Recommended Free Tools
Use Windows’ built-in OpenSSH Feature on Demand. In an elevated PowerShell window, install OpenSSH.Client for outbound connections, OpenSSH.Server for inbound remote logins, or both. Microsoft supports this route on Windows 10 build 1809 or later, Windows 11, and Windows Server 2019, 2022, and 2025; the components are serviced through Windows Update.
Choose the component you need
| Component | Use | Install command |
|---|---|---|
| OpenSSH Client | Connect from this Windows computer to another SSH host. | Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0 |
| OpenSSH Server | Accept incoming SSH connections to this Windows computer. | Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0 |
| Both | Use the computer as both an SSH client and a server. | Run both commands. |
Installing the client does not make the computer remotely accessible. Inbound access requires the server, a running sshd service, a permitted account, and network access to TCP port 22.
As an Amazon Associate I earn from qualifying purchases.
Check prerequisites
- Sign in with an account in the built-in Administrators group.
- Use an elevated PowerShell session: open Start, search for PowerShell, right-click it, and select Run as administrator.
- Use Windows 10 build 1809 or later, Windows 11, or Windows Server 2019 or later.
- Use PowerShell 5.1 or later.
Check the operating-system version with winver.exe. Check PowerShell with:
$PSVersionTable.PSVersionInstall OpenSSH with PowerShell
1. Inspect available capabilities
In the elevated window, list the OpenSSH capabilities and their current state:
#1 Best Overall
- 𝐋𝐨𝐧𝐠 𝐑𝐚𝐧𝐠𝐞 𝐀𝐝𝐚𝐩𝐭𝐞𝐫 – This compact USB Wi-Fi adapter provides long-range and lag-free connections wherever you are. Upgrade your PCs or laptops to 802.11ac standards which are three times faster than wireless N speeds.
- 𝐒𝐦𝐨𝐨𝐭𝐡 𝐋𝐚𝐠 𝐅𝐫𝐞𝐞 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧𝐬 – Get Wi-Fi speeds up to 200 Mbps on the 2.4 GHz band and up to 433 Mbps on the 5 GHz band for upgraded web surfing, gaming, and streaming. Performance varies by conditions, distance to devices, and obstacles such as walls.
- 𝐃𝐮𝐚𝐥-𝐛𝐚𝐧𝐝 𝟐.𝟒 𝐆𝐇𝐳 𝐚𝐧𝐝 𝟓 𝐆𝐇𝐳 𝐁𝐚𝐧𝐝𝐬 – Dual-bands provide flexible connectivity, giving your devices access to the latest routers for faster speeds and extended range. Wireless Security - WEP, WPA/WPA2, WPA-PSK/WPA2-PSK
- 𝟓𝐝𝐁𝐢 𝐇𝐢𝐠𝐡 𝐆𝐚𝐢𝐧 𝐀𝐧𝐭𝐞𝐧𝐧𝐚 – The high gain antenna of the Archer T2U Plus greatly enhances the reception and transmission of WiFi signal strengths.
- 𝐀𝐝𝐣𝐮𝐬𝐭𝐚𝐛𝐥𝐞, 𝐌𝐮𝐥𝐭𝐢-𝐃𝐢𝐫𝐞𝐜𝐭𝐢𝐨𝐧𝐚𝐥 𝐀𝐧𝐭𝐞𝐧𝐧𝐚: Rotate the multi-directional antenna to face your router to improve your experience and performance
Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'The result identifies whether the client and server are already installed, available to install, or missing from the configured Windows image.
2. Install the client
For outbound SSH connections only, run:
Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.03. Install the server
For inbound remote sign-in, run:
Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0A normal result reports Online : True and, ordinarily, RestartNeeded : False. If the capability cannot be found, verify that Windows Update or an approved Features-on-Demand source is available; offline capability servicing uses a different source and is not interchangeable with the online command.
Install OpenSSH from Windows Settings
The same in-box components can be installed without commands:
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #2
- AC1300 Dual Band Wi-Fi Adapter for PC, Desktop and Laptop. Archer T3U provides 2.4G/5G strong high speed connection throughout your house.
- Archer T3U also provides MU-MIMO, which delivers Beamforming connection for lag-free Wi-Fi experience.
- Usb 3.0 provides 10x faster speed than USB 2.0, along with mini and portable size that allows the user to carry the device everywhere.
- World's 1 provider of consumer Wi-Fi for 7 consecutive years - according to IDC Q2 2018 report
- Supports Windows 11, 10, 8.1, 8, 7, XP/ Mac OS X 10.9-10.14
- Open Start and search for Optional Features (some Windows builds show Add an optional feature).
- Select Add a feature.
- Search for OpenSSH Client and select Install.
- Repeat for OpenSSH Server if the computer must accept incoming connections.
The graphical method is useful for a one-off installation. PowerShell is easier to standardize across several computers and in deployment scripts.
Start and enable the SSH server
Installing the server adds the service but does not replace the need to verify its state. In elevated PowerShell, run:
Start-Service sshd
Set-Service -Name sshd -StartupType 'Automatic'The first command starts sshd now. The second is optional but recommended so it starts automatically after a reboot.
Rank #3
- AC600 Nano size wireless Dual band USB Wi-Fi adapter for fast and high speed Wi-Fi connection.
- Strong 2.4G/5G connection allows the user to use the Internet with lag-free experience.
- Sleek and miniature sized design allows the user to plug and leave the device in it's place.
- Industry leading support: 2-year and free 24/7 technical support
- This network transceiver supports Windows 11, 10, 8.1, 8, 7, XP/ Mac OS X 10.9-10.14
Confirm the service state with:
Get-Service sshdCheck the Windows Firewall rule
OpenSSH Server normally creates the inbound rule named OpenSSH-Server-In-TCP, which permits TCP port 22. Verify it with:
Get-NetFirewallRule -Name "OpenSSH-Server-In-TCP"If the rule is missing, create an inbound TCP rule for local port 22:
New-NetFirewallRule -Name "OpenSSH-Server-In-TCP" -DisplayName "OpenSSH Server (sshd)" -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22A firewall rule alone does not guarantee reachability: upstream firewalls, VPN policies, cloud security groups, routers, and the server’s listening state can still block the connection. Exposing port 22 directly to the public internet should be avoided unless the surrounding access policy is deliberately hardened.
Rank #4
- Fast 1300Mbps USB WiFi Adapter - Nineplus wifi adapter provides long-range and stable wifi connections,Upgrade your desktop or laptop wifi Technology with our AC1300Mbps usb wireless Adapter. Whether your desktop pc's wifi usb is malfunctioning or you’re looking to upgrade to faster dual-band 5GHz and 2.4GHz speeds, this pc wifi adapter is the ideal choice. It’s a budget-friendly way to extend your device’s life and experience the benefits of modern WiFi technology
- Dual-band 5.8GHz and 2.4GHz Bands - 5.8Ghz wifi Connection speed up to 867Mbps,2.4GHz 400Mbps,With these upgraded speeds, web surfing, gaming, and streaming online meeting is much more enjoyable without buffering or interruptions,Experience the High Wi-Fi speed of our AC1300Mbps wifi dongle delivers faster internet speeds and stronger, more reliable signal penetration over long distances. It's a high-speed dual-band wifi usb adapter for pc and easy for the modern user.
- Two 5dBi High Gain Wifi Antenna – The high gain antenna of the desktop wifi adapter greatly enhances the reception and transmission of WiFi signal strengths.Equipped with dual high-gain pc wifi antenna, our wifi dongle for desktop pc ensures accurate capture of WiFi signals, providing a stable and strong connection even at greater distances, ideal for overcoming poor signal issues in bedrooms. This computer wifi adapter, wifi card, and usb wifi antenna extend your coverage.
- Super Speed USB 3.0 - wifi adapter for desktop pc Connect speeds Up to 10x faster than USB 2.0 USB, Super USB3.0 delivers faster data transfer, a more reliable network connection, and improved compatibility for wifi adapter for pc. It fully supports the high-speed demands of AC1300 wireless adapter, ensuring peak performance. Plus, it's backward compatible with standard USB 2.0 ports for added flexibility.usb wifi adapter for desktop pc 3.0
- Compatibility Systems: This Wi-Fi usb adapter is compatible with Windows11/10/8.1/8/7/XP,not supports Mac OS or Chromebook or Linux. Most Windows 11/10 systems will automatically detect and install the drivers. If the system does not detect the driver, you will need to download it from our website. For Windows 7, you will need to manually install the driver for this wifi card.or you go to the website online-setup support,we do online-setup for you.
Make the first SSH connection
From another computer with an SSH client, connect using the Windows account name and the target’s DNS name or IP address:
ssh user@hostname-or-ipOn the first connection, SSH displays the server’s host-key fingerprint. Type yes only if the host identity is expected. The client then records that host in its known-hosts file. An unexpected fingerprint change should be investigated rather than accepted automatically.
Troubleshoot a refused or reset connection
The client command is not recognized
Install OpenSSH Client and open a new terminal. Re-run the capability query to confirm its state. If installation fails, check the Windows version, administrator elevation, and access to the configured Windows Update or Features-on-Demand source.
Best Value
- Wifi 6 High-speed Transmission: The WiFi adapter supports the new generation of WiFi6 technology with transmission speeds of up to 600 Mbps on 5 GHz + 287 Mbps on 2.4 GHz, enabling lightning-fast transmission of video at ultra-high speed and low latency
- Dual-band Connection: The AX900 USB WiFi adapter under the AX standard, the 5G band rate can reach 600Mbps, and the 2.4G band can reach 286Mbps. Note: Use WiFi 6 Router to achieve AX900 speed
- Built-in Drivers for Windows 10/11: The WiFi Adapter for Desktop PC just supports Windows 10/11 which CPU architecture is X86/X64, supports CD-free installation, no need to download drivers, saving time and worry. Please note this Adapter doesn't support MacOS/Linux/Win 8, 8.1, 7, XP
- Receive & Transmit Two in One: A desktop computer can connect to the WiFi wireless Internet by connecting it to a wireless network card. A networked computer can connect to the network card to transmit WiFi and share it with other devices
- Stay Safe Online: The wifi dongle supports WPA-PSK, WPA2-PSK, WPA/WPA2 mixed encryption modes. Note: Make sure that the distance between the adapter and router should be within 30ft
The server connection is refused or reset
- Run
Get-Service sshdand start the service if it is stopped. - Run
Get-NetFirewallRule -Name "OpenSSH-Server-In-TCP"and confirm the rule is enabled. - Confirm that TCP port 22 is reachable through host and network firewalls.
- Verify that the account exists on the Windows computer and is allowed to sign in through SSH.
- Check that the client is using the correct hostname or IP address.
The host-key prompt reports a changed key
Do not accept the new key blindly. Confirm that the machine was rebuilt or that its host keys were intentionally rotated, then remove or update the stale known-hosts entry using your organization’s SSH procedures.
Secure the installation
OpenSSH encrypts traffic between the client and server, protecting it against eavesdropping and connection hijacking. For production access:
- Prefer public-key authentication over reusable passwords where practical.
- Configure and protect host keys and use
ssh-agentcarefully. - Restrict SSH access to approved users or groups.
- Keep Windows and OpenSSH components patched.
- Limit port 22 to trusted networks, VPNs, or specific source addresses instead of opening it broadly.
Microsoft’s separate key-management guidance should be followed for generating, deploying, and protecting user keys and host keys.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
PowerShell, GUI, and alternate distributions
| Approach | Best for | Important distinction |
|---|---|---|
| PowerShell Feature on Demand | Repeatable administration and automation. | Uses the Windows-serviced in-box package. |
| Optional Features interface | Interactive installation on one computer. | Installs the same in-box client and server components. |
| Offline capability servicing | Systems without direct Windows Update access. | Requires an appropriate Features-on-Demand source and servicing workflow. |
| Separate PowerShell/Win32-OpenSSH project | Scenarios requiring that project’s release cadence or packaging. | It is an alternate distribution; do not mix its instructions or binaries with the in-box procedure without checking compatibility. |
What a successful setup looks like
- The required capability reports as installed.
sshdis running when server access is required.- The
OpenSSH-Server-In-TCPrule exists and permits the intended traffic. - A connection from another machine reaches the host-key prompt or login prompt.
- Only approved accounts and networks can use the service.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
