DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
FREEDOM251

Freedom251 › Blog › headless setup

How to keep a Raspberry Pi running safely without a monitor or keyboard

By Freedom251 Team · · 11 min read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You can run a Raspberry Pi headlessly by preparing its operating system and network settings with Raspberry Pi Imager, then administering it remotely over Ethernet or Wi-Fi. The safe setup is model-specific: use a power supply that matches the board’s required power mode, enable SSH or Raspberry Pi Connect before first boot, and maintain the installed OS, accounts and exposed services after you connect.

What “headless” means

Raspberry Pi’s documentation defines the arrangement plainly: “A headless Raspberry Pi operates without a monitor, keyboard, or mouse.” Instead of interacting with a local desktop, you reach the computer through a network connection and use a remote-management method.

As an Amazon Associate I earn from qualifying purchases.

A headless Pi still needs four things to be useful:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Boot media containing an operating system.
  • A power supply appropriate for the exact Raspberry Pi model.
  • A network path, either Ethernet or compatible Wi-Fi.
  • A remote-access service, normally SSH or Raspberry Pi Connect.

Raspberry Pi’s getting-started documentation describes the initial headless workflow. The installation and connection guidance covers preparing services and power. Use those instructions for the particular board and operating-system release you have; connector types, power modes, wireless bands and available services are not identical across models.

#1 Best Overall
CanaKit 45W USB-C Power Supply with PD for Raspberry Pi 5 (27W @ 5A)
  • CanaKit Power Supply for the Raspberry Pi 5
  • Power Delivery (PD) Support, including 5V / 5A (27W) specially designed for Pi 5 and up to 45W for other devices
  • UL Listed
  • Includes noise filter for added stability
  • Thick and insulated cable (4ft length)

Choose the hardware and connection before you write the card

Use the right boot media

Prepare a compatible microSD card or other boot medium on a separate computer. The card is where Raspberry Pi Imager writes Raspberry Pi OS and the settings needed for first boot. Select Raspberry Pi OS Lite when the Pi will be a server, automation controller or other device that does not need a graphical desktop. A desktop image consumes resources and is unnecessary for an SSH-managed installation.

If you later need a graphical session, choose an operating system and remote-display method that support that workload. VNC, for example, is available after first boot but is incompatible with Raspberry Pi OS Lite, so it is not a substitute for SSH on a Lite installation.

Match the power supply to the board

Do not buy a “universal” supply on the assumption that every Pi has the same requirement. Raspberry Pi recommends a high-quality supply that provides the power mode required by the exact board. Check the model’s official setup information and the connector it uses before purchase. A model without the expected Ethernet connector may also require a model-compatible network adapter.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A power supply that is merely able to plug in is not proof that it is suitable. Treat the board model, its required power mode and the supply’s quality as one compatibility check. The official setup and power documentation is the appropriate reference when those details differ.

Pick Ethernet or Wi-Fi deliberately

Ethernet generally makes first access simpler when a wired socket is available: connect the cable before powering the Pi and avoid wireless credentials and radio compatibility as failure points. Wi-Fi removes the cable, but the Pi or wireless adapter must support the network band you intend to use and the country setting must be configured correctly.

Rank #2
Raspberry Pi 15W USB-C Power Supply US - Black
  • USB-C Connector for the latest Raspberry Pi 4 Model B
  • DC 5. 1V 3 Amp Power Supply
  • 15. 3 watts, 1. 5M cable (18AWG)
  • Item Weight: 3.84 ounces
Choice What it provides What to verify
Ethernet A wired path for first boot and ongoing administration. The board has an Ethernet port, or you have a compatible adapter, plus a working cable and router port.
Wi-Fi Network access without a cable. The board or adapter supports the chosen band; the SSID, password and WLAN country are configured in Imager.

Some models and wireless adapters do not support 5 GHz. Raspberry Pi’s configuration documentation also notes that dual-band wireless is disabled until a WLAN country is set. If wireless compatibility is uncertain, use Ethernet for the first connection or verify the exact board and adapter before deployment.

Prepare a headless installation in Raspberry Pi Imager

Imager lets you put the operating system and first-boot settings on the card in one operation. The labels can change slightly between Imager releases, but the sequence is the same.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Install and open Raspberry Pi Imager on another computer. Insert the compatible boot card or drive and make sure you have selected the correct removable device; writing an image erases the selected media.
  2. Choose the Raspberry Pi OS edition. Select Raspberry Pi OS Lite if no local graphical desktop is required. Choose a desktop edition only when local or graphical remote use is part of the design.
  3. Select the storage device. Confirm its capacity and identity before proceeding. Remove other removable drives if you are unsure which one is the target.
  4. Open the operating-system customisation screen. Set a unique hostname that identifies this Pi on your network, create the user account and set a strong, unique password.
  5. Configure the network. For Wi-Fi, enter the exact SSID and password and set the correct WLAN country. For Ethernet, leave wireless unconfigured if it is not needed; the wired cable will provide the first path.
  6. Enable remote access. Choose SSH or Raspberry Pi Connect, according to how you intend to administer the device. Imager supports SSH setup with either a username and password or a public key.
  7. Write the image and safely eject the media. Wait for Imager to finish its verification before removing the card.

Using Imager’s customisation is important on current systems. Do not follow older guides that tell you to copy a wpa_supplicant.conf file into the boot partition: Raspberry Pi’s current configuration guidance says that boot-folder method is unavailable from Raspberry Pi OS Bookworm onwards.

Perform the first boot without a screen

  1. Insert the prepared media into the powered-off Pi.
  2. Connect the network. Plug in Ethernet before power if you are using a cable. With Wi-Fi, place the Pi where the configured network is available.
  3. Attach the matched power supply. Use the supply selected for this board’s required power mode.
  4. Wait for initial startup. Raspberry Pi says first boot can take up to five minutes, depending on the board and SD card. Do not repeatedly remove power during that window simply because the device is not immediately visible.
  5. Connect using the method configured in Imager. With SSH, use the account and hostname you created, for example ssh username@hostname. If the hostname does not resolve on your network, find the Pi’s address in the router’s client list and connect to that address instead. With Raspberry Pi Connect, use the Connect access path configured for the installation.

Once connected, you should be able to administer the Pi entirely remotely. Keep the original hostname, account details and network information in a protected password manager or deployment record; losing them can turn a simple maintenance task into a physical recovery exercise.

SSH or Raspberry Pi Connect: choose the access method that fits

Both methods provide remote control, but they suit different access patterns. SSH is a direct command-line service and is well suited to a Lite installation. Raspberry Pi Connect is an alternative remote-access path that you configure during setup. Neither should be treated as a reason to expose unnecessary services to the public internet.

Rank #3
Sale
RasTech for Raspberry Pi 5 GaN PD 27W Power Supply 5.1V 5A USB-C Pi 5 Power Adapter for Raspberry Pi 5 16GB/8GB/4GB/2GB
  • Standard: The black GaN 27W USB-C PD Power Supply (with 1.3M Length) for Pi 5 Output: 5.1V/5A Input: AC100-240V; It allows the the Pi 5 to power a wider range of peripherals.
  • High Quality Power Solution: This GaN power supply can supply for Raspberry Pi 5 current up to 5.1V/5A to Pi 5 motherboard. In addition, there is no problem that low voltage appears even in full-load power operation.
  • 6-layer Protection Function: Includes various functions such as over-power protection, over-current protection, short-circuit protection, over-voltage protection, low-voltage protection, and electrostatic protection.
  • Good Compatibility: The GaN 27W PD USB-C Power Supply is also capable of delivering [email protected] ,3A @ 9V, 2.25A @ 12V, and 1.8A @ 15V to PD-compatible products, making it a good cost-effective power supply for many general-purpose.Compatible with Raspberry Pi 5 16GB/8GB/4GB/2GB
  • For Pi 5:The total power drawn from the four USB ports on Pi 5 is limited by default to a nominal 600mA; this limit is automatically increased to a nominal 1.6A when the USB-C PD Power Supply is detected.
Factor SSH Raspberry Pi Connect
Best fit Command-line administration, scripts and Raspberry Pi OS Lite. Users who prefer the Raspberry Pi Connect access workflow configured for their device.
Initial setup Enable SSH in Imager and choose password or public-key authentication. Enable and configure Raspberry Pi Connect in the supported setup flow.
Credentials The local Pi account plus the authentication method selected in Imager. The account and authentication used by the Connect service.
Network requirement The Pi must be reachable on the local or otherwise permitted network. The Pi must have network access and the Connect service must be configured.
Graphical desktop Not required; commands work with Raspberry Pi OS Lite. Use only with an operating-system and service combination supported by the Connect setup.

For a small server or automation device, SSH usually keeps the installation simpler because it does not require a desktop. If you need a different remote workflow, follow Raspberry Pi’s current Connect instructions rather than copying settings from an older release.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Secure SSH before putting the Pi into service

Prefer key-based authentication

Raspberry Pi’s operational-security guidance recommends key-based SSH authentication. In Imager, provide the public key for the administrator’s computer when you prepare the image, then retain the corresponding private key securely. A private key should not be copied into scripts, shared chat or an unencrypted notes file.

If you initially enabled password authentication to get the device online, move to key authentication once you have confirmed that the key works. Keep a protected recovery path for the account; locking yourself out remotely is avoidable, but it is easy to do if you disable the only working method before testing the replacement.

Protect the account

Create a unique account name and strong password during Imager customisation. Do not reuse a password from another service. Limit administrative access to the people and automation that actually need it, and remove or disable accounts that are no longer required.

Do not expose SSH by default

A headless Pi does not need to be reachable from the entire internet. Keep SSH on the local network or behind a controlled remote-access path. Raspberry Pi specifically recommends using a firewall to control allowed connections. Permit only the ports and source networks required by the Pi’s role; leave unneeded services disabled and do not publish them through a router merely to make first access easier.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
CanaKit 5V 2.5A Raspberry Pi 3 B+ Power Supply/Adapter (UL Listed)
  • Compatible only with the Raspberry Pi 2, Pi 3 and Pi 3 B+. NOT Compatible with Raspberry Pi 4 or Pi 5
  • UL Listed
  • 5-feet cable with integrated noise filter
  • Micro USB plug
  • Output: 5V DC / 2.5A Regulated Input: 100 - 240VAC

Keep the operating system and services maintained

Separate routine updates from a release upgrade

After connecting, apply the normal package and security updates for the installed Raspberry Pi OS release using your ordinary administrative procedure. Check that the Pi still provides its intended service after updates, especially when it controls hardware or runs a time-sensitive workload.

A routine package update is not the same as moving to a new major OS release. Raspberry Pi’s operational-security documentation says that only the most recent major Raspberry Pi OS release receives all the latest security fixes. Plan a major-version upgrade as a change: make sure the applications and hardware interfaces support it, preserve a recovery path and schedule a maintenance window. Do not assume that unattended upgrades are universally safe for every workload.

Review what is listening

As the Pi’s purpose changes, remove services you no longer use and review firewall rules. A device that only needs SSH should not also accept connections for an unused web panel, file share or discovery service. The fewer reachable services, the fewer configuration and authentication points you must maintain.

Keep access information current

Record the hostname, account owner, authentication method, network connection and board model. Update that record when you change the Wi-Fi network, rotate keys or replace the boot media. Store it somewhere protected but accessible to the people responsible for recovery.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot a Pi you cannot reach

It does not appear on the network

  • Wait the full first-boot period; Raspberry Pi documents up to five minutes depending on board and SD card.
  • Confirm that the card was written and verified by Imager and that the Pi is receiving power from the supply matched to its model.
  • For Ethernet, check both ends of the cable and the router’s client list. If the model has no Ethernet port, verify that the adapter is compatible.
  • For Wi-Fi, recheck the SSID, password and WLAN country. Confirm that the board or adapter supports the configured band; a 5 GHz-only network will not work with hardware that lacks 5 GHz support.
  • Try Ethernet for first access if wireless remains uncertain. This isolates radio configuration from operating-system and power problems.

The hostname fails but the Pi is powered

Hostname discovery depends on how your local network provides name resolution. Look up the address assigned by the router and use that address for SSH, then correct the hostname or network configuration after you are in. Avoid guessing an address that may belong to another device.

Best Value
CanaKit 3.5A Raspberry Pi 4 Power Supply (USB-C)
  • 3.5A USB-C power supply specially designed and tested for the Raspberry Pi 4
  • Includes noise filter for added stability
  • 18 AWG Cable
  • UL Listed
  • 5ft Cable Length

SSH rejects the login

  • Use the exact username created in Imager; it is not necessarily a generic default account.
  • Check whether you selected password or public-key authentication and use the matching credential.
  • For a key, verify that you are offering the private key corresponding to the public key written during setup, and protect its file permissions on the client computer.
  • If you changed authentication remotely, test a second session before closing the working one.

Wi-Fi instructions mention wpa_supplicant.conf

That is an obsolete first-boot path for current Raspberry Pi OS releases. From Bookworm onwards, Raspberry Pi says the boot-partition method is unavailable. Re-image or reconfigure the installation with Raspberry Pi Imager’s current customisation instead of relying on that file.

The screen is blank and you are unsure whether it booted

A headless setup is not expected to provide a local display or input device. Check the network path, allow the documented startup time, inspect the router’s client list and attempt the configured remote-access method. Connecting a monitor temporarily can help diagnose a difficult failure, but it is not required for normal operation.

Plan reliable physical operation

Headless administration does not eliminate physical dependencies. Keep the Pi, its boot media and power connection in a location where you can reach them for a card replacement or a controlled restart. Label the board with its hostname and model so that the correct power supply and recovery media are easy to identify.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The official material used here does not establish a universal thermal limit, SD-card endurance figure, recovery guarantee after abrupt power loss or one unattended-update policy that is safe for every workload. Those decisions depend on the exact board, operating-system release and application. Treat them as separate engineering checks rather than assuming that a headless Pi is automatically suitable for continuous unattended operation.

A practical maintenance checklist

  • Confirm that the board is using the power supply required for its exact model.
  • Keep the hostname, account owner, network details and recovery method documented securely.
  • Use key-based SSH authentication where SSH is enabled, and test the key before retiring password access.
  • Apply routine OS and package updates and verify the device’s service afterward.
  • Track the Raspberry Pi OS major release; only the newest major release receives all the latest security fixes.
  • Use a firewall to allow only the connections the workload needs.
  • Do not expose SSH or unused services directly to the public internet.
  • Recheck Wi-Fi band support and WLAN country settings after changing routers or adapters.
  • Keep a tested recovery path for the boot media and credentials before making disruptive changes.

The safe headless setup in one sequence

Write Raspberry Pi OS with Imager, choose Lite when no desktop is needed, set the hostname and account, configure Wi-Fi or connect Ethernet, and enable SSH or Raspberry Pi Connect. Use the exact board’s required power mode, wait as long as five minutes for first boot, then connect remotely. Once access works, prefer SSH keys, restrict services with a firewall, keep the OS on the newest supported major release and treat upgrades as planned changes. That sequence gives you remote control without making the Pi dependent on a permanently attached monitor or keyboard.

Quick Recap

Bestseller No. 1
CanaKit 45W USB-C Power Supply with PD for Raspberry Pi 5 (27W @ 5A)
CanaKit 45W USB-C Power Supply with PD for Raspberry Pi 5 (27W @ 5A)
CanaKit Power Supply for the Raspberry Pi 5; UL Listed; Includes noise filter for added stability
$15.77
Bestseller No. 2
Raspberry Pi 15W USB-C Power Supply US - Black
Raspberry Pi 15W USB-C Power Supply US - Black
USB-C Connector for the latest Raspberry Pi 4 Model B; DC 5. 1V 3 Amp Power Supply; 15. 3 watts, 1. 5M cable (18AWG)
$15.98
Bestseller No. 4
CanaKit 5V 2.5A Raspberry Pi 3 B+ Power Supply/Adapter (UL Listed)
CanaKit 5V 2.5A Raspberry Pi 3 B+ Power Supply/Adapter (UL Listed)
UL Listed; 5-feet cable with integrated noise filter; Micro USB plug; Output: 5V DC / 2.5A Regulated Input: 100 - 240VAC
$9.99
Bestseller No. 5
CanaKit 3.5A Raspberry Pi 4 Power Supply (USB-C)
CanaKit 3.5A Raspberry Pi 4 Power Supply (USB-C)
3.5A USB-C power supply specially designed and tested for the Raspberry Pi 4; Includes noise filter for added stability
$9.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

headless setupHome ServerLinux securityRaspberry PiRaspberry Pi OSSSH

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.