Computer Management

Understand Computer Security and Isolation

By TermSquad · Last reviewed

Each TermSquad computer is a separate Ubuntu environment with its own files and access credentials. Inside that computer, the permissions of the Linux user and the tools you run determine what a process can do.

Use the right account

Use agent for daily project work and admin for deliberate system administration. The agent account does not have sudo privileges by default.

This separation reduces accidental system changes. It does not isolate two agents from each other when both can read and edit the same project.

Baseline protections

The managed setup includes an incoming firewall policy with SSH access, protection against repeated login attempts, and Ubuntu security-update configuration. Root SSH access is not the normal login path.

These defaults do not make every installed application secure or automatically publish your development server. Use SSH port forwarding for a private preview.

Control access to your work

  • Keep SSH keys and passwords private.
  • Remove credentials you no longer use.
  • Give AI agents only the project access they need.
  • Review permission prompts and understand YOLO before enabling it.
  • Keep provider credentials out of repositories and shared memory.

An AI provider can receive information through the agent’s requests according to that tool’s behavior and your account settings. Computer isolation does not prevent a tool you run from making allowed network requests.

Protect recovery too

Keep independent copies of important work and check the effect of restore, reset, and billing deletion. Security includes being able to recover from a mistake.

See SSH key management, agent permissions, and project secrets.