Drive and SSH in one click

Mount your own container as a drive and open SSH to it from Windows without typing a command. You press a button on the container's Access tab, and a small helper, ZeroLog-Connect.exe, does the rest over HTTPS. Only the owner of the container can use it.

A one-time code, not a password, travels from the browser to the helper.

Diagram as text

First time only: download ZeroLog-Connect.exe from the Access tab. Windows SmartScreen warns because the file is not code-signed yet. Compare the SHA-256 shown on the page, then run it.
Open the container's Access tab as its owner and press Connect drive or Open SSH.
ZeroLog creates a one-time code that works for 5 minutes and once, and hands it to the helper in a zerolog-connect:// link.
The helper swaps the code for a device token that is valid for 90 days from last use and opens the tunnel for that container only.
Drive: the container appears as a network drive, from the letter Z downward, through an HTTPS tunnel.
SSH: the helper writes a key, a pinned host key and an ssh config entry, so ssh zl-NAME works in any console.
Disconnect one device or end all connections: access stops at once, and ending all also resets the file password.

Windows first. On macOS and Linux the commands on the same tab still apply. The drive needs Windows 11 24H2 or later.
First time: on the Access tab, under Connect in one click, download ZeroLog-Connect.exe and start it once. It needs no administrator rights. It keeps its credentials in Windows Credential Manager and stays in the notification area while a drive is connected.
The file is not code-signed yet, so Windows SmartScreen warns when you start it: choose More info, then Run anyway. The page shows the file's SHA-256. Compare it first with Get-FileHash .\ZeroLog-Connect.exe in PowerShell. Everyone gets the same file, with no account or code inside it.
Connect drive shows the container as a network drive, from the letter Z downward. The drive is an SMB share carried through an HTTPS tunnel; no extra port opens on your side. The share is switched on at your first click. This is separate from WebDAV.
Open SSH sets up a key, a pinned host key and an entry in ~/.ssh/config. Afterwards ssh zl-NAME works in any console and in VS Code Remote-SSH. There is no "trust this host?" prompt.
How it is secured: a click creates a one-time code that works for 5 minutes and once. The browser hands it to the helper through a zerolog-connect:// link, never in a web address. The helper swaps it for a device token valid 90 days from last use. The token only opens the tunnel for that container.
Connected devices lists every PC you linked. Disconnect ends one at once, including open connections. End all connections also resets the file password, so WebDAV and drives need reconnecting.
Members of a shared container and admins who do not own it get a refusal. A locked account stops working immediately.

Status: this is released, but a complete run on a customer's Windows PC has not been confirmed yet. If the drive or SSH does not connect, tell us what the helper says. See also terminal and files.