Features & user guide

A secret is available only at key creation and cannot be recovered from its ID. Check the CSV or secure storage used at the time. If lost, follow AWS’s replacement procedure: create a new pair, update dependent applications, then deactivate and retire the old key.

Leave it blank for long-term IAM user keys. It is required for temporary credentials from Identity Center, role sessions or STS. Use a matching key ID, secret and token, and replace all three after expiry. Do not enter an SSO URL, SSO region, verification code or sign-in password.

Confirm that you are on an IAM user’s security-credentials page, not a role or Identity Center user page. Creation requires permission. An IAM user can have at most two access keys, including inactive keys; check dependencies and follow AWS’s key-management process before removing an old key.

The defaults enable saving prompts and automatic sign-in; they do not silently save every password. Choose Save after first signing in to a site to use those credentials later. Choices in an existing Brave profile are preserved.

No. These defaults are applied when creating new instances with the built-in Windows setup. Refreshing the panel or reconnecting RDP does not install Brave, disable Wallet or change startup settings on an existing instance.

A long outage, possibly incomplete input or another disconnection during catch-up requires checking the target first. Choose Replay if the page state is suitable, or discard the cache and align the desktop again.

Finish a recording containing input, then select other desktops under Select replay targets. Background replay needs running instances with saved Windows passwords; only in-page replay requires connected desktops with matching dimensions. The source of a recording captured in this page cannot be a target; imported recordings are not tied to their original instance. Follow selections do not replace replay-target selection.

Imported recordings marked Saved to account restore automatically in future workspaces, including on another browser or device. New recordings made in this page must first be downloaded as JSON and imported to remember them. New recordings that were neither downloaded nor imported cannot be recovered after a refresh; a submitted background task continues running, but its execution contents are removed when it ends and do not replace a local backup. Disconnected-input caches are not included in recording files.

Instance creation, network setup and software installation take time. Wait for the deployment result, then refresh the instance list to check created resources. View software installation progress in SSM command status. After partial batch success, retry only failed targets to avoid duplicate instances.

The first boot still needs Windows initialization, reboot and desktop login to finish. Allow the desktop to become ready. URLs and bookmarks must be entered during creation with the built-in UserData retained. If they still do not appear, check the instance's initialization log for errors.

Open Extra bookmarks when creating Windows, then enter a name and the complete code beginning with javascript:, up to 1 MiB in total. In the remote desktop, open the target webpage and click the bookmark on the favorites bar to run it.

For connection errors such as Failed to create the RDP session, check the current profile, region and target instance. Confirm that the instance is running, Windows is ready and an address is assigned, then check remote desktop port rules. Also check the relay instance if used. Keep the full error and retry the affected instance.

Copy the text again, return to the target RDP tab and check whether the browser allows clipboard access for this site. Try transferring a short text through the toolbar's Clipboard area. If manual transfer also fails, use Manage → Repair RDP Clipboard for that instance, then copy the text again.

Confirm that synchronization is active and that followers are connected, selected and using matching dimensions. Reconnected followers retain their selection. With input caching enabled, short outages replay automatically; resolve any confirmation or cache-full notice on the affected desktop. If input lands in the wrong place, pause and align windows, pages, dialogs and zoom across desktops before resuming.

It is off by default. Enable Show remote desktop toolbar icon in panel Settings, then click the teal button at the top right of an individual RDP tab. Ctrl + Alt + Shift also works. The synchronized workspace and shared tabs have their own controls.

SSM is the AWS Systems Manager remote management service used for software installation and some repairs. Confirm the instance is running and initialized, then check SSM command status. If it remains unavailable, check the instance's SSM Agent, network connectivity and AWS permissions.

Check Current credential and the 12-digit AWS account ID, select the instance's region, then clear unnecessary searches or filters and refresh. Check expiry if using temporary credentials. After switching profiles, the list shows resources accessible to the selected profile.

They are currently free, with no Pro access code or AWS credentials needed. When you sign in with your own ChatGPT or Claude account or use an API key, model usage is billed by that service under your subscription or key. Workers AI may have a monthly usage limit.

Files in /workspace, the chats, AI sign-ins and API keys are kept. Software installed outside /workspace, commands running in terminals and background services are not. With the experimental fast wake, sleep also snapshots the whole container so installed software survives, but the snapshot excludes sign-ins and .env files.

Sign-ins and API keys are stored encrypted and used only by their workspace. They are deleted when you switch to Share the terminal and files or delete the workspace. .env files stay out of ordinary backups and are encrypted separately.

With Share the terminal and files, members could read anything in the workspace from the terminal, so it keeps no AI sign-ins, API keys or chats and no one can use AI. To use AI again, switch to Only me or Share everything in Settings, then sign in or enter an API key again.

By default an account can have 3 workspaces with 1 awake at a time, and a member waking a workspace you shared counts toward yours. When a limit is reached, delete a workspace you no longer need or put another one to sleep. When the service is busy, waking retries automatically for up to about 15 minutes.