How to Add an Old Non-Rooted Android Phone to Your Tailscale Network: Termux, User-Space Tailscale, Key-Only SSH and Wireless ADB
TL;DR
- Time to complete: 25–40 minutes
- Difficulty: Intermediate
- You will need: an old Android phone (no root), Termux installed from F-Droid, the Tailscale Android app with a free account, a laptop with
adb(Android platform-tools) and the Tailscale client, and both devices on the same tailnet. - Result: an SSH shell and an ADB shell into the phone from any network, addressed by the phone's
100.x.y.zTailscale IP.
Requirements and setup
Before touching the phone, understand the three moving parts. Tailscale is a mesh VPN built on WireGuard that gives every device a stable private IP in the 100.64.0.0/10 range, so your laptop can reach the phone from a café without port forwarding. Termux is a terminal emulator that ships a real Linux userland (APT-style pkg package manager) without root. ADB (Android Debug Bridge) is the official debugging channel that talks to adbd on the phone and gives you shell, screencap, pm, am and settings commands.
The data flow is:
1. Tailscale app on the phone joins your tailnet and gets 100.x.y.z.
2. Termux runs sshd on a local port; inbound connections arrive over the Tailscale interface.
3. adbd on the phone listens on a TCP port; the laptop connects to it over the same tailnet.
4. Laptop authenticates with an SSH password/key or an ADB RSA fingerprint.
What you need installed and checked:
- On the phone: Termux (install from F-Droid — the Play Store build is deprecated, check the Termux documentation for the current source), Tailscale app, Developer options enabled (Settings → About phone → tap *Build number* seven times).
- On the laptop:
adbfrom Android platform-tools, an SSH client, and the Tailscale client signed into the same account. - Account: a Tailscale account; note that the minimum Android version supported by the Tailscale app changes over time — check the Tailscale documentation for your phone's Android release.
- ADB path on the phone: wireless *pairing* (the "Pair device with pairing code" screen) exists on Android 11 and newer. On Android 10 and older there is no pairing screen, so you need one USB cable connection to run
adb tcpip. - Free space: a few hundred MB for Termux packages.
Values you will need, and where to read them:
| Item | Example value | Where to get it |
|---|---|---|
| Tailscale IP of the phone | `100.101.102.103` | Tailscale admin console, or `tailscale ip -4` on the laptop for other nodes |
| MagicDNS name | `<phone-name>.<your-tailnet>.ts.net` | Tailscale admin console (if MagicDNS is on) |
| Termux SSH user | `u0_a123` | run `whoami` inside Termux |
| SSH port | `8022` | Termux `sshd` default — confirm in Termux docs |
| ADB connect port | `37xxx` | the "IP address & Port" line on the Wireless debugging screen |
Checklist before you start:
- [ ] Phone and laptop show up in the same tailnet in the admin console
- [ ] Termux opens and
pkg updatefinishes without errors - [ ] Developer options and (on Android 11+) Wireless debugging are visible
- [ ] Laptop has
adb versionworking
If you also want a full Linux userland on the phone (Debian inside Termux), the setup is described in How to Run Linux on Android Without Root: Termux, PRoot, and AI Tools; this guide stops at SSH + ADB.
Step 1. Prepare the phone: Termux, wake lock, and the tailnet
What to do: Install Termux, update its packages, keep the CPU awake, then install and enable Tailscale.
pkg update && pkg upgrade -y
pkg install openssh -y
termux-wake-lock
whoamitermux-wake-lock holds a wake lock so Android does not freeze the Termux session when the screen goes off — without it sshd dies silently after a few minutes. Then open the Tailscale app, sign in, and toggle the VPN switch on. Go to Android Settings → Apps → Termux → Battery → set to *Unrestricted* (the exact wording differs per vendor).
Why: the Tailscale app is a VPN service; it owns the 100.x.y.z address and forwards inbound traffic to local sockets. Termux's sshd binds to all interfaces, so it becomes reachable at that address. Root is not involved anywhere — both apps run as ordinary user apps.
How to check: on the laptop, run:
tailscale status | grep <phone-name>
tailscale ping <phone-name>You should see the phone listed with its 100.x.y.z address, and tailscale ping should print a line starting with pong from <phone-name>. If you only see timeout or a DERP-relayed path that never resolves, the phone's VPN switch is off or the app is being killed by battery optimisation.
Example: phone named oldpixel → tailscale ping oldpixel → pong from oldpixel (100.101.102.103). From that moment 100.101.102.103 is a usable address in every command below.
Step 2. Start SSH and expose ADB over the tailnet
What to do: Part A — start the SSH daemon and set a password in Termux:
passwd
sshdpasswd asks for a new password twice; it sets the password for the Termux user printed by whoami. sshd starts the daemon in the background on port 8022 (Termux default — verify against Termux docs if you changed it).
Why: Termux is not rooted, so it cannot use the system sshd; it ships its own OpenSSH build that runs entirely in app space. The username is *not* root or admin — it is the generated Android UID name, for example u0_a123.
How to check (Part A): from the laptop:
ssh -p 8022 u0_a123@100.101.102.103Expected: a password prompt, then a Termux shell where uname -a prints an aarch64 Android kernel line. ssh: connect to host ... port 8022: Connection refused means sshd is not running.
What to do: Part B — enable ADB over TCP. On Android 11 or newer: Settings → System → Developer options → *Wireless debugging* → on → *Pair device with pairing code*. The screen shows an IP:port and a 6-digit code. On the laptop:
adb pair 100.101.102.103:<pairing-port>
# enter the 6-digit code when prompted
adb connect 100.101.102.103:<connect-port>On Android 10 or older: connect the phone by USB once, then:
adb devices # phone must appear as "device"
adb tcpip 5555 # restart adbd in TCP mode on port 5555
adb disconnect
adb connect 100.101.102.103:5555Why: adb tcpip tells the on-device daemon to stop listening only on the USB endpoint and start listening on TCP so the laptop can reach it over the tailnet. The pairing flow on Android 11+ does the same thing but replaces the cable with an RSA key exchange — pairing port and connect port are two different numbers, and the connect port changes every time Wireless debugging is toggled.
How to check (Part B):
adb devicesExpected output — the phone listed with state device:
List of devices attached
100.101.102.103:37xxx deviceAnything else (offline, unauthorized, empty list) is covered in Troubleshooting. Generic ADB command syntax and desktop-side fixes are covered in How to Connect Android to Windows via ADB: Commands and Fixes.
Step 3. Verify end-to-end from outside your LAN
What to do: Turn off the laptop's Wi-Fi and connect it to a phone hotspot or a mobile connection — a different network from the one the old phone uses. Then run both channels.
ssh -p 8022 u0_a123@100.101.102.103 'uname -a; pkg list-installed | head -5'
adb -s 100.101.102.103:37xxx shell getprop ro.build.version.release
adb -s 100.101.102.103:37xxx shell screencap -p /sdcard/shot.png
adb -s 100.101.102.103:37xxx pull /sdcard/shot.png ./shot.pngWhy: this is the real test. If both commands succeed while the laptop is on a foreign network, the traffic is going through the tailnet and not through your home router, which is the whole point of the setup.
How to check: the SSH command prints the kernel line (for example Linux localhost 4.x ... aarch64 Toybox), the getprop command prints the Android release number, and pull prints a transfer line ending with 1 file pulled. The file ./shot.png opens as a screenshot of the phone.
Success looks like this:
- [ ]
tailscale ping <phone-name>returnspong from - [ ]
ssh -p 8022 u0_a123@100.101.102.103gives a Termux shell from a foreign network - [ ]
adb devicesshows the100.x.y.z:portentry in statedevice - [ ]
adb shell screencap+adb pullproduces a readable PNG on the laptop
Note what does not survive a reboot: the Termux sshd process and the adb tcpip mode are runtime state. After a restart you re-open Termux, run sshd, and re-run adb connect (or re-pair). Tailscale itself reconnects automatically once the app starts.
Troubleshooting
Problem. SSH asks for a password forever, then refuses.
- Ошибка:
u0_a123@100.101.102.103: Permission denied (publickey,password). - Причина: the username is wrong (people type
root,adminortermux), or no password was ever set withpasswd, so the account has no password to check against. - Решение: open Termux, run
whoamiand copy the exact string, thenpasswdto set one. Retry withssh -p 8022 $(whoami)@100.101.102.103. If you want key auth instead:ssh-keygen -t ed25519on the laptop, thenssh-copy-id -p 8022 u0_a123@100.101.102.103.
Problem. SSH worked yesterday, today the port is closed.
- Ошибка:
ssh: connect to host 100.101.102.103 port 8022: Connection refused - Причина: Android killed the Termux process to save battery, or the phone rebooted. Termux does not auto-start daemons without extra configuration.
- Решение: open Termux, run
termux-wake-lockthensshd, and set Termux's battery usage to *Unrestricted* in Android Settings. Confirm withpgrep -l sshdinside Termux — it should print a PID andsshd.
Problem. ADB sees the device but cannot talk to it.
- Ошибка:
adb: device offlineorfailed to connect to '100.101.102.103:37xxx': Connection refused - Причина: either you connected to the *pairing* port instead of the *connect* port, or the phone rebooted and
adbdfell back to USB-only mode, or the Wireless debugging toggle was switched off (which rotates the port). - Решение: reopen the Wireless debugging screen, read the current "IP address & Port" line, and reconnect:
adb disconnect && adb connect 100.101.102.103:<new-port>. On Android 10 and older re-runadb tcpip 5555over USB. If the phone shows an "Allow USB debugging?" dialog, tick *Always allow* and accept — that is what clears theunauthorizedstate.
Summary and next steps
You now have two independent remote channels into a non-rooted Android phone — a Termux SSH shell and an ADB shell — both addressed by a stable Tailscale IP that works from any network. Next, harden the setup with SSH keys, and check how long the phone will keep receiving Android updates using How to Check Your Android Phone's Update Lifespan and Find 7-Year Support Models.
FAQ
Do I need root for any of this?
No. Termux installs as a normal app, the Tailscale app uses Android's VPN service API, and adb tcpip is an official developer setting. Nothing writes to /system, and su is never called.
Why is my SSH username something like u0_a123 instead of root?
Because Android assigns every app a unique Linux UID, and Termux runs under that UID. whoami inside Termux prints the only valid login name for sshd.
Does the connection survive a phone reboot?
Tailscale reconnects on its own once the app starts, but Termux's sshd and the adb tcpip mode do not persist — re-run sshd and adb connect after each restart.
Can I use the phone's normal Wi-Fi IP instead of the Tailscale IP?
Only on the same LAN. The 192.168.x.x address is not routable from the internet, so the whole point of running Tailscale is to use the 100.x.y.z address in every ssh and adb command.
🤖 AI summary
- Updated: 2026-10-25
- Topics: tailscale на android без root, termux ssh сервер по ключам, wireless adb android настройка, старый телефон как сервер
- Summary: Пошаговая инструкция: превращаем старый телефон без root в удалённую машину в приватной сети — ставим Termux и Tailscale в пользовательском режиме, настраиваем SSH по ключам, локальный wireless ADB и отладочный порт Chrome.
- Key facts:
- TL;DR Time to complete: 25–40 minutes Difficulty: Intermediate You will need: an old Android phone (no root), Termux installed from F-Droid, the Tailscale Android app with a free account, a laptop with adb (Android platform-tools) and the Tailscale client, and both devices on the same tailnet.
- Result: an SSH shell and an ADB shell into the phone from any network, addressed by the phone& x27;s 100.x.y.z Tailscale IP.
- Requirements and setup Illustration: Requirements and setup Before touching the phone, understand the three moving parts.
- Tailscale is a mesh VPN built on WireGuard that gives every device a stable private IP in the 100.64.0.0/10 range, so your laptop can reach the phone from a café without port forwarding.
- Termux is a terminal emulator that ships a real Linux userland (APT-style pkg package manager) without root.
- ADB (Android Debug Bridge) is the official debugging channel that talks to adbd on the phone and gives you shell , screencap , pm , am and settings commands.