht is for people who want things to work without running infrastructure.

Questions and answers

General

Technical

Security

Data and privacy

Your question isn't here?