Meshtastic Guide - Meshtastic Remote Node Administration

This feature enables secure remote management of Meshtastic nodes through the mesh network.

By default, nodes only accept administrative commands via local interfaces such as USB, Bluetooth, or TCP. This security measure helps prevent unauthorized access and defines how configuration changes are typically handled. Remote administration works similarly, with the key difference being that commands are transmitted securely as Admin Messages across the mesh.

Disclaimer: This feature is designed for advanced users. Improper configuration may cause a remote node to lose connection with the mesh. To avoid this, network administrators should first test any changes on a separate node before applying them remotely.

Prerequisites

For firmware versions 2.5 and later, remote administration is enabled by storing the public key of the local node in one of the Admin Key fields within the remote node’s Security Configuration. Each remote node can hold up to three unique Admin Keys, allowing multiple nodes to securely manage it across the mesh network.

For firmware versions 2.4.x and earlier, remote administration is achieved by creating a secondary channel named admin with a shared pre-shared key (PSK). Messages sent over this channel are encrypted using only the PSK, allowing any node in the channel to perform administrative tasks on others.

This admin channel method is still supported in firmware versions 2.5 and later, but must be explicitly enabled using the “Legacy Admin Channel” setting. It is intended only for managing nodes running firmware prior to version 2.5. Nodes running version 2.5 or later cannot be managed using this legacy method.

Note: Remote administration can be complemented by enabling Managed Mode on the remote node, which restricts radio configuration changes. However, Managed Mode is not required for remote administration to function.

Remote Admin Config Client Availability

Android

Setting Up Remote Administration

Using the PKC Method (Firmware 2.5+)

Connect to the local node that will manage the remote node.
Navigate to Radio Configuration > Security to locate its public key.
Copy the public key for use on the remote node.
Connect to the remote node you wish to administer.
Open the same Security menu and click Add to insert the local node’s public key into an Admin Key field.
You can add up to three Admin Keys, allowing multiple nodes to manage the same remote node.

Using the Legacy Method (Firmware 2.4.x and earlier)

Create a secondary channel named admin as outlined in the Channels section.
Enable legacy administration by activating the Legacy Admin Channel option in the Security Configuration.

Performing Remote Administration Tasks

Open the Meshtastic App and connect to the local node used for administration.
In the node list, tap the Short Name of the target node and select More details.
On the details screen, choose Remote Administration (gear icon).
From there, you can access and modify all available Radio and Module settings for the remote node.

Apple

Setting Up Remote Administration

PKC Method (Firmware 2.5 and Later)

Connect to the node that will serve as the administrator.
In Settings > App Settings, enable the Administration feature.
Go to Settings > Radio Configuration > Security to locate the node’s public key.
Copy this public key for use on the remote node.
Connect to the remote node you want to manage.
In the same Security menu, use the Add option to insert the copied public key into an Admin Key field.
You can add up to three Admin Keys, allowing multiple nodes to manage the same remote device.

Legacy Method (Firmware 2.4.x and Earlier)

Create a secondary channel named admin as outlined in the Channels section.
Enable legacy administration by activating the Legacy Admin Channel option in the Security Configuration.

Performing Remote Administration

Launch the Meshtastic App and connect to the local node used for administration.
Open Settings and go to Configure Node.
Select the remote node you wish to manage.
All supported Radio and Module settings for the remote node will be available.
Once finished, return to Configure Node and reselect your own node.

CLI

Setting Up Remote Administration via CLI

Using the PKC Method (Firmware 2.5+)

Connect to the local node via USB that will manage the remote node.
Run the following command to retrieve its public key:

meshtastic --get security.public_key

Copy the public key for use on the remote node.
Connect to the remote node via USB.
Set the Admin Key by running:

meshtastic --set security.admin_key "base64:PASTEPUBLICKEYHERE"

You can assign up to three Admin Keys, allowing multiple nodes to manage the same remote node.

Using the Legacy Method (Firmware 2.4.x and earlier)

Create a secondary channel named admin following the instructions in the Channels section.
Enable legacy administration by executing:

meshtastic --set security.admin_channel_enabled

Executing Remote Administration Commands

Use the --dest argument with the !nodeid of the target node to send remote commands.
Only --set and --get commands are supported for remote administration.
These can be used to change settings, add channels, or retrieve configuration data.
Example command:

meshtastic --set security.admin_key "PASTEPUBLICKEYHERE" --dest '!28979058'

Note:

On Linux/Mac, enclose the node ID in single quotes: '!28979058'
On Windows, quotes are not required: !28979058

Web

Remote Administration Setup via Web Interface

Connect to the node intended to manage the remote node.
Go to ⚙ Config > ⚙ Radio Config > Security and locate its public key.
Copy the public key for use on the remote node.
Connect to the remote node.
In the same Security section, paste the copied public key into an available Admin Key field.
Note: The web interface currently supports adding only one Admin Key.
Save the configuration to apply changes.

Performing Remote Administration

At present, the Meshtastic Web Client does not support sending remote administration commands.

Meshtastic Guide - Meshtastic Remote Node Administration

Prerequisites