Skip to content
Reach Docs

Setting Up Cloud Sync

Step 1: Create a Turso Account

Section titled “Step 1: Create a Turso Account”

Head to turso.tech and sign up if you don’t have an account yet. The free tier is more than enough for personal use.

You can also check out the Turso quickstart guide if you want to get familiar with how Turso works before setting it up in Reach.

Step 2: Install the Turso CLI (optional but helpful)

Section titled “Step 2: Install the Turso CLI (optional but helpful)”

The Turso CLI makes it easy to grab your credentials. You don’t strictly need it (you can do everything from the dashboard), but it’s handy.

macOS / Linux:

Terminal window
curl -sSfL https://get.tur.so/install.sh | bash

Windows (PowerShell):

Terminal window
irm https://get.tur.so/install.ps1 | iex

After installing, log in:

Terminal window
turso auth login

This opens your browser to authenticate. Once done, you’re good to go.

For more details, see the Turso CLI reference.

Step 3: Get Your Organization Name

Section titled “Step 3: Get Your Organization Name”

Your org name is basically your account identifier. You can find it in a few ways:

From the dashboard: Log into turso.tech. The org name is in the URL: turso.tech/your-org-name.

From the CLI:

Terminal window
turso org list

This prints your organizations. Use the one you want Reach to create databases in.

Step 4: Create a Platform API Token

Section titled “Step 4: Create a Platform API Token”

Reach needs a Platform API Token to create and manage databases on your Turso account.

From the dashboard: Go to your org settings, find the API Tokens section, and create a new token.

From the CLI:

Terminal window
turso auth api-tokens mint reach-app

This creates a token called “reach-app”. Copy it somewhere safe, you’ll need it in the next step. The token won’t be shown again.

For more on API tokens, see Turso Platform API docs.

Step 5: Enter Credentials in Reach

Section titled “Step 5: Enter Credentials in Reach”

You can do this in two places:

  • During the first-run wizard (Step 2 of setup)
  • Or later in Settings > Sync

Enter your organization name and the API token you just created, then click “Save & Setup”.

Step 6: Done

Section titled “Step 6: Done”

Reach creates a personal database on your Turso account automatically. This stores your encrypted vault data in the cloud.

That’s it. Once set up, your data syncs automatically. New sessions, updated secrets, everything stays in sync.

You can verify the database was created:

Terminal window
turso db list

You should see a database with a name like reach-personal-xxxxx.

Setting Up a Second Device

Section titled “Setting Up a Second Device”
  1. Install Reach on the new device.
  2. Go through the setup wizard.
  3. Enter the same Turso credentials (org name + API token).
  4. Import your identity. Either use a backup file or paste your backup key (you can export it from Settings > Sync > “Export Backup Key” on your original device).
  5. Your vaults will sync down from Turso.

The identity import step is important. Without your encryption keys, the synced data is just encrypted blobs that can’t be read.

A Note About Security

Section titled “A Note About Security”

The Turso credentials are stored locally in your app settings. The API token gives access to create databases on your account, so keep it safe. Don’t share it with anyone you don’t trust with your Turso account.

Section titled “Useful Links”