DEV Community

Yanko Alexandrov
Yanko Alexandrov

Posted on • Originally published at openclawhardware.dev

ClawBox 3.0: Browser OS, Encrypted Backups, and Remote Access for a Personal AI Computer

ClawBox 3.0 is the release where ClawBox stops feeling like “hardware that runs OpenClaw” and starts feeling like a complete personal AI computer.

We build ClawBox as a Jetson-based AI workstation: local-first, always-on, and designed to be managed from a browser instead of a terminal. v3.0 adds the pieces that make that practical for everyday use: a browser OS, encrypted backups, secure remote access, and a cleaner AI provider/model experience.

ClawBox 3.0 desktop with ClawKeep, Remote Control, and ClawBox AI

ClawBox OS: the device desktop in your browser

ClawBox OS is the control surface for the whole box. Open it from a laptop, tablet, or phone and you get apps, windows, chat, settings, backups, remote access, and system tools in one place.

The v3 work focused heavily on making this feel reliable instead of experimental:

  • a smoother setup wizard that walks through real device configuration
  • gateway-aware onboarding while services are still bootstrapping
  • desktop polish across app behavior, icon layout, mobile bars, and refresh handling
  • visible agent activity indicators when the assistant is using tools
  • queued chat input, so messages drain cleanly one at a time
  • model switching that sticks to the active session instead of drifting silently

The product goal is simple: ClawBox should not feel like a Linux box you have to administer. It should feel like your own AI workstation.

ClawKeep: encrypted backups for your AI state

The valuable part of a personal AI assistant is not just the hardware. It is the state: conversations, settings, installed skills, automations, local projects, credentials you configured, and the little pieces of context that make the assistant yours.

ClawKeep is the new encrypted backup system for that state. It creates restic-backed snapshots of the important parts of the device, including chat history, configuration, installed apps/skills, workspace files, and recovery state.

The important detail: encryption happens client-side. The backup is not useful without the device passphrase.

That matters for the moments that usually hurt with self-hosted hardware: SSD replacement, corrupted setup, factory reset, or a full re-flash. Backup is what lets users experiment without being afraid of losing the assistant they have been building.

Remote Control without router setup

ClawBox 3.0 also adds secure remote control using Cloudflare Quick Tunnel.

That means you can reach the box from outside the home or office without opening router ports, setting up dynamic DNS, or managing a separate reverse proxy. The remote access state survives reboot intent, and it routes through the same gateway authentication model.

For a device that is supposed to run as an always-on assistant, remote access is not a luxury feature. It is what makes the box useful when you are away from the desk.

ClawBox AI: cleaner model/provider control

The model/provider flow also got a major cleanup.

v3 consolidates ClawBox AI into a clearer provider path, adds plan-aware access through the OpenClaw portal, improves reasoning-aware controls, and makes model pickers faster with a disk-backed catalog cache.

The broader pattern is what matters: normal users should not have to type provider slugs or debug broken model state, but power users should still be able to choose Anthropic, OpenAI, Google, OpenRouter, local models, or ClawBox AI paths deliberately.

Reliability work that users mostly notice by things not breaking

A lot of v3 is invisible hardening:

  • random per-device gateway auth tokens
  • safer Telegram bot defaults after migration
  • reliable factory reset behavior
  • faster gateway pre-start paths
  • LAN origin allowlist fixes for Windows clients
  • mDNS / Avahi hardening
  • update recovery improvements
  • persistent browser automation profile
  • VNC redeployment during updates

This is the work that turns a dev kit into an appliance.

Why v3 matters

ClawBox 3.0 is the foundation for the next stage of the product: a private, always-on AI computer that can run at home or in an office, keep its own memory, recover safely, and stay reachable wherever the user is.

The full release writeup is here:
https://openclawhardware.dev/blog/2026-05-05-clawbox-v3-os-clawkeep-clawbox-ai

Main site:
https://openclawhardware.dev/

Release notes:

Top comments (0)