From 24b9fe9456bb056a14b30d7f5ce21d2133be1f83 Mon Sep 17 00:00:00 2001
From: Ingo Wolf <me@ingo.au>
Date: Fri, 13 Nov 2026 21:02:38 +1100
Subject: [PATCH 1/3] Set up another device: a QR code and link with the
 server, user, coordinator or settings

The account sheet (Android) and the Settings account card (desktop) gain
"Set up another device": a QR code of a hocket://setup link carrying the
Navidrome server and user, the password only when switched on, and the
coordinator, or without one the account settings changed from their
defaults (packed: zlib + base64url). A new device scans it (Google code
scanner, non-FOSS builds), opens it from the camera, or takes it pasted
into the server field. Links opened from outside only fill the form;
a signed-in device turns them away.

Core: Query::SetupSettings and Command::ApplySetupSettings (account-synced
keys only).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 android/app/build.gradle.kts                  |   5 +
 .../src/foss/java/app/hocket/SetupScanner.kt  |  10 +
 .../src/gms/java/app/hocket/SetupScanner.kt   |  22 ++
 android/app/src/main/AndroidManifest.xml      |   8 +
 .../src/main/java/app/hocket/AppShortcuts.kt  |   8 +
 .../src/main/java/app/hocket/MainActivity.kt  |   6 +
 .../java/app/hocket/ui/icons/HocketIcons.kt   |   4 +
 .../java/app/hocket/ui/nav/AccountSheet.kt    |   9 +-
 .../main/java/app/hocket/ui/nav/AppRoot.kt    |   8 +
 .../app/hocket/ui/nav/SetupDeviceSheet.kt     | 192 ++++++++++++++++++
 .../ui/screens/setup/ServerSetupScreen.kt     |  54 ++++-
 .../app/hocket/ui/screens/setup/SetupLink.kt  | 106 ++++++++++
 android/app/src/main/res/values/strings.xml   |  24 +++
 .../app/hocket/ui/SettingsScreenshotTest.kt   |   2 +-
 .../java/app/hocket/ui/SetupDeviceTest.kt     | 153 ++++++++++++++
 .../hocket/ui/screens/setup/SetupLinkTest.kt  |  72 +++++++
 .../src/main/java/app/hocket/core/Commands.kt |   1 +
 .../java/app/hocket/core/fake/FakeCore.kt     |  14 ++
 android/gradle/libs.versions.toml             |   4 +
 crates/hocket-core/src/api.rs                 |  12 ++
 .../hocket-core/src/core/handlers/command.rs  |   1 +
 .../hocket-core/src/core/handlers/settings.rs |  74 +++++--
 crates/hocket-core/src/core/queries.rs        |   3 +
 crates/hocket-core/src/settings/mod.rs        |  15 ++
 crates/hocket-core/tests/actor_library.rs     |  71 +++++++
 desktop/README.md                             |   2 +-
 desktop/e2e/setup-device.spec.ts              |  81 ++++++++
 desktop/package.json                          |   1 +
 desktop/pnpm-lock.yaml                        |   8 +
 desktop/scripts/gen-icons.mjs                 |   2 +-
 desktop/src/main/fake-core/index.ts           |  31 +++
 desktop/src/main/ipc.test.ts                  |  20 ++
 desktop/src/main/ipc.ts                       |  31 ++-
 desktop/src/preload/index.ts                  |   3 +-
 desktop/src/renderer/App.tsx                  |   7 +
 desktop/src/renderer/components/Dialogs.tsx   |   2 +
 .../renderer/components/SetupDeviceDialog.tsx | 107 ++++++++++
 desktop/src/renderer/components/icons.ts      |   1 +
 desktop/src/renderer/store/app.ts             |  11 +-
 desktop/src/renderer/styles/m3-pages.css      |  15 +-
 desktop/src/renderer/views/Settings.tsx       |   2 +
 desktop/src/renderer/views/Setup.tsx          |  55 ++++-
 desktop/src/shared/bridge-types.ts            |  24 +++
 desktop/src/shared/deep-link.test.ts          |  30 +++
 desktop/src/shared/deep-link.ts               |  58 +++++-
 desktop/src/shared/setup-settings.test.ts     |  31 +++
 desktop/src/shared/setup-settings.ts          |  53 +++++
 desktop/src/shared/strings.ts                 |  21 ++
 scripts/gen-android-icons.mjs                 |   3 +
 49 files changed, 1434 insertions(+), 43 deletions(-)
 create mode 100644 android/app/src/foss/java/app/hocket/SetupScanner.kt
 create mode 100644 android/app/src/gms/java/app/hocket/SetupScanner.kt
 create mode 100644 android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
 create mode 100644 android/app/src/main/java/app/hocket/ui/screens/setup/SetupLink.kt
 create mode 100644 android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
 create mode 100644 android/app/src/test/java/app/hocket/ui/screens/setup/SetupLinkTest.kt
 create mode 100644 desktop/e2e/setup-device.spec.ts
 create mode 100644 desktop/src/renderer/components/SetupDeviceDialog.tsx
 create mode 100644 desktop/src/shared/setup-settings.test.ts
 create mode 100644 desktop/src/shared/setup-settings.ts

diff --git a/android/app/build.gradle.kts b/android/app/build.gradle.kts
index 45f8cdf3..eb286414 100644
--- a/android/app/build.gradle.kts
+++ b/android/app/build.gradle.kts
@@ -99,6 +99,11 @@ dependencies {
     implementation(project(":core"))
     implementation(project(":playback"))
     if (!foss) implementation(project(":cast"))
+    // Scanning another device's setup code with Google's code scanner (no camera permission). A
+    // FOSS build leaves it out: the system camera opens the code's hocket://setup link instead.
+    if (!foss) implementation(libs.play.services.code.scanner)
+    // Drawing the setup code (pure Java, so FOSS builds keep it).
+    implementation(libs.zxing.core)
 
     implementation(libs.androidx.core.ktx)
     implementation(libs.androidx.core.splashscreen)
diff --git a/android/app/src/foss/java/app/hocket/SetupScanner.kt b/android/app/src/foss/java/app/hocket/SetupScanner.kt
new file mode 100644
index 00000000..226a7a04
--- /dev/null
+++ b/android/app/src/foss/java/app/hocket/SetupScanner.kt
@@ -0,0 +1,10 @@
+package app.hocket
+
+import android.content.Context
+
+/** A FOSS build has no in-app scanner: the system camera opens a setup code's hocket://setup link. */
+internal object SetupScanner {
+    const val available = false
+
+    fun scan(context: Context, onResult: (String) -> Unit, onError: () -> Unit) = Unit
+}
diff --git a/android/app/src/gms/java/app/hocket/SetupScanner.kt b/android/app/src/gms/java/app/hocket/SetupScanner.kt
new file mode 100644
index 00000000..97f14f94
--- /dev/null
+++ b/android/app/src/gms/java/app/hocket/SetupScanner.kt
@@ -0,0 +1,22 @@
+package app.hocket
+
+import android.content.Context
+import com.google.mlkit.vision.barcode.common.Barcode
+import com.google.mlkit.vision.codescanner.GmsBarcodeScannerOptions
+import com.google.mlkit.vision.codescanner.GmsBarcodeScanning
+
+/**
+ * Scanning another device's setup code with Google's code scanner: Play services draws the
+ * camera UI, so the app needs no camera permission. [onResult] gets the code's text, [onError] runs
+ * when the scanner could not start (no camera, its module not downloaded yet); cancelling calls neither.
+ */
+internal object SetupScanner {
+    const val available = true
+
+    fun scan(context: Context, onResult: (String) -> Unit, onError: () -> Unit) {
+        val options = GmsBarcodeScannerOptions.Builder().setBarcodeFormats(Barcode.FORMAT_QR_CODE).build()
+        GmsBarcodeScanning.getClient(context, options).startScan()
+            .addOnSuccessListener { code -> code.rawValue?.let(onResult) }
+            .addOnFailureListener { onError() }
+    }
+}
diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index 23dc1c3a..fc169086 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -83,6 +83,14 @@
                 <category android:name="android.intent.category.APP_MUSIC" />
                 <category android:name="android.intent.category.DEFAULT" />
             </intent-filter>
+            <!-- Another device's setup code (Set up another device): hocket://setup?server=…, from
+                 the system camera, a shared link or the in-app scanner (SetupLink). -->
+            <intent-filter>
+                <action android:name="android.intent.action.VIEW" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <category android:name="android.intent.category.BROWSABLE" />
+                <data android:scheme="hocket" android:host="setup" />
+            </intent-filter>
         </activity>
         <!-- Assistant's discovery intent ("play … on Hocket"): no UI, finishes once it has played or
              handed the query to search (MediaSearchActivity; plays directly only with "Allow control
diff --git a/android/app/src/main/java/app/hocket/AppShortcuts.kt b/android/app/src/main/java/app/hocket/AppShortcuts.kt
index 8a7a2d58..30f11963 100644
--- a/android/app/src/main/java/app/hocket/AppShortcuts.kt
+++ b/android/app/src/main/java/app/hocket/AppShortcuts.kt
@@ -115,4 +115,12 @@ object AppLinks {
     fun openSearch(query: String?) { _search.value = SearchLink(query?.takeIf { it.isNotBlank() }) }
 
     fun consume(link: SearchLink) { _search.compareAndSet(link, null) }
+
+    private val _setup = MutableStateFlow<app.hocket.ui.screens.setup.SetupLink?>(null)
+    /** Another device's setup link (hocket://setup), until setup applies it or the shell turns it away. */
+    val setup: StateFlow<app.hocket.ui.screens.setup.SetupLink?> = _setup.asStateFlow()
+
+    fun openSetup(link: app.hocket.ui.screens.setup.SetupLink) { _setup.value = link }
+
+    fun consume(link: app.hocket.ui.screens.setup.SetupLink) { _setup.compareAndSet(link, null) }
 }
diff --git a/android/app/src/main/java/app/hocket/MainActivity.kt b/android/app/src/main/java/app/hocket/MainActivity.kt
index 0a5f9bed..31e101d0 100644
--- a/android/app/src/main/java/app/hocket/MainActivity.kt
+++ b/android/app/src/main/java/app/hocket/MainActivity.kt
@@ -192,6 +192,12 @@ class MainActivity : ComponentActivity() {
      * handled one is cleared.
      */
     private fun handleShortcut(intent: Intent?) {
+        if (intent?.action == Intent.ACTION_VIEW) {
+            // Another device's setup code (hocket://setup), once, as for shortcuts.
+            app.hocket.ui.screens.setup.SetupLink.parse(intent.dataString)?.let(AppLinks::openSetup)
+            setIntent(Intent(intent).setAction(Intent.ACTION_MAIN).setData(null))
+            return
+        }
         val shortcut = AppShortcuts.parse(this, intent) ?: return
         setIntent(Intent(intent).setAction(Intent.ACTION_MAIN).replaceExtras(null as android.os.Bundle?))
         (application as HocketApp).runShortcut(shortcut)
diff --git a/android/app/src/main/java/app/hocket/ui/icons/HocketIcons.kt b/android/app/src/main/java/app/hocket/ui/icons/HocketIcons.kt
index baeef405..ffcbcac8 100644
--- a/android/app/src/main/java/app/hocket/ui/icons/HocketIcons.kt
+++ b/android/app/src/main/java/app/hocket/ui/icons/HocketIcons.kt
@@ -129,6 +129,8 @@ object HocketIcons {
         val Chromecast2: ImageVector by lazy { symbol("Filled.Chromecast2", "M 9 21 Q 6.075 21 4.038 18.963 Q 2.001 16.926 2 14 Q 2 11.35 3.713 9.388 Q 5.426 7.426 8 7.074 L 8 5.7 Q 8 4.15 9.075 3.075 Q 10.15 2 11.7 2 Q 12.55 2 13.313 2.375 Q 14.076 2.75 14.6 3.4 L 19.775 9.925 Q 20.075 9.8 20.4 9.863 Q 20.725 9.926 20.95 10.2 L 22.475 12.125 Q 22.75 12.45 22.687 12.85 Q 22.624 13.25 22.3 13.525 L 21.125 14.45 Q 20.8 14.725 20.4 14.675 Q 20 14.625 19.725 14.3 L 18.225 12.375 Q 18 12.1 18 11.763 Q 18 11.426 18.2 11.15 L 13.025 4.625 Q 12.775 4.325 12.438 4.163 Q 12.101 4.001 11.7 4 Q 10.975 4 10.488 4.488 Q 10.001 4.976 10 5.7 L 10 7.075 Q 12.575 7.425 14.288 9.388 Q 16.001 11.351 16 14 Q 16 16.925 13.963 18.963 Q 11.926 21.001 9 21 M 9 19 Q 11.075 19 12.538 17.537 Q 14.001 16.074 14 14 Q 13.999 11.926 12.537 10.463 Q 11.075 9 9 9 Q 6.925 9 5.463 10.463 Q 4.001 11.926 4 14 Q 3.999 16.074 5.463 17.538 Q 6.927 19.002 9 19") }
         val ChromecastDevice: ImageVector by lazy { symbol("Filled.ChromecastDevice", "M 21 14.5 Q 20.575 14.5 20.288 14.212 Q 20.001 13.924 20 13.5 L 20 10.5 Q 20 10.075 20.288 9.788 Q 20.576 9.501 21 9.5 L 22 9.5 Q 22.425 9.5 22.713 9.788 Q 23.001 10.076 23 10.5 L 23 13.5 Q 23 13.925 22.712 14.213 Q 22.424 14.501 22 14.5 Z M 17 16 L 11 16 Q 10.6 16 10.188 16.113 Q 9.776 16.226 9.15 16.5 Q 8.175 16.925 7.475 17.088 Q 6.775 17.251 6 17.25 Q 4.05 17.25 2.525 16.1 Q 1 14.95 1 13.5 L 1 10.5 Q 1 9.025 2.525 7.887 Q 4.05 6.749 6 6.75 Q 6.775 6.75 7.475 6.913 Q 8.175 7.076 9.15 7.5 Q 9.775 7.775 10.188 7.888 Q 10.601 8.001 11 8 L 17 8 Q 17.825 8 18.413 8.588 Q 19.001 9.176 19 10 L 19 14 Q 19 14.825 18.413 15.413 Q 17.826 16.001 17 16 M 2.5 12.5 L 3.5 12.5 Q 3.7 12.5 3.85 12.35 Q 4 12.2 4 12 Q 4 11.8 3.85 11.65 Q 3.7 11.5 3.5 11.5 L 2.5 11.5 Q 2.3 11.5 2.15 11.65 Q 2 11.8 2 12 Q 2 12.2 2.15 12.35 Q 2.3 12.5 2.5 12.5") }
         val NestWifiPoint: ImageVector by lazy { symbol("Filled.NestWifiPoint", "M 9 21 Q 6.5 21 4.75 19.25 Q 3 17.5 3 15 L 3 9 Q 3 6.5 4.75 4.75 Q 6.5 3 9 3 L 15 3 Q 17.5 3 19.25 4.75 Q 21 6.5 21 9 L 21 15 Q 21 17.5 19.25 19.25 Q 17.5 21 15 21 Z M 9 19 Q 9 18.575 9.288 18.288 Q 9.576 18.001 10 18 Q 10.424 17.999 10.713 18.288 Q 11.002 18.577 11 19 L 13 19 Q 13 18.575 13.288 18.288 Q 13.576 18.001 14 18 Q 14.424 17.999 14.713 18.288 Q 15.002 18.577 15 19 Q 16.125 19 17.025 18.45 Q 17.925 17.9 18.45 17 L 17 17 Q 17 17.425 16.712 17.713 Q 16.424 18.001 16 18 Q 15.576 17.999 15.288 17.712 Q 15 17.425 15 17 L 13 17 Q 13 17.425 12.712 17.713 Q 12.424 18.001 12 18 Q 11.576 17.999 11.288 17.712 Q 11 17.425 11 17 L 9 17 Q 9 17.425 8.712 17.713 Q 8.424 18.001 8 18 Q 7.576 17.999 7.288 17.712 Q 7 17.425 7 17 L 5.55 17 Q 6.075 17.9 6.975 18.45 Q 7.875 19 9 19") }
+        val QrCode2: ImageVector by lazy { symbol("Filled.QrCode2", "M 13 21 L 13 19 L 15 19 L 15 21 Z M 11 19 L 11 14 L 13 14 L 13 19 Z M 19 16 L 19 12 L 21 12 L 21 16 Z M 17 12 L 17 10 L 19 10 L 19 12 Z M 5 14 L 5 12 L 7 12 L 7 14 Z M 3 12 L 3 10 L 5 10 L 5 12 Z M 12 5 L 12 3 L 14 3 L 14 5 Z M 4.5 7.5 L 7.5 7.5 L 7.5 4.5 L 4.5 4.5 Z M 3 8 L 3 4 Q 3 3.575 3.288 3.288 Q 3.576 3.001 4 3 L 8 3 Q 8.425 3 8.713 3.288 Q 9.001 3.576 9 4 L 9 8 Q 9 8.425 8.712 8.713 Q 8.424 9.001 8 9 L 4 9 Q 3.575 9 3.288 8.712 Q 3.001 8.424 3 8 M 4.5 19.5 L 7.5 19.5 L 7.5 16.5 L 4.5 16.5 Z M 3 20 L 3 16 Q 3 15.575 3.288 15.288 Q 3.576 15.001 4 15 L 8 15 Q 8.425 15 8.713 15.288 Q 9.001 15.576 9 16 L 9 20 Q 9 20.425 8.712 20.713 Q 8.424 21.001 8 21 L 4 21 Q 3.575 21 3.288 20.712 Q 3.001 20.424 3 20 M 16.5 7.5 L 19.5 7.5 L 19.5 4.5 L 16.5 4.5 Z M 15 8 L 15 4 Q 15 3.575 15.288 3.288 Q 15.576 3.001 16 3 L 20 3 Q 20.425 3 20.713 3.288 Q 21.001 3.576 21 4 L 21 8 Q 21 8.425 20.712 8.713 Q 20.424 9.001 20 9 L 16 9 Q 15.575 9 15.288 8.712 Q 15.001 8.424 15 8 M 17 21 L 17 18 L 15 18 L 15 16 L 19 16 L 19 19 L 21 19 L 21 21 Z M 13 14 L 13 12 L 17 12 L 17 14 Z M 9 14 L 9 12 L 7 12 L 7 10 L 13 10 L 13 12 L 11 12 L 11 14 Z M 10 9 L 10 5 L 12 5 L 12 7 L 14 7 L 14 9 Z M 5.25 6.75 L 5.25 5.25 L 6.75 5.25 L 6.75 6.75 Z M 5.25 18.75 L 5.25 17.25 L 6.75 17.25 L 6.75 18.75 Z M 17.25 6.75 L 17.25 5.25 L 18.75 5.25 L 18.75 6.75 Z") }
+        val QrCodeScanner: ImageVector by lazy { symbol("Filled.QrCodeScanner", "M 3 7 Q 2.575 7 2.288 6.712 Q 2.001 6.424 2 6 L 2 3 Q 2 2.575 2.288 2.288 Q 2.576 2.001 3 2 L 6 2 Q 6.425 2 6.713 2.288 Q 7.001 2.576 7 3 Q 6.999 3.424 6.712 3.713 Q 6.425 4.002 6 4 L 4 4 L 4 6 Q 4 6.425 3.712 6.713 Q 3.424 7.001 3 7 M 3 22 Q 2.575 22 2.288 21.712 Q 2.001 21.424 2 21 L 2 18 Q 2 17.575 2.288 17.288 Q 2.576 17.001 3 17 Q 3.424 16.999 3.713 17.288 Q 4.002 17.577 4 18 L 4 20 L 6 20 Q 6.425 20 6.713 20.288 Q 7.001 20.576 7 21 Q 6.999 21.424 6.712 21.713 Q 6.425 22.002 6 22 Z M 18 22 Q 17.575 22 17.288 21.712 Q 17.001 21.424 17 21 Q 16.999 20.576 17.288 20.288 Q 17.577 20 18 20 L 20 20 L 20 18 Q 20 17.575 20.288 17.288 Q 20.576 17.001 21 17 Q 21.424 16.999 21.713 17.288 Q 22.002 17.577 22 18 L 22 21 Q 22 21.425 21.712 21.713 Q 21.424 22.001 21 22 Z M 20.288 6.712 Q 20 6.425 20 6 L 20 4 L 18 4 Q 17.575 4 17.288 3.712 Q 17.001 3.424 17 3 Q 16.999 2.576 17.288 2.288 Q 17.577 2 18 2 L 21 2 Q 21.425 2 21.713 2.288 Q 22.001 2.576 22 3 L 22 6 Q 22 6.425 21.712 6.713 Q 21.424 7.001 21 7 Q 20.576 6.999 20.288 6.712 M 17.5 19 L 17.5 17.5 L 19 17.5 L 19 19 Z M 17.5 16 L 17.5 14.5 L 19 14.5 L 19 16 Z M 16 17.5 L 16 16 L 17.5 16 L 17.5 17.5 Z M 14.5 19 L 14.5 17.5 L 16 17.5 L 16 19 Z M 13 17.5 L 13 16 L 14.5 16 L 14.5 17.5 Z M 16 14.5 L 16 13 L 17.5 13 L 17.5 14.5 Z M 14.5 16 L 14.5 14.5 L 16 14.5 L 16 16 Z M 13 14.5 L 13 13 L 14.5 13 L 14.5 14.5 Z M 14 11 Q 13.575 11 13.288 10.712 Q 13.001 10.424 13 10 L 13 6 Q 13 5.575 13.288 5.288 Q 13.576 5.001 14 5 L 18 5 Q 18.425 5 18.713 5.288 Q 19.001 5.576 19 6 L 19 10 Q 19 10.425 18.712 10.713 Q 18.424 11.001 18 11 Z M 6 19 Q 5.575 19 5.288 18.712 Q 5.001 18.424 5 18 L 5 14 Q 5 13.575 5.288 13.288 Q 5.576 13.001 6 13 L 10 13 Q 10.425 13 10.713 13.288 Q 11.001 13.576 11 14 L 11 18 Q 11 18.425 10.712 18.713 Q 10.424 19.001 10 19 Z M 6 11 Q 5.575 11 5.288 10.712 Q 5.001 10.424 5 10 L 5 6 Q 5 5.575 5.288 5.288 Q 5.576 5.001 6 5 L 10 5 Q 10.425 5 10.713 5.288 Q 11.001 5.576 11 6 L 11 10 Q 11 10.425 10.712 10.713 Q 10.424 11.001 10 11 Z M 6.5 17.5 L 9.5 17.5 L 9.5 14.5 L 6.5 14.5 Z M 6.5 9.5 L 9.5 9.5 L 9.5 6.5 L 6.5 6.5 Z M 14.5 9.5 L 17.5 9.5 L 17.5 6.5 L 14.5 6.5 Z") }
     }
     object Outlined {
         val Album: ImageVector by lazy { symbol("Outlined.Album", "M 12 16.5 Q 13.875 16.5 15.188 15.188 Q 16.501 13.876 16.5 12 Q 16.499 10.124 15.188 8.813 Q 13.877 7.502 12 7.5 Q 10.123 7.498 8.813 8.813 Q 7.503 10.128 7.5 12 Q 7.497 13.872 8.813 15.188 Q 10.129 16.504 12 16.5 M 11.288 12.713 Q 11 12.425 11 12 Q 11 11.575 11.288 11.288 Q 11.576 11.001 12 11 Q 12.424 10.999 12.713 11.288 Q 13.002 11.577 13 12 Q 12.998 12.423 12.712 12.713 Q 12.426 13.003 12 13 Q 11.574 12.997 11.288 12.712 M 12 22 Q 9.925 22 8.1 21.212 Q 6.275 20.424 4.925 19.075 Q 3.575 17.726 2.788 15.9 Q 2.001 14.074 2 12 Q 1.999 9.926 2.788 8.1 Q 3.577 6.274 4.925 4.925 Q 6.273 3.576 8.1 2.788 Q 9.927 2 12 2 Q 14.073 2 15.9 2.788 Q 17.727 3.576 19.075 4.925 Q 20.423 6.274 21.213 8.1 Q 22.003 9.926 22 12 Q 21.997 14.074 21.212 15.9 Q 20.427 17.726 19.075 19.075 Q 17.723 20.424 15.9 21.213 Q 14.077 22.002 12 22 M 12 20 Q 15.35 20 17.675 17.675 Q 20 15.35 20 12 Q 20 8.65 17.675 6.325 Q 15.35 4 12 4 Q 8.65 4 6.325 6.325 Q 4 8.65 4 12 Q 4 15.35 6.325 17.675 Q 8.65 20 12 20 M 12 12") }
@@ -318,6 +320,8 @@ object HocketIcons {
             Filled.Chromecast2,
             Filled.ChromecastDevice,
             Filled.NestWifiPoint,
+            Filled.QrCode2,
+            Filled.QrCodeScanner,
             Outlined.Album,
             Outlined.BarChart,
             Outlined.Category,
diff --git a/android/app/src/main/java/app/hocket/ui/nav/AccountSheet.kt b/android/app/src/main/java/app/hocket/ui/nav/AccountSheet.kt
index a911bb27..811e1e2c 100644
--- a/android/app/src/main/java/app/hocket/ui/nav/AccountSheet.kt
+++ b/android/app/src/main/java/app/hocket/ui/nav/AccountSheet.kt
@@ -94,8 +94,8 @@ fun OfflineIndicator(modifier: Modifier = Modifier) {
 }
 
 /**
- * Who is signed in where, then Settings, Listening stats and Devices (the Connect picker), the
- * places not in the bottom bar (so every place stays reachable) and the bar editor.
+ * Who is signed in where, then Settings, Listening stats, Devices (the Connect picker) and Set up
+ * another device ([SetupDeviceSheet]), the places not in the bottom bar (so every place stays reachable) and the bar editor.
  */
 @OptIn(ExperimentalMaterial3Api::class)
 @Composable
@@ -104,12 +104,13 @@ fun AccountSheet(
     onSettings: () -> Unit,
     onStats: () -> Unit,
     onDevices: () -> Unit,
+    onSetUpDevice: () -> Unit,
     onPlace: (NavItem) -> Unit,
     onEditBar: () -> Unit,
     onDismiss: () -> Unit,
 ) {
     ModalBottomSheet(onDismissRequest = onDismiss, sheetState = rememberModalBottomSheetState(skipPartiallyExpanded = true), modifier = Modifier.testTag("account.sheet")) {
-        AccountSheetContent(barItems, onSettings, onStats, onDevices, onPlace, onEditBar)
+        AccountSheetContent(barItems, onSettings, onStats, onDevices, onSetUpDevice, onPlace, onEditBar)
     }
 }
 
@@ -120,6 +121,7 @@ fun AccountSheetContent(
     onSettings: () -> Unit,
     onStats: () -> Unit,
     onDevices: () -> Unit,
+    onSetUpDevice: () -> Unit,
     onPlace: (NavItem) -> Unit,
     onEditBar: () -> Unit,
 ) {
@@ -142,6 +144,7 @@ fun AccountSheetContent(
         SheetRow(HocketIcons.Filled.Settings, stringResource(R.string.account_settings), "account.settings", onSettings)
         SheetRow(HocketIcons.Filled.BarChart, stringResource(R.string.account_stats), "account.stats", onStats)
         SheetRow(HocketIcons.Filled.Devices, stringResource(R.string.account_devices), "account.devices", onDevices)
+        SheetRow(HocketIcons.Filled.QrCode2, stringResource(R.string.account_set_up_device), "account.setUpDevice", onSetUpDevice)
         val others = NavItem.entries.filter { it !in barItems && it != NavItem.Stats }
         if (others.isNotEmpty()) {
             HorizontalDivider(Modifier.padding(vertical = 4.dp))
diff --git a/android/app/src/main/java/app/hocket/ui/nav/AppRoot.kt b/android/app/src/main/java/app/hocket/ui/nav/AppRoot.kt
index 218bda2d..4f6ef4d0 100644
--- a/android/app/src/main/java/app/hocket/ui/nav/AppRoot.kt
+++ b/android/app/src/main/java/app/hocket/ui/nav/AppRoot.kt
@@ -416,6 +416,11 @@ private fun MainShell(snackbar: SnackbarHostState) {
     val client = LocalCoreClient.current
     val nowPlaying = client.nowPlaying.collectAsStateWithLifecycle()
     val playerVisible by remember { derivedStateOf { nowPlaying.value != null } }
+    // Another device's setup code opened while this one is signed in: setup is where it applies.
+    val alreadySetUp = stringResource(R.string.setup_device_already_set_up)
+    LaunchedEffect(Unit) {
+        app.hocket.AppLinks.setup.collect { link -> if (link != null) { app.hocket.AppLinks.consume(link); snackbar.showSnackbar(alreadySetUp) } }
+    }
     BoxWithConstraints(Modifier.fillMaxSize()) {
         // The phone's bar: the compact floating pill, or the standard full-width bar.
         val floatingBar = setting(SettingKeys.DISPLAY_FLOATING_NAV_BAR).bool ?: true
@@ -470,6 +475,7 @@ private fun MainShell(snackbar: SnackbarHostState) {
             var accountOpen by rememberSaveable { mutableStateOf(false) }
             var editorOpen by rememberSaveable { mutableStateOf(false) }
             var devicesOpen by rememberSaveable { mutableStateOf(false) }
+            var setUpDeviceOpen by rememberSaveable { mutableStateOf(false) }
             // The phone navigation bar's height (including the edge-to-edge navigation-bar inset), so
             // the content column ends above it and the sheet's collapsed anchor sits on it. Known from
             // the first frame (fixed height + inset); the measurement only corrects it when it differs.
@@ -823,6 +829,7 @@ private fun MainShell(snackbar: SnackbarHostState) {
                     onSettings = { accountOpen = false; nav.navigate(Route.Settings) { launchSingleTop = true } },
                     onStats = { accountOpen = false; go(NavItem.Stats) },
                     onDevices = { accountOpen = false; devicesOpen = true },
+                    onSetUpDevice = { accountOpen = false; setUpDeviceOpen = true },
                     onPlace = { accountOpen = false; go(it) },
                     onEditBar = { accountOpen = false; editorOpen = true },
                     onDismiss = { accountOpen = false },
@@ -830,6 +837,7 @@ private fun MainShell(snackbar: SnackbarHostState) {
             }
             if (editorOpen) BottomBarEditorSheet(onDismiss = { editorOpen = false })
             if (devicesOpen) app.hocket.ui.player.HandoffSheet(onDismiss = { devicesOpen = false })
+            if (setUpDeviceOpen) SetupDeviceSheet(onDismiss = { setUpDeviceOpen = false })
             }
         }
     }
diff --git a/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt b/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
new file mode 100644
index 00000000..f482a69e
--- /dev/null
+++ b/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
@@ -0,0 +1,192 @@
+package app.hocket.ui.nav
+
+import android.content.Intent
+import androidx.compose.foundation.Canvas
+import androidx.compose.foundation.background
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.aspectRatio
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.navigationBarsPadding
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.layout.size
+import androidx.compose.foundation.layout.widthIn
+import androidx.compose.foundation.rememberScrollState
+import androidx.compose.foundation.selection.toggleable
+import androidx.compose.foundation.shape.RoundedCornerShape
+import androidx.compose.foundation.verticalScroll
+import androidx.compose.material3.ButtonDefaults
+import androidx.compose.material3.ExperimentalMaterial3Api
+import androidx.compose.material3.Icon
+import androidx.compose.material3.ListItem
+import androidx.compose.material3.ListItemDefaults
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.ModalBottomSheet
+import androidx.compose.material3.OutlinedButton
+import androidx.compose.material3.Switch
+import androidx.compose.material3.Text
+import androidx.compose.material3.rememberModalBottomSheetState
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.produceState
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.setValue
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.clip
+import androidx.compose.ui.geometry.Offset
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.platform.LocalContext
+import androidx.compose.ui.platform.testTag
+import androidx.compose.ui.res.pluralStringResource
+import androidx.compose.ui.res.stringResource
+import androidx.compose.ui.semantics.Role
+import androidx.compose.ui.semantics.contentDescription
+import androidx.compose.ui.semantics.heading
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.semantics.stateDescription
+import androidx.compose.ui.unit.dp
+import androidx.lifecycle.compose.collectAsStateWithLifecycle
+import app.hocket.R
+import app.hocket.core.HocketJson
+import app.hocket.core.api.Query
+import app.hocket.core.api.QueryResult
+import app.hocket.core.api.ServerInfo
+import app.hocket.playback.CoreHost
+import app.hocket.ui.LocalCoreClient
+import app.hocket.ui.icons.HocketIcons
+import app.hocket.ui.screens.setup.SetupLink
+import com.google.zxing.BarcodeFormat
+import com.google.zxing.EncodeHintType
+import com.google.zxing.common.BitMatrix
+import com.google.zxing.qrcode.QRCodeWriter
+import com.google.zxing.qrcode.decoder.ErrorCorrectionLevel
+import kotlinx.serialization.json.jsonObject
+
+/**
+ * Set up another device, from the account sheet: a QR code of this device's [SetupLink] (the
+ * server, who is signed in, the coordinator when there is one, and the password only when the
+ * person switches it on), which Hocket's setup scanner or a phone camera opens on the other
+ * device; Share link sends the same link (to a computer, say). Off by default, the password is
+ * read from the keystore only while it is on.
+ */
+@OptIn(ExperimentalMaterial3Api::class)
+@Composable
+fun SetupDeviceSheet(onDismiss: () -> Unit) {
+    ModalBottomSheet(onDismissRequest = onDismiss, sheetState = rememberModalBottomSheetState(skipPartiallyExpanded = true), modifier = Modifier.testTag("setupDevice.sheet")) {
+        val client = LocalCoreClient.current
+        val server by client.server.collectAsStateWithLifecycle()
+        val connection by client.connection.collectAsStateWithLifecycle()
+        val coordinatorUrl = connection.coordinatorUrl?.takeIf { it.isNotBlank() }
+        // Without a coordinator the settings ride in the link; null while the core answers.
+        val settings by produceState<String?>(null, coordinatorUrl) {
+            value = if (coordinatorUrl != null) null else (client.query(Query.SetupSettings) as? QueryResult.Text)?.data
+        }
+        server?.let { SetupDeviceSheetContent(it, coordinatorUrl, settings) }
+    }
+}
+
+/** The longest link the code carries; past it the settings stay out of the code (Share link keeps them). */
+internal const val MAX_CODE_LINK = 1800
+
+/**
+ * The sheet's content for [server] (also drawn on its own by tests). [settings] is
+ * `Query.SetupSettings` (a JSON object), for a device without a coordinator.
+ */
+@Composable
+fun SetupDeviceSheetContent(server: ServerInfo, coordinatorUrl: String?, settings: String? = null) {
+    val context = LocalContext.current
+    var includePassword by remember { mutableStateOf(false) }
+    // The keystore read happens only once the person asks for the password to go in.
+    val password = remember(server.url, server.username, includePassword) {
+        if (includePassword) CoreHost.credentials?.get(server.url, server.username)?.password else null
+    }
+    val passwordAvailable = remember(server.url, server.username) { CoreHost.credentials?.get(server.url, server.username) != null }
+    val coordinator = coordinatorUrl?.takeIf { it.isNotBlank() }
+    val settingsCount = remember(settings) { settings?.let { runCatching { HocketJson.json.parseToJsonElement(it).jsonObject.size }.getOrNull() } ?: 0 }
+    val carried = settings?.takeIf { coordinator == null && settingsCount > 0 }
+    val link = SetupLink(server.url, server.username, password, coordinator, carried).format()
+    // A code past this many characters gets too dense to scan off a screen: it leaves the settings out.
+    val codeLink = if (link.length <= MAX_CODE_LINK) link else SetupLink(server.url, server.username, password, coordinator).format()
+    val host = server.url.removePrefix("https://").removePrefix("http://")
+
+    Column(Modifier.verticalScroll(rememberScrollState()).navigationBarsPadding().padding(start = 24.dp, end = 24.dp, bottom = 24.dp), horizontalAlignment = Alignment.CenterHorizontally) {
+        Text(stringResource(R.string.setup_device_title), style = MaterialTheme.typography.titleLarge, modifier = Modifier.fillMaxWidth().semantics { heading() })
+        Text(stringResource(R.string.setup_device_body), style = MaterialTheme.typography.bodyMedium, color = MaterialTheme.colorScheme.onSurfaceVariant, modifier = Modifier.fillMaxWidth().padding(top = 4.dp, bottom = 20.dp))
+        // Dark modules on white in either theme: scanners expect a light quiet zone around a dark code.
+        val codeDescription = stringResource(R.string.setup_device_code, host)
+        Box(
+            Modifier.widthIn(max = 280.dp).fillMaxWidth().aspectRatio(1f).clip(RoundedCornerShape(24.dp)).background(Color.White).padding(20.dp)
+                .semantics { contentDescription = codeDescription }.testTag("setupDevice.code"),
+        ) {
+            QrCode(codeLink, Modifier.fillMaxWidth().aspectRatio(1f))
+        }
+        Column(Modifier.fillMaxWidth().padding(top = 16.dp)) {
+            InfoRow(stringResource(R.string.setup_device_server), stringResource(R.string.account_signed_in, server.username, host))
+            InfoRow(stringResource(R.string.setup_device_coordinator), coordinator ?: stringResource(R.string.setup_device_no_coordinator), tag = "setupDevice.coordinator")
+            InfoRow(
+                stringResource(R.string.setup_device_settings),
+                when {
+                    coordinator != null -> stringResource(R.string.setup_device_settings_synced)
+                    carried == null -> stringResource(R.string.setup_device_settings_none)
+                    codeLink != link -> stringResource(R.string.setup_device_settings_too_many)
+                    else -> pluralStringResource(R.plurals.setup_device_settings_count, settingsCount, settingsCount)
+                },
+                tag = "setupDevice.settings",
+            )
+            val on = includePassword && password != null
+            ListItem(
+                headlineContent = { Text(stringResource(R.string.setup_device_include_password)) },
+                supportingContent = {
+                    Text(stringResource(when {
+                        !passwordAvailable -> R.string.setup_device_password_unavailable
+                        on -> R.string.setup_device_include_password_on
+                        else -> R.string.setup_device_include_password_off
+                    }), color = if (on) MaterialTheme.colorScheme.error else MaterialTheme.colorScheme.onSurfaceVariant)
+                },
+                trailingContent = { Switch(checked = on, onCheckedChange = null, enabled = passwordAvailable) },
+                colors = ListItemDefaults.colors(containerColor = Color.Transparent),
+                modifier = Modifier.toggleable(value = on, enabled = passwordAvailable, role = Role.Switch) { includePassword = it }.testTag("setupDevice.includePassword"),
+            )
+        }
+        OutlinedButton(
+            onClick = {
+                val send = Intent(Intent.ACTION_SEND).apply { type = "text/plain"; putExtra(Intent.EXTRA_TEXT, link) }
+                context.startActivity(Intent.createChooser(send, null))
+            },
+            shapes = ButtonDefaults.shapes(), modifier = Modifier.padding(top = 8.dp).testTag("setupDevice.share"),
+        ) {
+            Icon(HocketIcons.Filled.Share, null, Modifier.size(ButtonDefaults.IconSize))
+            Text(stringResource(R.string.setup_device_share), Modifier.padding(start = ButtonDefaults.IconSpacing))
+        }
+    }
+}
+
+@Composable
+private fun InfoRow(label: String, value: String, tag: String? = null) {
+    ListItem(
+        overlineContent = { Text(label) },
+        headlineContent = { Text(value) },
+        colors = ListItemDefaults.colors(containerColor = Color.Transparent),
+        modifier = if (tag != null) Modifier.testTag(tag) else Modifier,
+    )
+}
+
+/** [text] as a QR code, black modules filling the box (the caller draws the quiet zone). */
+@Composable
+private fun QrCode(text: String, modifier: Modifier) {
+    val matrix = remember(text) { qrMatrix(text) }
+    Canvas(modifier) {
+        val cell = size.width / matrix.width
+        for (y in 0 until matrix.height) for (x in 0 until matrix.width) {
+            // A hair wider than a module, so neighbours meet without anti-aliased seams.
+            if (matrix[x, y]) drawRect(Color.Black, Offset(x * cell, y * cell), Size(cell + 0.5f, cell + 0.5f))
+        }
+    }
+}
+
+/** The modules of [text]'s QR code, one cell per module and no margin. */
+internal fun qrMatrix(text: String): BitMatrix =
+    QRCodeWriter().encode(text, BarcodeFormat.QR_CODE, 0, 0, mapOf(EncodeHintType.ERROR_CORRECTION to ErrorCorrectionLevel.M, EncodeHintType.MARGIN to 0, EncodeHintType.CHARACTER_SET to "UTF-8"))
diff --git a/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt b/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
index 9991c4ee..684da4e3 100644
--- a/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
+++ b/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
@@ -69,6 +69,8 @@ import androidx.compose.ui.text.input.VisualTransformation
 import androidx.compose.ui.unit.dp
 import androidx.lifecycle.compose.collectAsStateWithLifecycle
 import app.hocket.R
+import app.hocket.core.Commands
+import app.hocket.core.api.Command
 import app.hocket.core.api.ServerInfo
 import app.hocket.playback.CoreHost
 import app.hocket.playback.ServerCredential
@@ -100,6 +102,9 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
     var urlError by rememberSaveable { mutableStateOf(false) }
     var error by rememberSaveable { mutableStateOf<String?>(null) }
     var started by rememberSaveable { mutableStateOf(needsRelogin) }
+    // The coordinator, or else the settings (a JSON object), from a setup link: applied as the form connects.
+    var linkCoordinator by rememberSaveable { mutableStateOf<String?>(null) }
+    var linkSettings by rememberSaveable { mutableStateOf<String?>(null) }
     val sync by client.syncProgress.collectAsStateWithLifecycle()
 
     LaunchedEffect(client) { client.errors.collect { e -> connecting = false; error = e.detail?.let { "${e.message}\n$it" } ?: e.message } }
@@ -110,17 +115,53 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
         started -> SetupStep.Form
         else -> SetupStep.Welcome
     }
+    val context = androidx.compose.ui.platform.LocalContext.current
+    val invalidCode = stringResource(R.string.setup_scan_invalid)
+    val scanFailed = stringResource(R.string.setup_scan_failed)
     fun connect() {
         val cleanUrl = normaliseServerUrl(url)
         urlError = cleanUrl == null
         if (cleanUrl == null || username.isBlank()) return
         error = null
         connecting = true
+        linkCoordinator?.let {
+            client.dispatch(Commands.setCoordinatorUrl(it))
+            client.dispatch(Command.ConnectCoordinator)
+        }
+        linkSettings?.let { client.dispatch(Commands.applySetupSettings(it)) }
         onConnecting()
         // The core never keeps the password: it lives in the platform keystore and is replayed on
         // every start. CoreHost stores it only once the core reports the server reachable with it.
         CoreHost.login(client::dispatch, ServerCredential(cleanUrl, username.trim(), password, null))
     }
+    /**
+     * Another device's setup code: fills the form (its coordinator or settings are applied as the
+     * form connects).
+     * Scanned or pasted here, with the password, it signs in straight away; a link opened from
+     * outside (any web page can open one) waits for Connect, so the person sees the server first.
+     */
+    fun applySetupLink(link: SetupLink, connectNow: Boolean) {
+        url = link.server
+        username = link.username
+        password = link.password ?: ""
+        linkCoordinator = link.coordinator
+        linkSettings = link.settings
+        urlError = false
+        error = null
+        started = true
+        if (connectNow && link.password != null && !connecting) connect()
+    }
+    fun scan() = app.hocket.SetupScanner.scan(context,
+        onResult = { text -> SetupLink.parse(text)?.let { applySetupLink(it, connectNow = true) } ?: run { started = true; error = invalidCode } },
+        onError = { started = true; error = scanFailed })
+    // A setup link opened from outside (the camera, a shared link), while the form can take it.
+    val pendingLink by app.hocket.AppLinks.setup.collectAsStateWithLifecycle()
+    LaunchedEffect(pendingLink, step) {
+        val link = pendingLink ?: return@LaunchedEffect
+        if (step == SetupStep.Summary) return@LaunchedEffect
+        app.hocket.AppLinks.consume(link)
+        applySetupLink(link, connectNow = false)
+    }
     val cleartext = url.trim().startsWith("http://", ignoreCase = true)
     val ground = Brush.verticalGradient(listOf(MaterialTheme.colorScheme.surface, MaterialTheme.colorScheme.surfaceContainer))
 
@@ -142,6 +183,7 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
                     contentPadding = ButtonDefaults.contentPaddingFor(ButtonDefaults.LargeContainerHeight)) {
                     Text(stringResource(R.string.setup_title), style = ButtonDefaults.textStyleFor(ButtonDefaults.MediumContainerHeight))
                 }
+                if (app.hocket.SetupScanner.available) ScanButton(::scan, Modifier.fillMaxWidth())
             }
             SetupStep.Form -> Surface(
                 color = MaterialTheme.colorScheme.surfaceContainer, shape = RoundedCornerShape(topStart = 28.dp, topEnd = 28.dp),
@@ -157,7 +199,7 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
                     }
                     val field = RoundedCornerShape(16.dp)
                     OutlinedTextField(
-                        value = url, onValueChange = { url = it; urlError = false }, label = { Text(stringResource(R.string.setup_url)) },
+                        value = url, onValueChange = { typed -> SetupLink.parse(typed)?.let { applySetupLink(it, connectNow = true) } ?: run { url = typed; urlError = false } }, label = { Text(stringResource(R.string.setup_url)) },
                         placeholder = { Text(stringResource(R.string.setup_url_hint)) }, singleLine = true, isError = urlError, shape = field,
                         supportingText = if (urlError) ({ Text(stringResource(R.string.setup_error_url)) }) else null,
                         keyboardOptions = KeyboardOptions(keyboardType = KeyboardType.Uri, imeAction = ImeAction.Next),
@@ -203,6 +245,7 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
                             Text(stringResource(R.string.setup_connecting), style = ButtonDefaults.textStyleFor(ButtonDefaults.MediumContainerHeight))
                         } else Text(stringResource(R.string.setup_connect), style = ButtonDefaults.textStyleFor(ButtonDefaults.MediumContainerHeight))
                     }
+                    if (app.hocket.SetupScanner.available && !connecting) ScanButton(::scan, Modifier.fillMaxWidth().padding(top = 8.dp))
                 }
             }
             SetupStep.Summary -> existing?.let { server ->
@@ -229,6 +272,15 @@ internal fun normaliseServerUrl(raw: String): String? {
     return if (rest.isEmpty()) null else scheme + rest
 }
 
+/** Scan another device's setup code (Set up another device, in its account sheet). */
+@Composable
+private fun ScanButton(onClick: () -> Unit, modifier: Modifier) {
+    TextButton(onClick = onClick, shapes = ButtonDefaults.shapes(), modifier = modifier.testTag("setup.scan")) {
+        Icon(HocketIcons.Filled.QrCodeScanner, null, Modifier.size(ButtonDefaults.IconSize))
+        Text(stringResource(R.string.setup_scan), Modifier.padding(start = ButtonDefaults.IconSpacing))
+    }
+}
+
 /** "hocket" in the word mark's face at [size], the brand's ink. */
 @Composable
 private fun Wordmark(size: androidx.compose.ui.unit.Dp) {
diff --git a/android/app/src/main/java/app/hocket/ui/screens/setup/SetupLink.kt b/android/app/src/main/java/app/hocket/ui/screens/setup/SetupLink.kt
new file mode 100644
index 00000000..583767b8
--- /dev/null
+++ b/android/app/src/main/java/app/hocket/ui/screens/setup/SetupLink.kt
@@ -0,0 +1,106 @@
+package app.hocket.ui.screens.setup
+
+import java.io.ByteArrayOutputStream
+import java.net.URLDecoder
+import java.net.URLEncoder
+import java.util.Base64
+import java.util.zip.Deflater
+import java.util.zip.Inflater
+
+/**
+ * What one device hands another so it can be set up without typing (Set up another device): the
+ * Navidrome server and who signs in there, the password when the person chose to include it, and
+ * the coordinator when this device has one, and otherwise the account settings changed from their
+ * defaults (`Query.SetupSettings`: a JSON object, which a coordinator would have synced). As a link
+ * (the setup code's content):
+ * `hocket://setup?server=<url>&user=<name>[&password=<p>][&coordinator=<url>][&settings=<s>]`, each
+ * value percent-encoded; `settings` is the JSON zlib-deflated and in unpadded base64url, to keep the
+ * code small. The desktop app reads and writes the same form (desktop/src/shared/deep-link.ts).
+ */
+data class SetupLink(
+    val server: String,
+    val username: String,
+    val password: String? = null,
+    val coordinator: String? = null,
+    val settings: String? = null,
+) {
+    fun format(): String = buildString {
+        append(PREFIX)
+        append("server=").append(enc(server))
+        append("&user=").append(enc(username))
+        password?.let { append("&password=").append(enc(it)) }
+        coordinator?.let { append("&coordinator=").append(enc(it)) }
+        settings?.let { append("&settings=").append(packSettings(it)) }
+    }
+
+    /** Never the password, in case one ends up in a log. */
+    override fun toString(): String =
+        "SetupLink(server=$server, username=$username, password=${if (password == null) "none" else "***"}, coordinator=$coordinator, settings=${settings?.length ?: "none"})"
+
+    companion object {
+        private const val PREFIX = "hocket://setup?"
+
+        /**
+         * The setup link in [text] (surrounding whitespace allowed), or null when it is not one: a
+         * different link, no `http(s)://` server, or no user. Unknown parameters are ignored.
+         */
+        fun parse(text: String?): SetupLink? {
+            val trimmed = text?.trim() ?: return null
+            if (!trimmed.startsWith(PREFIX, ignoreCase = true)) return null
+            val params = trimmed.substring(PREFIX.length).split('&').mapNotNull { pair ->
+                val i = pair.indexOf('=')
+                if (i <= 0) null else runCatching { pair.substring(0, i) to URLDecoder.decode(pair.substring(i + 1), "UTF-8") }.getOrNull()
+            }.toMap()
+            // Settings that don't unpack are dropped, not the whole link: the device can still sign in.
+            val settings = params["settings"]?.let(::unpackSettings)
+            val server = params["server"]?.let(::normaliseServerUrl) ?: return null
+            val username = params["user"]?.trim()?.takeIf { it.isNotEmpty() } ?: return null
+            return SetupLink(
+                server = server,
+                username = username,
+                password = params["password"]?.takeIf { it.isNotEmpty() },
+                coordinator = params["coordinator"]?.trim()?.takeIf { it.isNotEmpty() },
+                settings = settings,
+            )
+        }
+
+        /** Settings JSON → zlib → unpadded base64url (all link-safe, so no percent-encoding). */
+        internal fun packSettings(json: String): String {
+            val deflater = Deflater(Deflater.BEST_COMPRESSION)
+            try {
+                deflater.setInput(json.toByteArray(Charsets.UTF_8))
+                deflater.finish()
+                val out = ByteArrayOutputStream()
+                val buf = ByteArray(1024)
+                while (!deflater.finished()) out.write(buf, 0, deflater.deflate(buf))
+                return Base64.getUrlEncoder().withoutPadding().encodeToString(out.toByteArray())
+            } finally {
+                deflater.end()
+            }
+        }
+
+        /** [packSettings] undone, or null when [packed] is not a packed JSON object (or unpacks past 64 KiB). */
+        internal fun unpackSettings(packed: String): String? = runCatching {
+            val inflater = Inflater()
+            try {
+                inflater.setInput(Base64.getUrlDecoder().decode(packed.trim().trimEnd('=')))
+                val out = ByteArrayOutputStream()
+                val buf = ByteArray(1024)
+                while (!inflater.finished()) {
+                    val n = inflater.inflate(buf)
+                    if (n == 0 && (inflater.needsInput() || inflater.needsDictionary())) return@runCatching null
+                    out.write(buf, 0, n)
+                    if (out.size() > MAX_SETTINGS_BYTES) return@runCatching null
+                }
+                out.toString(Charsets.UTF_8.name()).takeIf { it.trimStart().startsWith("{") }
+            } finally {
+                inflater.end()
+            }
+        }.getOrNull()
+
+        private const val MAX_SETTINGS_BYTES = 64 * 1024
+
+        // URLEncoder writes form encoding (a space as "+"); %20 reads the same everywhere.
+        private fun enc(s: String) = URLEncoder.encode(s, "UTF-8").replace("+", "%20")
+    }
+}
diff --git a/android/app/src/main/res/values/strings.xml b/android/app/src/main/res/values/strings.xml
index a26fbcbe..a5fa4e61 100644
--- a/android/app/src/main/res/values/strings.xml
+++ b/android/app/src/main/res/values/strings.xml
@@ -101,6 +101,9 @@
     <string name="setup_username">Username</string>
     <string name="setup_password">Password</string>
     <string name="setup_connect">Connect</string>
+    <string name="setup_scan">Scan a setup code</string>
+    <string name="setup_scan_invalid">That isn\'t a Hocket setup code. On your other device, open your account and choose Set up another device.</string>
+    <string name="setup_scan_failed">The code scanner isn\'t available right now. Open the code\'s link instead, or type the details in.</string>
     <string name="setup_connecting">Connecting…</string>
     <string name="setup_show_password">Show password</string>
     <string name="setup_hide_password">Hide password</string>
@@ -1078,6 +1081,27 @@
     <string name="account_settings">Settings</string>
     <string name="account_stats">Listening stats</string>
     <string name="account_devices">Devices</string>
+    <string name="account_set_up_device">Set up another device</string>
+    <string name="setup_device_title">Set up another device</string>
+    <string name="setup_device_body">Scan this code with Hocket on your other device (Scan a setup code, on its first screen) or with its camera.</string>
+    <string name="setup_device_code">Setup code for %1$s</string>
+    <string name="setup_device_server">Server</string>
+    <string name="setup_device_coordinator">Coordinator</string>
+    <string name="setup_device_no_coordinator">None. The other device connects to your server directly.</string>
+    <string name="setup_device_settings">Settings</string>
+    <string name="setup_device_settings_synced">Come across through the coordinator</string>
+    <string name="setup_device_settings_none">All at their defaults, so nothing to bring</string>
+    <plurals name="setup_device_settings_count">
+        <item quantity="one">%d changed setting comes along</item>
+        <item quantity="other">%d changed settings come along</item>
+    </plurals>
+    <string name="setup_device_settings_too_many">Too many to fit in the code. Share the link to bring them along.</string>
+    <string name="setup_device_include_password">Include password</string>
+    <string name="setup_device_include_password_on">Anyone who sees the code can sign in as you</string>
+    <string name="setup_device_include_password_off">The other device will ask for it</string>
+    <string name="setup_device_password_unavailable">This device can\'t read the password right now</string>
+    <string name="setup_device_share">Share link</string>
+    <string name="setup_device_already_set_up">This device is already set up. Sign out to use another device\'s setup code.</string>
     <string name="account_more_places">More places</string>
     <string name="account_signed_in">%1$s on %2$s</string>
     <!-- Settings → Pebble watch (the Hocket watchapp, docs/pebble.md). -->
diff --git a/android/app/src/test/java/app/hocket/ui/SettingsScreenshotTest.kt b/android/app/src/test/java/app/hocket/ui/SettingsScreenshotTest.kt
index d908075f..586f5ea1 100644
--- a/android/app/src/test/java/app/hocket/ui/SettingsScreenshotTest.kt
+++ b/android/app/src/test/java/app/hocket/ui/SettingsScreenshotTest.kt
@@ -129,7 +129,7 @@ class SettingsScreenshotTest {
         compose.mainClock.advanceTimeBy(1_000)
         save(compose.onRoot().captureToImage().asAndroidBitmap(), File(dir, "$prefix-default.png"))
 
-        sheet = { AccountSheetContent(NavItem.DEFAULT, {}, {}, {}, {}, {}) }
+        sheet = { AccountSheetContent(NavItem.DEFAULT, {}, {}, {}, {}, {}, {}) }
         awaitTag("account.settings")
         save(compose.onRoot().captureToImage().asAndroidBitmap(), File(dir, "$prefix-account-sheet.png"))
 
diff --git a/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt b/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
new file mode 100644
index 00000000..148e5f58
--- /dev/null
+++ b/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
@@ -0,0 +1,153 @@
+package app.hocket.ui
+
+import androidx.compose.ui.semantics.SemanticsActions
+import androidx.compose.ui.test.junit4.createComposeRule
+import androidx.compose.ui.test.onAllNodesWithTag
+import androidx.compose.ui.test.onAllNodesWithText
+import androidx.compose.ui.test.onFirst
+import androidx.compose.ui.test.onNodeWithTag
+import androidx.compose.ui.test.performScrollTo
+import androidx.compose.ui.test.performTextInput
+import androidx.compose.ui.test.performSemanticsAction
+import androidx.test.ext.junit.runners.AndroidJUnit4
+import app.hocket.AppLinks
+import app.hocket.core.Commands
+import app.hocket.core.Queries
+import app.hocket.core.SettingKeys
+import app.hocket.core.api.QueryResult
+import app.hocket.playback.CoreHost
+import app.hocket.playback.InMemoryCredentialStore
+import app.hocket.playback.ServerCredential
+import app.hocket.ui.nav.AppRoot
+import app.hocket.ui.nav.qrMatrix
+import app.hocket.ui.screens.setup.SetupLink
+import kotlinx.coroutines.runBlocking
+import org.junit.After
+import org.junit.Assert.assertEquals
+import org.junit.Assert.assertTrue
+import org.junit.Rule
+import org.junit.Test
+import org.junit.runner.RunWith
+import org.robolectric.annotation.Config
+import org.robolectric.annotation.GraphicsMode
+
+/** Set up another device: the account sheet's QR code, and a setup link opened on a new device. */
+@RunWith(AndroidJUnit4::class)
+@Config(sdk = [35], application = android.app.Application::class, qualifiers = "w411dp-h891dp")
+@GraphicsMode(GraphicsMode.Mode.NATIVE)
+class SetupDeviceTest {
+    @get:Rule
+    val compose = createComposeRule()
+
+    @After
+    fun tearDown() {
+        CoreHost.credentials = null
+        AppLinks.setup.value?.let(AppLinks::consume)
+    }
+
+    private fun exists(tag: String) = compose.onAllNodesWithTag(tag).fetchSemanticsNodes().isNotEmpty()
+
+    private fun await(tag: String) {
+        compose.waitUntil(5_000) { exists(tag) }
+        compose.waitForIdle()
+    }
+
+    private fun click(tag: String) {
+        await(tag)
+        compose.onAllNodesWithTag(tag).onFirst().performSemanticsAction(SemanticsActions.OnClick)
+        compose.waitForIdle()
+    }
+
+    @Test
+    fun theAccountSheetShowsTheSetupCodeAndThePasswordGoesInOnlyWhenAsked() {
+        val core = TestCore(startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        await("navBar")
+        val server = core.client.server.value!!
+        core.client.dispatch(Commands.setSetting(SettingKeys.QUEUE_SAVED_CAP, "5"))
+        CoreHost.credentials = InMemoryCredentialStore().apply { save(ServerCredential(server.url, server.username, "hunter2", null)) }
+        click("account.button")
+        click("account.setUpDevice")
+        await("setupDevice.code")
+        // No coordinator here, so the changed setting rides in the code.
+        compose.onNodeWithTag("setupDevice.settings").performScrollTo()
+        compose.waitUntil(5_000) { compose.onAllNodesWithText("1 changed setting comes along").fetchSemanticsNodes().isNotEmpty() }
+        compose.onNodeWithTag("setupDevice.coordinator").performScrollTo()
+        compose.onNodeWithTag("setupDevice.includePassword").performScrollTo()
+        click("setupDevice.includePassword")
+        // The sheet still shows a code (now a longer link): drawn without error.
+        await("setupDevice.code")
+    }
+
+    @Test
+    fun theCodeEncodesTheLink() {
+        val text = SetupLink("https://music.example.net", "ada", "hunter2", "wss://c.example.net").format()
+        val m = qrMatrix(text)
+        assertTrue(m.width == m.height && m.width >= 21)
+    }
+
+    @Test
+    fun anOpenedSetupLinkFillsTheFormAndConnectSignsInAndSetsTheCoordinator() {
+        val core = TestCore(startWithServer = false, startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        await("setup.start")
+        AppLinks.openSetup(SetupLink("https://music.example.net", "ada", "secret", "wss://coord.example.net"))
+        // A link from outside waits for Connect (any web page can open one); nothing is set before.
+        await("setup.connect")
+        assertEquals(null, core.client.connection.value.coordinatorUrl)
+        click("setup.connect")
+        await("setup.continue")
+        assertEquals("wss://coord.example.net", core.client.connection.value.coordinatorUrl)
+        assertEquals(null, AppLinks.setup.value)
+    }
+
+    @Test
+    fun aPastedSetupLinkWithThePasswordSignsInStraightAway() {
+        val core = TestCore(startWithServer = false, startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        click("setup.start")
+        await("setup.url")
+        compose.onNodeWithTag("setup.url").performTextInput(SetupLink("https://music.example.net", "ada", "secret").format())
+        await("setup.continue")
+    }
+
+    @Test
+    fun aSetupLinksSettingsAreAppliedAsItConnects() {
+        val core = TestCore(startWithServer = false, startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        click("setup.start")
+        await("setup.url")
+        val link = SetupLink("https://music.example.net", "ada", "secret", settings = """{"${SettingKeys.QUEUE_SAVED_CAP}":7}""")
+        compose.onNodeWithTag("setup.url").performTextInput(link.format())
+        await("setup.continue")
+        val cap = runBlocking { core.client.query(Queries.setting(SettingKeys.QUEUE_SAVED_CAP)) as QueryResult.SettingDetail }
+        assertEquals("7", cap.data?.value)
+    }
+
+    @Test
+    fun aSetupLinkWithoutThePasswordFillsTheForm() {
+        val core = TestCore(startWithServer = false, startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        await("setup.start")
+        AppLinks.openSetup(SetupLink("https://music.example.net", "ada"))
+        await("setup.password")
+        compose.waitUntil(5_000) { compose.onAllNodesWithText("https://music.example.net").fetchSemanticsNodes().isNotEmpty() }
+        assertTrue(compose.onAllNodesWithText("ada").fetchSemanticsNodes().isNotEmpty())
+    }
+
+    @Test
+    fun aSetupLinkOnASignedInDeviceIsTurnedAway() {
+        val core = TestCore(startPlaying = false)
+        compose.setThemedContent(core) { AppRoot(core.client) }
+        core.start()
+        await("navBar")
+        AppLinks.openSetup(SetupLink("https://other.example.net", "bob", "pw"))
+        compose.waitUntil(5_000) { AppLinks.setup.value == null }
+        compose.waitUntil(5_000) { compose.onAllNodesWithText("This device is already set up", substring = true).fetchSemanticsNodes().isNotEmpty() }
+    }
+}
diff --git a/android/app/src/test/java/app/hocket/ui/screens/setup/SetupLinkTest.kt b/android/app/src/test/java/app/hocket/ui/screens/setup/SetupLinkTest.kt
new file mode 100644
index 00000000..c91238e1
--- /dev/null
+++ b/android/app/src/test/java/app/hocket/ui/screens/setup/SetupLinkTest.kt
@@ -0,0 +1,72 @@
+package app.hocket.ui.screens.setup
+
+import org.junit.Assert.assertEquals
+import org.junit.Assert.assertFalse
+import org.junit.Assert.assertNull
+import org.junit.Assert.assertTrue
+import org.junit.Test
+
+class SetupLinkTest {
+    @Test
+    fun roundTripsEveryField() {
+        val link = SetupLink("https://music.example.net/navidrome", "ada lovelace", "p&ss=w0rd+ü", "wss://coord.example.net")
+        val text = link.format()
+        assertEquals("hocket://setup?server=https%3A%2F%2Fmusic.example.net%2Fnavidrome&user=ada%20lovelace&password=p%26ss%3Dw0rd%2B%C3%BC&coordinator=wss%3A%2F%2Fcoord.example.net", text)
+        assertEquals(link, SetupLink.parse(text))
+    }
+
+    @Test
+    fun passwordAndCoordinatorAreOptional() {
+        val link = SetupLink("https://music.example.net", "ada")
+        assertEquals("hocket://setup?server=https%3A%2F%2Fmusic.example.net&user=ada", link.format())
+        assertEquals(link, SetupLink.parse(link.format()))
+    }
+
+    @Test
+    fun readsTheDesktopsForm() {
+        // encodeURIComponent leaves some characters bare; the server is normalised as typed URLs are.
+        val parsed = SetupLink.parse("  HOCKET://setup?user=ada&server=Https%3A%2F%2Fmusic.example.net%2F&extra=1&password=a'b!  ")
+        assertEquals(SetupLink("https://music.example.net", "ada", "a'b!", null), parsed)
+    }
+
+    @Test
+    fun rejectsWhatIsNotASetupLink() {
+        assertNull(SetupLink.parse(null))
+        assertNull(SetupLink.parse("https://music.example.net"))
+        assertNull(SetupLink.parse("hocket://album/1"))
+        assertNull(SetupLink.parse("hocket://setup?user=ada"))
+        assertNull(SetupLink.parse("hocket://setup?server=ftp%3A%2F%2Fx&user=ada"))
+        assertNull(SetupLink.parse("hocket://setup?server=https%3A%2F%2Fx&user=%20"))
+        assertNull(SetupLink.parse("hocket://setup?server=https%3A%2F%2Fx&user=ada%ZZ"))
+    }
+
+    @Test
+    fun carriesSettingsPacked() {
+        val settings = """{"queue.savedCap":7,"nav.mobileBar":["home","search"]}"""
+        val link = SetupLink("https://music.example.net", "ada", settings = settings)
+        val text = link.format()
+        val packed = text.substringAfter("&settings=")
+        assertTrue("link-safe as it stands: $packed", packed.matches(Regex("[A-Za-z0-9_-]+")))
+        assertEquals(link, SetupLink.parse(text))
+    }
+
+    @Test
+    fun readsTheDesktopsPackedSettings() {
+        // CompressionStream("deflate") and base64url, as desktop/src/shared/setup-settings.ts writes them.
+        val parsed = SetupLink.parse("hocket://setup?server=https%3A%2F%2Fmusic.example.net&user=ada&settings=eJyrViosTS1N1StOLEtNcU4sULIy11HKSyzTy81PysxJdUosUrKKVsrIz01V0lEqTk0sSs5Qiq0FAABqEl0")
+        assertEquals("""{"queue.savedCap":7,"nav.mobileBar":["home","search"]}""", parsed?.settings)
+    }
+
+    @Test
+    fun settingsThatDoNotUnpackAreDroppedNotTheLink() {
+        val notJson = SetupLink.packSettings("[1]")
+        for (bad in listOf("%%%", "AAAA", notJson)) {
+            assertEquals(bad, SetupLink("https://x", "ada"), SetupLink.parse("hocket://setup?server=https%3A%2F%2Fx&user=ada&settings=$bad"))
+        }
+    }
+
+    @Test
+    fun toStringHidesThePassword() {
+        assertFalse(SetupLink("https://x", "ada", "hunter2").toString().contains("hunter2"))
+    }
+}
diff --git a/android/core/src/main/java/app/hocket/core/Commands.kt b/android/core/src/main/java/app/hocket/core/Commands.kt
index b55308c8..f0154e84 100644
--- a/android/core/src/main/java/app/hocket/core/Commands.kt
+++ b/android/core/src/main/java/app/hocket/core/Commands.kt
@@ -122,6 +122,7 @@ object Commands {
     fun setSettingsSync(enabled: Boolean) = Command.SetSettingsSync(CommandSetSettingsSyncInner(enabled))
     fun exportConfig(includeSecrets: Boolean) = Command.ExportConfig(CommandExportConfigInner(includeSecrets))
     fun importConfig(document: String) = Command.ImportConfig(CommandImportConfigInner(document))
+    fun applySetupSettings(settings: String) = Command.ApplySetupSettings(CommandApplySetupSettingsInner(settings))
     fun setAudioSettings(settings: AudioSettings) = Command.SetAudioSettings(CommandSetAudioSettingsInner(settings))
     fun setOutputDevice(id: String?) = Command.SetOutputDevice(CommandSetOutputDeviceInner(id))
 
diff --git a/android/core/src/main/java/app/hocket/core/fake/FakeCore.kt b/android/core/src/main/java/app/hocket/core/fake/FakeCore.kt
index c06cce7b..204b33e4 100644
--- a/android/core/src/main/java/app/hocket/core/fake/FakeCore.kt
+++ b/android/core/src/main/java/app/hocket/core/fake/FakeCore.kt
@@ -1080,6 +1080,7 @@ class FakeCore(
             Command.RetryReportUpload -> reportUpload?.takeIf { it.state == ReportUploadState.Failed }?.let { runReportUpload(it.totalBytes, it.sentBytes, it.startedAt) }
             Command.DismissReportUpload -> { reportUploadJob?.cancel(); reportUploadJob = null; setReportUpload(null) }
             is Command.ImportConfig -> toast("Configuration restored")
+            is Command.ApplySetupSettings -> applySetupSettings(c.data.settings)
             is Command.SetAudioSettings -> { audio = c.data.settings; emit(Event.AudioSettingsChanged(EventAudioSettingsChangedInner(audio))) }
             is Command.SetOutputDevice -> { audio = audio.copy(outputDevice = c.data.id); emit(Event.AudioSettingsChanged(EventAudioSettingsChangedInner(audio))) }
             Command.RefreshOutputDevices -> emit(Event.OutputDevicesChanged(EventOutputDevicesChangedInner(listOf(OutputDevice("default", "Phone speaker", true), OutputDevice("bt", "Headphones", false)))))
@@ -1489,6 +1490,18 @@ class FakeCore(
 
     private fun lyricsFor(id: TrackId): Lyrics? = library.lyricsByTrack[id]?.let { it.copy(offsetMs = lyricsOffsets[id] ?: 0) }
 
+    /** Like the core: the account-synced settings changed from their defaults, key → value. */
+    private fun setupSettings(): String = kotlinx.serialization.json.JsonObject(
+        settings.values.filter { it.scope == SettingScope.AccountSynced && it.value != defaults[it.key] }
+            .associate { it.key to HocketJson.json.parseToJsonElement(it.value) },
+    ).toString()
+
+    /** Like the core: known account-synced keys only; the rest are skipped. */
+    private fun applySetupSettings(json: String) {
+        val obj = runCatching { HocketJson.json.parseToJsonElement(json) as? kotlinx.serialization.json.JsonObject }.getOrNull() ?: return
+        for ((key, value) in obj) if (settings[key]?.scope == SettingScope.AccountSynced) setSetting(key, value.toString())
+    }
+
     private fun configDocument(secrets: Boolean) = HocketJson.json.encodeToString(ConfigDocument.serializer(), ConfigDocument(2u, now(), settings.values.toList(), filters.toList(), emptyList(), servers.toList(),
         if (secrets) hashMapOf("fake-server.password" to "••••") else null, audio, autoplaySettings, null))
 
@@ -1795,6 +1808,7 @@ class FakeCore(
         Query.RoomDiagnostics -> error("RoomDiagnostics is answered by query()")
         Query.ReportUpload -> QueryResult.ReportUpload(reportUpload)
         is Query.ConfigDocument -> QueryResult.Text(configDocument(q.data.include_secrets))
+        Query.SetupSettings -> QueryResult.Text(setupSettings())
         is Query.CreateShare -> QueryResult.Share(q.data.ids.filter { it.isNotEmpty() }.takeIf { it.isNotEmpty() }?.let { CreatedShare("https://navidrome.example/share/${it.joinToString("-")}") })
         is Query.ExportAudio -> QueryResult.AudioFile(null)
         is Query.SongLink -> QueryResult.SongLink(
diff --git a/android/gradle/libs.versions.toml b/android/gradle/libs.versions.toml
index 1257b2ee..a87c8f57 100644
--- a/android/gradle/libs.versions.toml
+++ b/android/gradle/libs.versions.toml
@@ -23,6 +23,8 @@ androidxTestExt = "1.3.0"
 turbine = "1.2.1"
 graphicsShapes = "1.1.0"
 pebblekit2 = "1.3.2"
+zxing = "3.5.3"
+codeScanner = "16.1.0"
 
 [libraries]
 play-services-cast-framework = { module = "com.google.android.gms:play-services-cast-framework", version.ref = "playServicesCast" }
@@ -67,6 +69,8 @@ junit = { module = "junit:junit", version.ref = "junit" }
 robolectric = { module = "org.robolectric:robolectric", version.ref = "robolectric" }
 androidx-test-ext-junit = { module = "androidx.test.ext:junit", version.ref = "androidxTestExt" }
 pebblekit2-client = { module = "io.rebble.pebblekit2:client", version.ref = "pebblekit2" }
+zxing-core = { module = "com.google.zxing:core", version.ref = "zxing" }
+play-services-code-scanner = { module = "com.google.android.gms:play-services-code-scanner", version.ref = "codeScanner" }
 turbine = { module = "app.cash.turbine:turbine", version.ref = "turbine" }
 
 [plugins]
diff --git a/crates/hocket-core/src/api.rs b/crates/hocket-core/src/api.rs
index 78a8b1db..3bde3a9f 100644
--- a/crates/hocket-core/src/api.rs
+++ b/crates/hocket-core/src/api.rs
@@ -2829,6 +2829,13 @@ pub enum Command {
         #[serde(default)]
         include_device_local: bool,
     },
+    /// Apply the settings a setup link carried (`Query::SetupSettings` on the
+    /// device that made it): a JSON object of key → value. Account-synced keys
+    /// only; device-local and unknown keys, and invalid values, are skipped.
+    /// For a device set up without a coordinator to sync them.
+    ApplySetupSettings {
+        settings: String,
+    },
 
     // -- audio ------------------------------------------------------------
     SetAudioSettings {
@@ -3127,6 +3134,11 @@ pub enum Query {
     ConfigDocument {
         include_secrets: bool,
     },
+    /// The account-synced settings changed from their defaults, as a JSON
+    /// object of key → value (`QueryResult::Text`), for a setup link to carry
+    /// to a new device when there is no coordinator to sync them
+    /// (`Command::ApplySetupSettings`). Taken whether or not sync is on.
+    SetupSettings,
     /// `createShare` for these song, album or playlist ids. The answer is the public URL.
     CreateShare {
         ids: Vec<String>,
diff --git a/crates/hocket-core/src/core/handlers/command.rs b/crates/hocket-core/src/core/handlers/command.rs
index 5aa95ac6..5ae0fdaf 100644
--- a/crates/hocket-core/src/core/handlers/command.rs
+++ b/crates/hocket-core/src/core/handlers/command.rs
@@ -262,6 +262,7 @@ impl Actor {
                 document,
                 include_device_local,
             } => self.import_config(&document, include_device_local),
+            Command::ApplySetupSettings { settings } => self.apply_setup_settings(&settings),
             Command::AnswerDiagnosticsRequest { request_id, text } => {
                 self.answer_diagnostics_request(request_id, text)
             }
diff --git a/crates/hocket-core/src/core/handlers/settings.rs b/crates/hocket-core/src/core/handlers/settings.rs
index 7928f23d..0639e255 100644
--- a/crates/hocket-core/src/core/handlers/settings.rs
+++ b/crates/hocket-core/src/core/handlers/settings.rs
@@ -308,6 +308,59 @@ impl Actor {
         crate::settings::to_json(&doc).unwrap_or_default()
     }
 
+    /// Apply the settings a setup link carried ([`Command::ApplySetupSettings`]):
+    /// account-synced keys only, each stamped now, then announced like an
+    /// import. Quiet: the new device is being set up, so no toast.
+    pub(crate) fn apply_setup_settings(&mut self, settings: &str) {
+        let map = match serde_json::from_str::<serde_json::Value>(settings) {
+            Ok(serde_json::Value::Object(map)) => map,
+            _ => {
+                self.log("warn", "setup settings: not a JSON object".to_string());
+                return;
+            }
+        };
+        let now = self.now();
+        let incoming: Vec<Setting> = map
+            .into_iter()
+            .filter(|(k, _)| {
+                crate::settings::lookup(k).is_some_and(|d| d.scope == SettingScope::AccountSynced)
+            })
+            .map(|(key, value)| Setting {
+                key,
+                value: value.to_string(),
+                scope: SettingScope::AccountSynced,
+                updated_at: now,
+            })
+            .collect();
+        let out = self.settings.import_settings(&incoming, now, false);
+        self.save_settings();
+        self.announce_imported_settings(&out);
+    }
+
+    /// After an import: every setting goes to the UI; changed synced keys go
+    /// through the local-edit path, which also feeds the engine (otherwise the
+    /// next merge from a peer would revert them).
+    fn announce_imported_settings(&mut self, out: &crate::settings::ImportOutcome) {
+        let changed_synced: std::collections::HashSet<&str> =
+            out.changed_synced.iter().map(String::as_str).collect();
+        let all = self.settings.to_api();
+        for s in &all {
+            if !changed_synced.contains(s.key.as_str()) {
+                self.emit(Event::SettingChanged { setting: s.clone() });
+            }
+        }
+        for key in &out.applied {
+            if !changed_synced.contains(key.as_str()) {
+                self.apply_setting_side_effects(key);
+            }
+        }
+        for s in all {
+            if changed_synced.contains(s.key.as_str()) {
+                self.after_setting_changed(s, true);
+            }
+        }
+    }
+
     /// Import a config document. Synced keys the document changes are
     /// broadcast like a local edit (otherwise the next merge from a peer
     /// would revert the import); device-local keys, including the `audio`
@@ -360,26 +413,7 @@ impl Actor {
             }
         }
         self.save_settings();
-        let changed_synced: std::collections::HashSet<&str> =
-            out.changed_synced.iter().map(String::as_str).collect();
-        // Everything is announced to the UI; changed synced keys go through
-        // the local-edit path below, which also feeds the engine.
-        let all = self.settings.to_api();
-        for s in &all {
-            if !changed_synced.contains(s.key.as_str()) {
-                self.emit(Event::SettingChanged { setting: s.clone() });
-            }
-        }
-        for key in &out.applied {
-            if !changed_synced.contains(key.as_str()) {
-                self.apply_setting_side_effects(key);
-            }
-        }
-        for s in all {
-            if changed_synced.contains(s.key.as_str()) {
-                self.after_setting_changed(s, true);
-            }
-        }
+        self.announce_imported_settings(&out);
         let shortcuts = self.registry.shortcuts();
         self.emit(Event::ShortcutsChanged { shortcuts });
         let mut notes = Vec::new();
diff --git a/crates/hocket-core/src/core/queries.rs b/crates/hocket-core/src/core/queries.rs
index bd0c0aae..19195db9 100644
--- a/crates/hocket-core/src/core/queries.rs
+++ b/crates/hocket-core/src/core/queries.rs
@@ -253,6 +253,9 @@ impl Actor {
             Query::ConfigDocument { include_secrets } => {
                 QueryResult::Text(self.config_document(include_secrets))
             }
+            Query::SetupSettings => QueryResult::Text(
+                serde_json::Value::Object(self.settings.setup_settings()).to_string(),
+            ),
             Query::CreateShare { ids } => {
                 self.create_share_query(ids, reply);
                 return;
diff --git a/crates/hocket-core/src/settings/mod.rs b/crates/hocket-core/src/settings/mod.rs
index 6ae9c89a..b607c3b7 100644
--- a/crates/hocket-core/src/settings/mod.rs
+++ b/crates/hocket-core/src/settings/mod.rs
@@ -335,6 +335,21 @@ impl Settings {
             .collect()
     }
 
+    /// The account-synced settings whose value differs from the registry
+    /// default, as key → value: what a setup link carries to a device set up
+    /// without a coordinator. Taken whether or not sync is on.
+    pub fn setup_settings(&self) -> serde_json::Map<String, Value> {
+        self.entries
+            .iter()
+            .filter(|(k, e)| {
+                lookup(k).is_some_and(|d| {
+                    d.scope == SettingScope::AccountSynced && (d.default)() != e.value
+                })
+            })
+            .map(|(k, e)| (k.clone(), e.value.clone()))
+            .collect()
+    }
+
     /// Accepts remote synced settings, last-write-wins per key. Returns the
     /// keys that changed. No-op when sync is off. Device-local keys and
     /// invalid values from peers are ignored.
diff --git a/crates/hocket-core/tests/actor_library.rs b/crates/hocket-core/tests/actor_library.rs
index 2a4a20f7..f5bbade2 100644
--- a/crates/hocket-core/tests/actor_library.rs
+++ b/crates/hocket-core/tests/actor_library.rs
@@ -1275,3 +1275,74 @@ async fn song_link_finds_the_song_on_deezer_by_isrc_then_by_search() {
         .iter()
         .all(|u| u.starts_with("https://api.deezer.com/")));
 }
+
+/// Set up another device without a coordinator: `Query::SetupSettings` gives
+/// the account-synced settings changed from their defaults (device-local ones
+/// stay behind), and `Command::ApplySetupSettings` on the new device takes
+/// them, skipping device-local, unknown and invalid keys.
+#[tokio::test]
+async fn setup_settings_carry_changed_synced_settings_to_a_new_device() {
+    let a = TestCore::start("setup-a", seeded_server(2, 180.0)).await;
+    a.run(Command::SetSetting {
+        key: "queue.savedCap".into(),
+        value: "5".into(),
+    })
+    .await;
+    a.run(Command::SetSetting {
+        key: "display.theme".into(),
+        value: "\"dark\"".into(),
+    })
+    .await;
+    // Set to its default: nothing to carry.
+    a.run(Command::SetSetting {
+        key: "queue.section".into(),
+        value: "true".into(),
+    })
+    .await;
+    let text = match a.query(Query::SetupSettings).await {
+        QueryResult::Text(t) => t,
+        other => panic!("{other:?}"),
+    };
+    let carried: serde_json::Map<String, serde_json::Value> = serde_json::from_str(&text).unwrap();
+    assert_eq!(
+        carried.get("queue.savedCap"),
+        Some(&serde_json::json!(5)),
+        "{text}"
+    );
+    assert!(
+        !carried.contains_key("display.theme"),
+        "device-local stays: {text}"
+    );
+    assert!(
+        !carried.contains_key("queue.section"),
+        "defaults stay: {text}"
+    );
+
+    let b = TestCore::start("setup-b", seeded_server(2, 180.0)).await;
+    let mut incoming = carried.clone();
+    incoming.insert("display.theme".into(), serde_json::json!("dark"));
+    incoming.insert("no.such.key".into(), serde_json::json!(1));
+    incoming.insert("queue.section".into(), serde_json::json!("not a bool"));
+    b.run(Command::ApplySetupSettings {
+        settings: serde_json::Value::Object(incoming).to_string(),
+    })
+    .await;
+    assert_eq!(setting_of(&b, "queue.savedCap").await.value, "5");
+    assert_eq!(
+        setting_of(&b, "display.theme").await.value,
+        "\"system\"",
+        "device-local ignored"
+    );
+    assert_eq!(
+        setting_of(&b, "queue.section").await.value,
+        "true",
+        "invalid value ignored"
+    );
+    assert!(b.events.all().iter().any(|e| matches!(e, Event::SettingChanged { setting } if setting.key == "queue.savedCap" && setting.value == "5")));
+    // Not a JSON object: nothing happens.
+    b.run(Command::ApplySetupSettings {
+        settings: "[1]".into(),
+    })
+    .await;
+    assert_eq!(setting_of(&b, "queue.savedCap").await.value, "5");
+}
diff --git a/desktop/README.md b/desktop/README.md
index e53b8bd3..d662d237 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -98,7 +98,7 @@ window.hocket.window.{minimize,maximize,close,setAlwaysOnTop,openFullscreen,open
 window.hocket.shell.{showItemInFolder,openExternal}
 window.hocket.dialog.{save,open,writeTextFile,readTextFile}
 window.hocket.clipboard.writeText
-window.hocket.onDeepLink(cb)                // hocket://album/<id>, hocket://artist/<id>, …
+window.hocket.onDeepLink(cb)                // hocket://album/<id>, hocket://artist/<id>, …, hocket://setup?…
 ```
 
 Types come from `src/core/api.ts`, generated by typeshare from
diff --git a/desktop/e2e/setup-device.spec.ts b/desktop/e2e/setup-device.spec.ts
new file mode 100644
index 00000000..1d088635
--- /dev/null
+++ b/desktop/e2e/setup-device.spec.ts
@@ -0,0 +1,81 @@
+// Set up another device: the account card's QR code of this device's setup
+// link, and a setup link pasted into a new device's server address field.
+import { deflateSync } from "node:zlib";
+import { completeSetup, expect, test } from "./fixtures";
+
+test.describe("set up another device", () => {
+  test("the account card shows a setup code with the server and coordinator", async ({ hocket }) => {
+    const { page } = hocket;
+    await completeSetup(page);
+    // One account setting changed (it rides in the code, with no coordinator), one device setting (it doesn't).
+    await page.evaluate(() => {
+      window.hocket.dispatch({ type: "setSetting", data: { key: "queue.savedCap", value: "5" } });
+      window.hocket.dispatch({ type: "setSetting", data: { key: "display.theme", value: JSON.stringify("dark") } });
+    });
+    await page.getByTestId("nav-settings").click();
+    await page.getByTestId("settings-account-setup-device").click();
+    const dialog = page.getByTestId("dialog-setupDevice");
+    await expect(dialog).toBeVisible();
+    await expect(dialog.getByTestId("setup-device-code").locator("svg path")).toHaveCount(1);
+    await expect(dialog).toContainText("alice on music.example.org");
+    await expect(dialog.getByTestId("setup-device-coordinator")).toContainText("None");
+    await expect(dialog.getByTestId("setup-device-settings")).toHaveText("1 changed setting comes along");
+    // The password stays out until switched on.
+    await expect(dialog.getByTestId("setup-device-password")).not.toBeChecked();
+    await dialog.getByTestId("setup-device-copy").click();
+    await expect(page.getByText("Setup link copied")).toBeVisible();
+    await page.keyboard.press("Escape");
+    await expect(dialog).toHaveCount(0);
+  });
+
+  test("a pasted setup link with the password connects without typing", async ({ hocket }) => {
+    const { page } = hocket;
+    await expect(page.getByTestId("setup")).toBeVisible();
+    await page.getByTestId("setup-url").fill("hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice&password=secret&coordinator=wss%3A%2F%2Fcoord.example.org");
+    await expect(page.getByTestId("setup-summary")).toBeVisible({ timeout: 15_000 });
+    await page.getByTestId("setup-continue").click({ timeout: 15_000 });
+    await expect(page.getByTestId("app")).toBeVisible({ timeout: 15_000 });
+  });
+
+  test("a setup link's settings are applied as it connects", async ({ hocket }) => {
+    const { page } = hocket;
+    // Packed as SetupLink.kt and shared/setup-settings do: zlib, then unpadded base64url.
+    const settings = deflateSync(JSON.stringify({ "queue.savedCap": 7, "display.theme": "dark" })).toString("base64url");
+    await page.getByTestId("setup-url").fill(`hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice&password=secret&settings=${settings}`);
+    await page.getByTestId("setup-continue").click({ timeout: 15_000 });
+    await expect(page.getByTestId("app")).toBeVisible({ timeout: 15_000 });
+    const value = (key: string) => page.evaluate(async (k) => {
+      const r = await window.hocket.query({ type: "setting", data: { key: k } });
+      return r.type === "settingDetail" ? r.data?.value : undefined;
+    }, key);
+    await expect.poll(() => value("queue.savedCap")).toBe("7");
+    // Device-local settings stay this device's own.
+    expect(await value("display.theme")).toBe(JSON.stringify("system"));
+  });
+
+  test("an opened setup link fills the form and waits for Connect; a signed-in device turns it away", async ({ hocket }) => {
+    const { app, page } = hocket;
+    const open = (url: string) => app.evaluate(({ BrowserWindow }, u) => { for (const w of BrowserWindow.getAllWindows()) w.webContents.send("hocket:deep-link", u); }, url);
+    await expect(page.getByTestId("setup")).toBeVisible();
+    await open("hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice&password=secret");
+    await expect(page.getByTestId("setup-url")).toHaveValue("https://music.example.org");
+    await expect(page.getByTestId("setup-password")).toHaveValue("secret");
+    // Any web page can open a hocket:// link: nothing connects until the person presses Connect.
+    await page.waitForTimeout(500);
+    await expect(page.getByTestId("setup-summary")).toHaveCount(0);
+    await page.getByTestId("setup-connect").click();
+    await page.getByTestId("setup-continue").click({ timeout: 15_000 });
+    await expect(page.getByTestId("app")).toBeVisible({ timeout: 15_000 });
+    await open("hocket://setup?server=https%3A%2F%2Fother.example.org&user=bob");
+    await expect(page.getByText("This device is already set up", { exact: false })).toBeVisible();
+  });
+
+  test("a pasted setup link without the password fills the form", async ({ hocket }) => {
+    const { page } = hocket;
+    await page.getByTestId("setup-url").fill("hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice");
+    await expect(page.getByTestId("setup-url")).toHaveValue("https://music.example.org");
+    await expect(page.getByTestId("setup-username")).toHaveValue("alice");
+    await expect(page.getByTestId("setup-password")).toHaveValue("");
+    await expect(page.getByTestId("setup")).toBeVisible();
+  });
+});
diff --git a/desktop/package.json b/desktop/package.json
index 86f8f279..4029090a 100644
--- a/desktop/package.json
+++ b/desktop/package.json
@@ -34,6 +34,7 @@
     "@tanstack/react-virtual": "^3.13.12",
     "react": "^19.1.1",
     "react-dom": "^19.1.1",
+    "uqr": "^0.1.3",
     "zustand": "^5.0.8"
   },
   "devDependencies": {
diff --git a/desktop/pnpm-lock.yaml b/desktop/pnpm-lock.yaml
index d28a8696..76abfd1b 100644
--- a/desktop/pnpm-lock.yaml
+++ b/desktop/pnpm-lock.yaml
@@ -32,6 +32,9 @@ importers:
       react-dom:
         specifier: ^19.1.1
         version: 19.3.0(react@19.3.0)
+      uqr:
+        specifier: ^0.1.3
+        version: 0.1.3
       zustand:
         specifier: ^5.0.8
         version: 5.0.15(@types/react@19.3.0)(react@19.3.0)
@@ -3022,6 +3025,9 @@ packages:
     peerDependencies:
       browserslist: '>= 4.21.0'
 
+  uqr@0.1.3:
+    resolution: {integrity: sha512-0rjE8iEJe4YmT9TOhwsZtqCMRLc5DXZUI2UEYUUg63ikBkqqE5EYWaI0etFe/5KUcmcYwLih2RND1kq+hrUJXA==}
+
   uri-js@4.4.1:
     resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
 
@@ -6079,6 +6085,8 @@ snapshots:
       escalade: 3.2.0
       picocolors: 1.1.1
 
+  uqr@0.1.3: {}
+
   uri-js@4.4.1:
     dependencies:
       punycode: 2.3.1
diff --git a/desktop/scripts/gen-icons.mjs b/desktop/scripts/gen-icons.mjs
index b227c50d..5a82bd7a 100644
--- a/desktop/scripts/gen-icons.mjs
+++ b/desktop/scripts/gen-icons.mjs
@@ -46,7 +46,7 @@ const MAP = {
   playNext: "arrow-bend-down-right", playLater: "rows-plus-bottom", pin: "push-pin", pinOff: "push-pin-slash", restore: "clock-counter-clockwise", seek: "arrow-right", sleep: "moon", bug: "bug",
   selectAll: "selection-all", grip: "dots-six-vertical", dragHandle: "dots-six", more: "dots-three", moreVert: "dots-three-vertical", minimize: "minus", maximize: "square", restoreWin: "copy-simple",
   spinner: "circle-notch", offline: "wifi-slash", warn: "warning", battery: "battery-low", external: "arrow-square-out", folder: "folder",
-  copy: "copy", resume: "play-circle", music: "music-note", cloud: "cloud", sync: "arrows-clockwise", lan: "network", plus: "plus",
+  copy: "copy", qr: "qr-code", resume: "play-circle", music: "music-note", cloud: "cloud", sync: "arrows-clockwise", lan: "network", plus: "plus",
   // The song stash (#150).
   stash: "stack",
   // Now playing (#47): device kinds, the side panel toggle, the connect dropdown and the fullscreen glyphs.
diff --git a/desktop/src/main/fake-core/index.ts b/desktop/src/main/fake-core/index.ts
index bf9fe9da..528cbc51 100644
--- a/desktop/src/main/fake-core/index.ts
+++ b/desktop/src/main/fake-core/index.ts
@@ -135,6 +135,8 @@ export class FakeCore implements CoreHandle {
   private devices: DeviceInfo[] = [];
   private connection: ConnectionState = { tier: "local", connected: false, coordinatorUrl: undefined, clockOffsetMs: 0, roundTripMs: undefined, peerCount: 0, error: undefined };
   private settings = new Map<string, Setting>();
+  /** Each seeded setting's default (JSON), for setupSettings. */
+  private settingDefaults = new Map<string, string>();
   private audio: AudioSettings;
   private transitions: TransitionSettings = { mode: "off", crossfadeSeconds: 6 };
   private outputDevices: OutputDevice[] = [
@@ -666,6 +668,9 @@ export class FakeCore implements CoreHandle {
       case "importConfig":
         this.importConfig(cmd.data.document);
         return;
+      case "applySetupSettings":
+        this.applySetupSettings(cmd.data.settings);
+        return;
       case "setAudioSettings":
         this.audio = cmd.data.settings;
         this.emit({ type: "audioSettingsChanged", data: { settings: this.audio } });
@@ -2228,6 +2233,7 @@ export class FakeCore implements CoreHandle {
       if (onlyKey && key !== onlyKey) continue;
       const setting: Setting = { key, value: JSON.stringify(value), scope, updatedAt: Date.now() };
       this.settings.set(key, setting);
+      this.settingDefaults.set(key, setting.value);
       if (onlyKey) this.emit({ type: "settingChanged", data: { setting } });
     }
     if (onlyKey?.startsWith("battery.")) this.refreshSaver();
@@ -2313,6 +2319,29 @@ export class FakeCore implements CoreHandle {
     };
   }
 
+  /** Like the core: the account-synced settings changed from their defaults, key → value. */
+  private setupSettings(): string {
+    const out: Record<string, unknown> = {};
+    for (const s of this.settings.values()) {
+      if (s.scope === "accountSynced" && this.settingDefaults.get(s.key) !== s.value) out[s.key] = JSON.parse(s.value);
+    }
+    return JSON.stringify(out);
+  }
+
+  /** Like the core: known account-synced keys only. */
+  private applySetupSettings(json: string): void {
+    let obj: unknown;
+    try {
+      obj = JSON.parse(json);
+    } catch {
+      return;
+    }
+    if (!obj || typeof obj !== "object" || Array.isArray(obj)) return;
+    for (const [key, value] of Object.entries(obj)) {
+      if (this.settings.get(key)?.scope === "accountSynced") this.setSettingValue(key, JSON.stringify(value));
+    }
+  }
+
   private importConfig(document: string): void {
     try {
       const doc = JSON.parse(document) as ConfigDocument;
@@ -2924,6 +2953,8 @@ export class FakeCore implements CoreHandle {
         return { type: "text", data: this.diagnostics() };
       case "roomDiagnostics":
         throw new Error("roomDiagnostics is answered by query()");
+      case "setupSettings":
+        return { type: "text", data: this.setupSettings() };
       case "configDocument":
         return { type: "text", data: JSON.stringify(this.configDocument(q.data.include_secrets), null, 2) };
       case "createShare": {
diff --git a/desktop/src/main/ipc.test.ts b/desktop/src/main/ipc.test.ts
index 1c583453..33765cd5 100644
--- a/desktop/src/main/ipc.test.ts
+++ b/desktop/src/main/ipc.test.ts
@@ -208,6 +208,26 @@ describe("ipc", () => {
     await expect(handlers.get(IPC.configExport)!(ours, "[]")).rejects.toThrow("rejected");
   });
 
+  it("builds the setup link, with the password only when asked for", async () => {
+    const { passwordFor } = setup();
+    const build = handlers.get(IPC.setupLink)!;
+    const req = { server: "https://a.example", user: "alice", coordinator: "wss://c.example", includePassword: false };
+    const withCoordinator = "hocket://setup?server=https%3A%2F%2Fa.example&user=alice&coordinator=wss%3A%2F%2Fc.example";
+    expect(await build(ours, req)).toEqual({ link: withCoordinator, codeLink: withCoordinator, passwordAvailable: true });
+    const withPassword = "hocket://setup?server=https%3A%2F%2Fa.example&user=alice&password=secret";
+    expect(await build(ours, { ...req, coordinator: undefined, includePassword: true })).toEqual({ link: withPassword, codeLink: withPassword, passwordAvailable: true });
+    expect(passwordFor).toHaveBeenCalledWith("https://a.example", "alice");
+    passwordFor.mockReturnValue(undefined);
+    expect(await build(ours, { ...req, includePassword: true })).toEqual({ link: withCoordinator, codeLink: withCoordinator, passwordAvailable: false });
+    expect(() => build(ours, { server: "https://a.example", includePassword: true })).toThrow("rejected");
+    // Packed settings ride along; past what a code can carry, the code leaves them out.
+    const plain = "hocket://setup?server=https%3A%2F%2Fa.example&user=alice";
+    expect(await build(ours, { ...req, coordinator: undefined, settings: "eNqrVg" })).toEqual({ link: `${plain}&settings=eNqrVg`, codeLink: `${plain}&settings=eNqrVg`, passwordAvailable: false });
+    const big = "A".repeat(2000);
+    expect(await build(ours, { ...req, coordinator: undefined, settings: big })).toEqual({ link: `${plain}&settings=${big}`, codeLink: plain, passwordAvailable: false });
+    expect(() => build(ours, { ...req, settings: "not packed!" })).toThrow("rejected");
+  });
+
   it("config import adds each server carried in the file, then imports the document without the secrets", async () => {
     const { dispatch } = setup();
     dialogs.showOpenDialog.mockResolvedValue({ canceled: false, filePaths: ["/home/u/cfg.json"] });
diff --git a/desktop/src/main/ipc.ts b/desktop/src/main/ipc.ts
index 042e81cb..e12d422d 100644
--- a/desktop/src/main/ipc.ts
+++ b/desktop/src/main/ipc.ts
@@ -9,8 +9,9 @@ import { copyFile, mkdir, readdir, readFile, realpath, rm, writeFile } from "nod
 import { dirname, isAbsolute, join, relative } from "node:path";
 import type { ArtworkLayout, Command, Query, QueryResult, RoomDiagnosticsStatus } from "@core/api";
 import type { CoreHandle } from "@shared/core-handle";
-import type { AppMeta, AppPrefs, CredentialStorage, DiagnosticsOptions, DiagnosticsSummary, OpenDialogRequest, OpenedTextFile, SaveDialogRequest, WindowControl } from "@shared/bridge-types";
+import type { AppMeta, AppPrefs, CredentialStorage, SetupLinkRequest, SetupLinkResult, DiagnosticsOptions, DiagnosticsSummary, OpenDialogRequest, OpenedTextFile, SaveDialogRequest, WindowControl } from "@shared/bridge-types";
 import { ARTWORK_LAYOUT_MAX_SIDE, IPC } from "@shared/bridge-types";
+import { formatDeepLink } from "@shared/deep-link";
 import { t } from "@shared/strings";
 import type { ArtworkRegistry } from "./artwork";
 import { extractSecrets, parseConfigDocument, resolveSecretReferences } from "./config-secrets";
@@ -59,6 +60,17 @@ export const REUSE_COLLECTION_MS = 15_000;
 /** Bundles kept in the diagnostics folder; older ones are removed when a new one is written. */
 const KEEP_BUNDLES = 5;
 
+/** The longest setup link a QR code carries (as Android's SetupDeviceSheet). */
+export const MAX_SETUP_CODE_LINK = 1800;
+
+function isSetupLinkRequest(v: unknown): v is SetupLinkRequest {
+  if (!v || typeof v !== "object") return false;
+  const r = v as Record<string, unknown>;
+  const short = (s: unknown) => typeof s === "string" && s.length > 0 && s.length <= 512;
+  const packed = (s: unknown) => typeof s === "string" && s.length <= 6000 && /^[A-Za-z0-9_-]+$/.test(s);
+  return short(r.server) && short(r.user) && (r.coordinator === undefined || short(r.coordinator)) && (r.settings === undefined || packed(r.settings)) && typeof r.includePassword === "boolean";
+}
+
 function isOurs(windows: Windows, sender: Electron.WebContents): boolean {
   return windows.all().some((w) => w.webContents.id === sender.id);
 }
@@ -286,6 +298,23 @@ export function installIpc(deps: IpcDeps): void {
     return r.filePath;
   });
 
+  // Set up another device: the password leaves the credential store only when asked for.
+  ipcMain.handle(IPC.setupLink, (e, raw: unknown): SetupLinkResult => {
+    if (!isOurs(windows, e.sender) || !isSetupLinkRequest(raw)) throw new Error("rejected");
+    const password = deps.credentials.passwordFor(raw.server, raw.user);
+    const base = {
+      kind: "setup" as const,
+      server: raw.server,
+      user: raw.user,
+      ...(raw.includePassword && password ? { password } : {}),
+      ...(raw.coordinator ? { coordinator: raw.coordinator } : {}),
+    };
+    const link = formatDeepLink({ ...base, ...(raw.settings ? { settings: raw.settings } : {}) });
+    // Past this a code gets too dense to scan off a screen: it leaves the settings out (Copy link keeps them).
+    const codeLink = link.length <= MAX_SETUP_CODE_LINK ? link : formatDeepLink(base);
+    return { link, codeLink, passwordAvailable: password !== undefined };
+  });
+
   ipcMain.handle(IPC.configImport, async (e): Promise<boolean> => {
     const win = BrowserWindow.fromWebContents(e.sender);
     if (!win || !isOurs(windows, e.sender)) throw new Error("rejected");
diff --git a/desktop/src/preload/index.ts b/desktop/src/preload/index.ts
index e8c6b744..3f7650bd 100644
--- a/desktop/src/preload/index.ts
+++ b/desktop/src/preload/index.ts
@@ -3,7 +3,7 @@
 import { contextBridge, ipcRenderer } from "electron";
 import type { ArtworkLayout, ArtworkLayoutRequest, Command, Event, Query, QueryResult } from "@core/api";
 import type { RoomDiagnosticsStatus } from "@core/api";
-import type { AppMeta, AppPrefs, CredentialStorage, DiagnosticsOptions, DiagnosticsSummary, HocketBridge, OpenDialogRequest, OpenedTextFile, PickedRecording, ReportSendRequest, SaveDialogRequest, StagedScreenshot, UndecodedImage, ThemeChoice, WindowControl, WindowState } from "@shared/bridge-types";
+import type { AppMeta, AppPrefs, CredentialStorage, DiagnosticsOptions, DiagnosticsSummary, HocketBridge, OpenDialogRequest, OpenedTextFile, PickedRecording, ReportSendRequest, SaveDialogRequest, SetupLinkRequest, SetupLinkResult, StagedScreenshot, UndecodedImage, ThemeChoice, WindowControl, WindowState } from "@shared/bridge-types";
 import { IPC } from "@shared/bridge-types";
 
 function subscribe<T>(channel: string, listener: (payload: T) => void): () => void {
@@ -62,6 +62,7 @@ const bridge: HocketBridge = {
     export: (document: string) => ipcRenderer.invoke(IPC.configExport, document) as Promise<string | undefined>,
     import: () => ipcRenderer.invoke(IPC.configImport) as Promise<boolean>,
   },
+  setupLink: (req: SetupLinkRequest) => ipcRenderer.invoke(IPC.setupLink, req) as Promise<SetupLinkResult>,
   clipboard: {
     writeText: (text: string) => ipcRenderer.send(IPC.clipboardWrite, text),
   },
diff --git a/desktop/src/renderer/App.tsx b/desktop/src/renderer/App.tsx
index fee575d1..9687aed8 100644
--- a/desktop/src/renderer/App.tsx
+++ b/desktop/src/renderer/App.tsx
@@ -4,6 +4,7 @@ import { lazy, Suspense, useEffect, useLayoutEffect, useRef, useState, type CSSP
 import type { Command } from "@core/api";
 import { parseDeepLink } from "@shared/deep-link";
 import { t } from "@shared/strings";
+import { showToast } from "./lib/ui-toast";
 import { SIDEBAR_RAIL, useApp } from "./store/app";
 import { useGlobalKeyboard } from "./store/keyboard";
 import { bridge } from "./core/bridge";
@@ -214,6 +215,12 @@ function useDeepLinks() {
       // Main already validated and canonicalised the link.
       const link = parseDeepLink(url);
       if (!link || link.kind === "open") return;
+      if (link.kind === "setup") {
+        // Another device's setup code: the setup form applies it; a signed-in device turns it away.
+        if (useApp.getState().servers.length > 0) showToast(t("setupDevice.alreadySetUp"));
+        else useApp.getState().setPendingSetup(link);
+        return;
+      }
       if (link.kind === "track") {
         // Never mutate the queue on an external request: confirm with a
         // toast, and only for a track the current server knows.
diff --git a/desktop/src/renderer/components/Dialogs.tsx b/desktop/src/renderer/components/Dialogs.tsx
index 54d16d1f..c155a44b 100644
--- a/desktop/src/renderer/components/Dialogs.tsx
+++ b/desktop/src/renderer/components/Dialogs.tsx
@@ -13,6 +13,7 @@ import { Slider } from "./controls";
 import { useVolumeControl } from "../lib/volume";
 import { SongInfo } from "./SongInfo";
 import { ReportDialog } from "./ReportDialog";
+import { SetupDeviceDialog } from "./SetupDeviceDialog";
 import { trapTab, useReturnFocus } from "../lib/focus";
 import { usePresence } from "../lib/presence";
 
@@ -57,6 +58,7 @@ export function Dialogs() {
         {dialog.kind === "trackInfo" ? <SongInfo trackId={dialog.trackId} /> : null}
         {dialog.kind === "albumInfo" ? <AlbumInfo albumId={dialog.albumId} /> : null}
         {dialog.kind === "report" ? <ReportDialog allDevices={dialog.allDevices} /> : null}
+        {dialog.kind === "setupDevice" ? <SetupDeviceDialog /> : null}
       </div>
     </div>
   );
diff --git a/desktop/src/renderer/components/SetupDeviceDialog.tsx b/desktop/src/renderer/components/SetupDeviceDialog.tsx
new file mode 100644
index 00000000..6d3584ba
--- /dev/null
+++ b/desktop/src/renderer/components/SetupDeviceDialog.tsx
@@ -0,0 +1,107 @@
+// Set up another device: a QR code of this device's hocket://setup link (the
+// server, who is signed in, the coordinator when there is one or else the
+// settings changed from their defaults, which a coordinator would sync, and the
+// password only when switched on), for Hocket's scanner or a phone camera, plus Copy link
+// for another computer. Main builds the link so the password leaves the
+// credential store only when asked for (IPC.setupLink).
+import { useEffect, useMemo, useState } from "react";
+import { encode } from "uqr";
+import { t } from "@shared/strings";
+import { packSetupSettings, setupSettingsCount } from "@shared/setup-settings";
+import type { SetupLinkResult } from "@shared/bridge-types";
+import { useApp } from "../store/app";
+import { bridge } from "../core/bridge";
+import { showToast } from "../lib/ui-toast";
+import { Icon } from "./Icon";
+import { Switch } from "./controls";
+
+export function SetupDeviceDialog() {
+  const close = useApp((s) => s.closeDialog);
+  const server = useApp((s) => s.servers[0]);
+  const coordinator = useApp((s) => s.connection.coordinatorUrl) || undefined;
+  const [includePassword, setIncludePassword] = useState(false);
+  const [result, setResult] = useState<SetupLinkResult>();
+  // Without a coordinator the settings ride in the link: the core's JSON, then packed.
+  const [settings, setSettings] = useState<{ json: string; packed: string }>();
+
+  useEffect(() => {
+    setSettings(undefined);
+    if (coordinator) return;
+    let live = true;
+    void (async () => {
+      const r = await bridge().query({ type: "setupSettings" });
+      if (r.type !== "text" || setupSettingsCount(r.data) === 0) return;
+      const packed = await packSetupSettings(r.data);
+      if (live) setSettings({ json: r.data, packed });
+    })().catch((err: unknown) => console.error("setup settings failed", err));
+    return () => { live = false; };
+  }, [coordinator]);
+
+  useEffect(() => {
+    if (!server) return;
+    let live = true;
+    bridge().setupLink({ server: server.url, user: server.username, coordinator, settings: settings?.packed, includePassword })
+      .then((r) => { if (live) setResult(r); })
+      .catch((err: unknown) => console.error("setup link failed", err));
+    return () => { live = false; };
+  }, [server, coordinator, settings, includePassword]);
+
+  if (!server) return null;
+  const host = server.url.replace(/^https?:\/\//, "").replace(/\/$/, "");
+  const passwordOn = includePassword && !!result?.passwordAvailable;
+  const unavailable = result !== undefined && !result.passwordAvailable;
+  return (
+    <>
+      <h2 className="dialog-title" id="dialog-title">{t("setupDevice.title")}</h2>
+      <p className="muted small">{t("setupDevice.body")}</p>
+      <div className="setup-device-code" role="img" aria-label={t("setupDevice.code", { host })} data-testid="setup-device-code">
+        {result ? <QrCode text={result.codeLink} /> : null}
+      </div>
+      <dl className="setup-device-facts">
+        <dt>{t("setupDevice.server")}</dt>
+        <dd>{t("setupDevice.serverValue", { user: server.username, host })}</dd>
+        <dt>{t("setupDevice.coordinator")}</dt>
+        <dd data-testid="setup-device-coordinator">{coordinator ?? t("setupDevice.noCoordinator")}</dd>
+        <dt>{t("setupDevice.settings")}</dt>
+        <dd data-testid="setup-device-settings">{settingsSummary(coordinator, settings?.json, result)}</dd>
+      </dl>
+      <label className="setup-device-password">
+        <span className="grow">
+          <span>{t("setupDevice.includePassword")}</span>
+          <span id="setup-device-password-desc" className={`small ${passwordOn ? "setup-device-warn" : "muted"}`}>
+            {unavailable ? t("setupDevice.passwordUnavailable") : passwordOn ? t("setupDevice.includePasswordOn") : t("setupDevice.includePasswordOff")}
+          </span>
+        </span>
+        <Switch checked={passwordOn} disabled={unavailable} onChange={setIncludePassword} aria-describedby="setup-device-password-desc" data-testid="setup-device-password" />
+      </label>
+      <div className="buttons">
+        <button type="button" className="btn" disabled={!result} onClick={() => { if (result) { bridge().clipboard.writeText(result.link); showToast(t("setupDevice.copied")); } }} data-testid="setup-device-copy"><Icon name="copy" size={18} />{t("setupDevice.copy")}</button>
+        <button type="button" className="btn primary" onClick={close} data-autofocus>{t("misc.close")}</button>
+      </div>
+    </>
+  );
+}
+
+function settingsSummary(coordinator: string | undefined, json: string | undefined, result: SetupLinkResult | undefined): string {
+  if (coordinator) return t("setupDevice.settingsSynced");
+  const count = setupSettingsCount(json);
+  if (count === 0) return t("setupDevice.settingsNone");
+  if (result && result.codeLink !== result.link) return t("setupDevice.settingsTooMany");
+  return count === 1 ? t("setupDevice.settingsCountOne") : t("setupDevice.settingsCount", { count });
+}
+
+/** [text] as a QR code: dark modules on white (scanners want a light quiet zone), crisp at any size. */
+function QrCode({ text }: { text: string }) {
+  const path = useMemo(() => {
+    const { data, size } = encode(text, { ecc: "M", border: 0 });
+    let d = "";
+    for (let y = 0; y < size; y++) for (let x = 0; x < size; x++) if (data[y]![x]) d += `M${x} ${y}h1v1h-1z`;
+    return { d, size };
+  }, [text]);
+  return (
+    <svg viewBox={`-2 -2 ${path.size + 4} ${path.size + 4}`} shapeRendering="crispEdges" aria-hidden="true">
+      <rect x={-2} y={-2} width={path.size + 4} height={path.size + 4} fill="#fff" />
+      <path d={path.d} fill="#000" />
+    </svg>
+  );
+}
diff --git a/desktop/src/renderer/components/icons.ts b/desktop/src/renderer/components/icons.ts
index 34005435..d2bf5714 100644
--- a/desktop/src/renderer/components/icons.ts
+++ b/desktop/src/renderer/components/icons.ts
@@ -85,6 +85,7 @@ export const ICONS: Record<string, readonly [string, string?]> = {
   external: ["<path fill=\"currentColor\" d=\"M224 104a8 8 0 0 1-16 0V59.32l-66.33 66.34a8 8 0 0 1-11.32-11.32L196.68 48H152a8 8 0 0 1 0-16h64a8 8 0 0 1 8 8Zm-40 24a8 8 0 0 0-8 8v72H48V80h72a8 8 0 0 0 0-16H48a16 16 0 0 0-16 16v128a16 16 0 0 0 16 16h128a16 16 0 0 0 16-16v-72a8 8 0 0 0-8-8\"/>","<path fill=\"currentColor\" d=\"M192 136v72a16 16 0 0 1-16 16H48a16 16 0 0 1-16-16V80a16 16 0 0 1 16-16h72a8 8 0 0 1 0 16H48v128h128v-72a8 8 0 0 1 16 0m32-96a8 8 0 0 0-8-8h-64a8 8 0 0 0-5.66 13.66L172.69 72l-42.35 42.34a8 8 0 0 0 11.32 11.32L184 83.31l26.34 26.35A8 8 0 0 0 224 104Z\"/>"],
   folder: ["<path fill=\"currentColor\" d=\"M216 72h-84.69L104 44.69A15.86 15.86 0 0 0 92.69 40H40a16 16 0 0 0-16 16v144.62A15.4 15.4 0 0 0 39.38 216h177.51A15.13 15.13 0 0 0 232 200.89V88a16 16 0 0 0-16-16M40 56h52.69l16 16H40Zm176 144H40V88h176Z\"/>","<path fill=\"currentColor\" d=\"M216 72h-84.69L104 44.69A15.88 15.88 0 0 0 92.69 40H40a16 16 0 0 0-16 16v144.62A15.41 15.41 0 0 0 39.39 216h177.5A15.13 15.13 0 0 0 232 200.89V88a16 16 0 0 0-16-16M40 56h52.69l16 16H40Z\"/>"],
   copy: ["<path fill=\"currentColor\" d=\"M216 32H88a8 8 0 0 0-8 8v40H40a8 8 0 0 0-8 8v128a8 8 0 0 0 8 8h128a8 8 0 0 0 8-8v-40h40a8 8 0 0 0 8-8V40a8 8 0 0 0-8-8m-56 176H48V96h112Zm48-48h-32V88a8 8 0 0 0-8-8H96V48h112Z\"/>","<path fill=\"currentColor\" d=\"M216 32H88a8 8 0 0 0-8 8v40H40a8 8 0 0 0-8 8v128a8 8 0 0 0 8 8h128a8 8 0 0 0 8-8v-40h40a8 8 0 0 0 8-8V40a8 8 0 0 0-8-8m-8 128h-32V88a8 8 0 0 0-8-8H96V48h112Z\"/>"],
+  qr: ["<path fill=\"currentColor\" d=\"M104 40H56a16 16 0 0 0-16 16v48a16 16 0 0 0 16 16h48a16 16 0 0 0 16-16V56a16 16 0 0 0-16-16m0 64H56V56h48zm0 32H56a16 16 0 0 0-16 16v48a16 16 0 0 0 16 16h48a16 16 0 0 0 16-16v-48a16 16 0 0 0-16-16m0 64H56v-48h48zm96-160h-48a16 16 0 0 0-16 16v48a16 16 0 0 0 16 16h48a16 16 0 0 0 16-16V56a16 16 0 0 0-16-16m0 64h-48V56h48zm-64 72v-32a8 8 0 0 1 16 0v32a8 8 0 0 1-16 0m80-16a8 8 0 0 1-8 8h-24v40a8 8 0 0 1-8 8h-32a8 8 0 0 1 0-16h24v-56a8 8 0 0 1 16 0v8h24a8 8 0 0 1 8 8m0 32v16a8 8 0 0 1-16 0v-16a8 8 0 0 1 16 0\"/>","<path fill=\"currentColor\" d=\"M120 56v48a16 16 0 0 1-16 16H56a16 16 0 0 1-16-16V56a16 16 0 0 1 16-16h48a16 16 0 0 1 16 16m-16 80H56a16 16 0 0 0-16 16v48a16 16 0 0 0 16 16h48a16 16 0 0 0 16-16v-48a16 16 0 0 0-16-16m96-96h-48a16 16 0 0 0-16 16v48a16 16 0 0 0 16 16h48a16 16 0 0 0 16-16V56a16 16 0 0 0-16-16m-56 144a8 8 0 0 0 8-8v-32a8 8 0 0 0-16 0v32a8 8 0 0 0 8 8m64-32h-24v-8a8 8 0 0 0-16 0v56h-24a8 8 0 0 0 0 16h32a8 8 0 0 0 8-8v-40h24a8 8 0 0 0 0-16m0 32a8 8 0 0 0-8 8v16a8 8 0 0 0 16 0v-16a8 8 0 0 0-8-8\"/>"],
   resume: ["<path fill=\"currentColor\" d=\"M128 24a104 104 0 1 0 104 104A104.11 104.11 0 0 0 128 24m0 192a88 88 0 1 1 88-88a88.1 88.1 0 0 1-88 88m48.24-94.78l-64-40A8 8 0 0 0 100 88v80a8 8 0 0 0 12.24 6.78l64-40a8 8 0 0 0 0-13.56M116 153.57v-51.14L156.91 128Z\"/>","<path fill=\"currentColor\" d=\"M128 24a104 104 0 1 0 104 104A104.11 104.11 0 0 0 128 24m40.55 110.58l-52 36A8 8 0 0 1 104 164V92a8 8 0 0 1 12.55-6.58l52 36a8 8 0 0 1 0 13.16\"/>"],
   music: ["<path fill=\"currentColor\" d=\"m210.3 56.34l-80-24A8 8 0 0 0 120 40v108.26A48 48 0 1 0 136 184V98.75l69.7 20.91A8 8 0 0 0 216 112V64a8 8 0 0 0-5.7-7.66M88 216a32 32 0 1 1 32-32a32 32 0 0 1-32 32m112-114.75l-64-19.2v-31.3L200 70Z\"/>","<path fill=\"currentColor\" d=\"m210.3 56.34l-80-24A8 8 0 0 0 120 40v108.26A48 48 0 1 0 136 184V98.75l69.7 20.91A8 8 0 0 0 216 112V64a8 8 0 0 0-5.7-7.66\"/>"],
   cloud: ["<path fill=\"currentColor\" d=\"M160 40a88.09 88.09 0 0 0-78.71 48.67A64 64 0 1 0 72 216h88a88 88 0 0 0 0-176m0 160H72a48 48 0 0 1 0-96c1.1 0 2.2 0 3.29.11A88 88 0 0 0 72 128a8 8 0 0 0 16 0a72 72 0 1 1 72 72\"/>","<path fill=\"currentColor\" d=\"M160.06 40a88.1 88.1 0 0 0-78.77 48.67A87.5 87.5 0 0 0 72 127.73a8.18 8.18 0 0 1-7.43 8.27a8 8 0 0 1-8.57-8a103.7 103.7 0 0 1 5.34-32.92a4 4 0 0 0-4.75-5.18A64.09 64.09 0 0 0 8 152c0 35.19 29.75 64 65 64h87a88.09 88.09 0 0 0 87.93-91.48C246.11 77.54 207.07 40 160.06 40\"/>"],
diff --git a/desktop/src/renderer/store/app.ts b/desktop/src/renderer/store/app.ts
index 2aeec9de..156cfb3b 100644
--- a/desktop/src/renderer/store/app.ts
+++ b/desktop/src/renderer/store/app.ts
@@ -5,6 +5,7 @@ import { useMemo } from "react";
 import { create } from "zustand";
 import type { ActionDescriptor, ActionTarget, Command, Event, Query, Setting } from "@core/api";
 import type { AppMeta, AppPrefs, CredentialStorage, WindowState } from "@shared/bridge-types";
+import type { SetupLink } from "@shared/deep-link";
 import { expectResult, snapshotOf, type ResultData } from "@shared/core-handle";
 import { bridge } from "../core/bridge";
 import { loadLocal, saveLocal } from "../lib/local-settings";
@@ -81,7 +82,8 @@ export type DialogState =
   | { kind: "trackInfo"; trackId: string }
   | { kind: "albumInfo"; albumId: string }
   /** Save to Coordinator; `allDevices` as the diagnostics page's bundle options. */
-  | { kind: "report"; allDevices: boolean };
+  | { kind: "report"; allDevices: boolean }
+  | { kind: "setupDevice" };
 
 /** The Add to playlist picker opened on its own (a "+" button, the shortcut), beside what opened it. */
 export interface PlaylistPickerState {
@@ -105,6 +107,8 @@ export interface UiState {
   contextMenu: ContextMenuState | undefined;
   playlistPicker: PlaylistPickerState | undefined;
   dialog: DialogState | undefined;
+  /** Another device's setup link (hocket://setup) waiting for the setup form to apply it. */
+  pendingSetup: SetupLink | undefined;
   selection: Selection;
   /** View id the selection belongs to; a route change clears it. */
   selectionScope: string;
@@ -151,6 +155,7 @@ export interface AppStore extends CoreState, UiState {
   closePlaylistPicker(): void;
   openDialog(dialog: DialogState): void;
   closeDialog(): void;
+  setPendingSetup(link: SetupLink | undefined): void;
   setSelection(selection: Selection, scope: string, kind?: SelectionKind): void;
   clearSelection(): void;
   setSearchQuery(q: string): void;
@@ -204,6 +209,7 @@ export const useApp = create<AppStore>((set, get) => ({
   contextMenu: undefined,
   playlistPicker: undefined,
   dialog: undefined,
+  pendingSetup: undefined,
   selection: EMPTY_SELECTION,
   selectionScope: "",
   selectionKind: undefined,
@@ -283,6 +289,9 @@ export const useApp = create<AppStore>((set, get) => ({
   closeDialog() {
     set({ dialog: undefined });
   },
+  setPendingSetup(pendingSetup) {
+    set({ pendingSetup });
+  },
   setSelection(selection, scope, kind) {
     set({ selection, selectionScope: scope, selectionKind: kind });
   },
diff --git a/desktop/src/renderer/styles/m3-pages.css b/desktop/src/renderer/styles/m3-pages.css
index cc74dd09..9ac72b89 100644
--- a/desktop/src/renderer/styles/m3-pages.css
+++ b/desktop/src/renderer/styles/m3-pages.css
@@ -32,8 +32,10 @@
 .settings-account-sync { width: 100%; height: 40px; justify-content: center; gap: 8px; }
 .settings-account-links { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); gap: 2px; }
 .settings-account-link { min-width: 0; padding: 0 8px; height: 44px; justify-content: center; gap: 8px; background: var(--bg-elev); color: var(--fg); font-weight: 600; border-radius: var(--shape-xs); }
-.settings-account-link:first-child { border-radius: var(--shape-lg) var(--shape-xs) var(--shape-xs) var(--shape-lg); }
-.settings-account-link:last-child { border-radius: var(--shape-xs) var(--shape-lg) var(--shape-lg) var(--shape-xs); }
+/* Stats and Devices side by side, Set up another device across the row below: one rounded block. */
+.settings-account-link:nth-child(1) { border-radius: var(--shape-lg) var(--shape-xs) var(--shape-xs) var(--shape-xs); }
+.settings-account-link:nth-child(2) { border-radius: var(--shape-xs) var(--shape-lg) var(--shape-xs) var(--shape-xs); }
+.settings-account-link:nth-child(3) { grid-column: 1 / -1; border-radius: var(--shape-xs) var(--shape-xs) var(--shape-lg) var(--shape-lg); }
 .settings-account-link:hover { background: color-mix(in srgb, var(--fg) 5%, var(--bg-elev)); }
 .settings-account-link .icon { color: var(--accent-text); }
 /* Settings search: an M3 search bar at the top of the nav; typing swaps the
@@ -160,6 +162,15 @@
 .setup-foot { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; }
 .setup-foot .btn.text { padding: 0 8px; margin-left: -8px; gap: 8px; color: var(--accent-text); font-weight: 600; }
 .setup-foot .setup-hint { margin: 0; }
+/* Set up another device (SetupDeviceDialog): the code on white in either theme, scanners want a light quiet zone. */
+.setup-device-code { align-self: center; width: min(260px, 100%); aspect-ratio: 1; padding: 12px; background: #fff; border-radius: var(--shape-lg); box-sizing: border-box; }
+.setup-device-code svg { display: block; width: 100%; height: 100%; }
+.setup-device-facts { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 4px 16px; margin: 0; }
+.setup-device-facts dt { color: var(--fg-muted); }
+.setup-device-facts dd { margin: 0; overflow-wrap: anywhere; }
+.dialog .setup-device-password { flex-direction: row; align-items: center; gap: 16px; cursor: pointer; color: var(--fg); }
+.setup-device-password .grow { display: flex; flex-direction: column; gap: 2px; font-weight: 400; }
+.setup-device-warn { color: var(--danger); }
 /* After Connect: what the server is, while the first sync runs. */
 .setup-summary { align-items: stretch; text-align: center; }
 .setup-version { margin: 0; font-size: 28px; line-height: 34px; font-weight: 700; }
diff --git a/desktop/src/renderer/views/Settings.tsx b/desktop/src/renderer/views/Settings.tsx
index f79d742b..59c86edb 100644
--- a/desktop/src/renderer/views/Settings.tsx
+++ b/desktop/src/renderer/views/Settings.tsx
@@ -85,6 +85,7 @@ export function Settings({ section }: { section?: string }) {
 function AccountCard() {
   const server = useApp((s) => s.servers[0]);
   const navigate = useApp((s) => s.navigate);
+  const openDialog = useApp((s) => s.openDialog);
   const syncing = useApp((s) => s.jobs.some((j) => j.kind === "librarySync" && (j.state === "running" || j.state === "queued")));
   if (!server) return null;
   const host = server.url.replace(/^https?:\/\//, "").replace(/\/$/, "");
@@ -105,6 +106,7 @@ function AccountCard() {
       <div className="settings-account-links">
         <button type="button" className="btn settings-account-link" onClick={() => navigate({ view: "stats" })} data-testid="settings-account-stats"><Icon name="stats" size={18} />{t("settings.account.stats")}</button>
         <button type="button" className="btn settings-account-link" onClick={() => navigate({ view: "settings", param: "connect" }, true)} data-testid="settings-account-devices"><Icon name="devices" size={18} />{t("settings.account.devices")}</button>
+        <button type="button" className="btn settings-account-link" onClick={() => openDialog({ kind: "setupDevice" })} data-testid="settings-account-setup-device"><Icon name="qr" size={18} />{t("settings.account.setUpDevice")}</button>
       </div>
     </div>
   );
diff --git a/desktop/src/renderer/views/Setup.tsx b/desktop/src/renderer/views/Setup.tsx
index 232dc1cd..728763d1 100644
--- a/desktop/src/renderer/views/Setup.tsx
+++ b/desktop/src/renderer/views/Setup.tsx
@@ -9,6 +9,8 @@ import { t } from "@shared/strings";
 import { useApp } from "../store/app";
 import { bridge } from "../core/bridge";
 import { normaliseServerUrl } from "../lib/server-url";
+import { parseDeepLink, type SetupLink } from "@shared/deep-link";
+import { unpackSetupSettings } from "@shared/setup-settings";
 import { CredentialWarning } from "../components/CredentialWarning";
 import { Icon } from "../components/Icon";
 import { BrandMark } from "../components/BrandMark";
@@ -66,16 +68,57 @@ function ConnectForm() {
   }, [lastError, submittedAt, busy]);
 
   const cleartext = /^http:\/\/./i.test(url.trim());
-  const submit = (e: React.FormEvent) => {
-    e.preventDefault();
-    const u = normaliseServerUrl(url);
+  // The coordinator, or else the (packed) settings, from a setup link: applied as the form connects.
+  const [linkCoordinator, setLinkCoordinator] = useState<string | undefined>(undefined);
+  const [linkSettings, setLinkSettings] = useState<string | undefined>(undefined);
+  const connect = (rawUrl: string, user: string, pass: string, coordinator = linkCoordinator, settings = linkSettings) => {
+    const u = normaliseServerUrl(rawUrl);
     if (!u) return setError(t("setup.errorUrl"));
-    if (!username.trim() || !password) return setError(t("setup.errorCredentials"));
+    if (!user.trim() || !pass) return setError(t("setup.errorCredentials"));
     setError(undefined);
     setBusy(true);
     setSubmittedAt(Date.now());
     setSummary(true);
-    bridge().dispatch({ type: "addServer", data: { url: u, username: username.trim(), password, name: undefined } });
+    if (coordinator) {
+      bridge().dispatch({ type: "setCoordinatorUrl", data: { url: coordinator } });
+      bridge().dispatch({ type: "connectCoordinator" });
+    }
+    if (settings) {
+      void unpackSetupSettings(settings).then((json) => {
+        if (json) bridge().dispatch({ type: "applySetupSettings", data: { settings: json } });
+      });
+    }
+    bridge().dispatch({ type: "addServer", data: { url: u, username: user.trim(), password: pass, name: undefined } });
+  };
+  const submit = (e: React.FormEvent) => {
+    e.preventDefault();
+    connect(url, username, password);
+  };
+  // Another device's setup code (Set up another device): fills the form (its
+  // coordinator or settings are applied as the form connects). Pasted here with the password, it
+  // connects straight away; a hocket:// link opened from outside (any web page
+  // can open one) waits for Connect, so the person sees the server first.
+  const applySetupLink = (link: SetupLink, connectNow: boolean) => {
+    setUrl(link.server);
+    setUsername(link.user);
+    setPassword(link.password ?? "");
+    setLinkCoordinator(link.coordinator);
+    setLinkSettings(link.settings);
+    setError(undefined);
+    if (connectNow && link.password && !busy) connect(link.server, link.user, link.password, link.coordinator, link.settings);
+  };
+  const pendingSetup = useApp((s) => s.pendingSetup);
+  useEffect(() => {
+    if (!pendingSetup) return;
+    useApp.getState().setPendingSetup(undefined);
+    applySetupLink(pendingSetup, false);
+    // eslint-disable-next-line react-hooks/exhaustive-deps -- applies each link once, as it arrives
+  }, [pendingSetup]);
+  const onUrl = (value: string) => {
+    // A pasted setup link, rather than an address.
+    const link = /^\s*hocket:/i.test(value) ? parseDeepLink(value.trim()) : undefined;
+    if (link?.kind === "setup") applySetupLink(link, true);
+    else setUrl(value);
   };
   const ready = !!url.trim() && !!username.trim() && !!password;
   return (
@@ -83,7 +126,7 @@ function ConnectForm() {
       <h1 id="setup-title" className="setup-title">{t("setup.title")}</h1>
       <p className="setup-subtitle" id="setup-subtitle">{t("setup.subtitle")}</p>
       <CredentialWarning />
-      <label className="setup-field">{t("setup.url")}<input className="input" type="url" aria-required="true" aria-invalid={error === t("setup.errorUrl") || undefined} aria-describedby={[error ? "setup-error" : "", "setup-url-hint", cleartext ? "setup-cleartext" : ""].filter(Boolean).join(" ")} placeholder={t("setup.urlPlaceholder")} value={url} onChange={(e) => setUrl(e.target.value)} autoFocus data-testid="setup-url" /><span className="setup-hint" id="setup-url-hint">{t("setup.urlHint")}</span></label>
+      <label className="setup-field">{t("setup.url")}<input className="input" type="url" aria-required="true" aria-invalid={error === t("setup.errorUrl") || undefined} aria-describedby={[error ? "setup-error" : "", "setup-url-hint", cleartext ? "setup-cleartext" : ""].filter(Boolean).join(" ")} placeholder={t("setup.urlPlaceholder")} value={url} onChange={(e) => onUrl(e.target.value)} autoFocus data-testid="setup-url" /><span className="setup-hint" id="setup-url-hint">{t("setup.urlHint")}</span></label>
       {cleartext ? <div className="setup-cleartext" id="setup-cleartext" data-testid="setup-cleartext"><Icon name="warn" size={18} />{t("setup.cleartext")}</div> : null}
       <div className="setup-pair">
         <label className="setup-field">{t("setup.username")}<input className="input" aria-required="true" value={username} onChange={(e) => setUsername(e.target.value)} autoComplete="username" data-testid="setup-username" /></label>
diff --git a/desktop/src/shared/bridge-types.ts b/desktop/src/shared/bridge-types.ts
index a3b12e00..c6251acc 100644
--- a/desktop/src/shared/bridge-types.ts
+++ b/desktop/src/shared/bridge-types.ts
@@ -173,6 +173,12 @@ export interface HocketBridge {
      */
     import(): Promise<boolean>;
   };
+  /**
+   * Another device's setup code (Set up another device): main builds the
+   * `hocket://setup` link for this server and user, and puts the password in
+   * from the credential store only when [SetupLinkRequest.includePassword].
+   */
+  setupLink(req: SetupLinkRequest): Promise<SetupLinkResult>;
   clipboard: {
     writeText(text: string): void;
   };
@@ -253,6 +259,7 @@ export const IPC = {
   dialogOpenText: "hocket:dialog:open-text",
   configExport: "hocket:config:export",
   configImport: "hocket:config:import",
+  setupLink: "hocket:setup-link",
   clipboardWrite: "hocket:clipboard:write",
   deepLink: "hocket:deep-link",
   prefsGet: "hocket:prefs:get",
@@ -296,3 +303,20 @@ export type WindowControl =
 export type WindowTheme = "light" | "dark";
 /** The theme setting: a theme, or the system's. */
 export type ThemeChoice = WindowTheme | "system";
+
+export interface SetupLinkRequest {
+  server: string;
+  user: string;
+  coordinator?: string;
+  /** Packed settings (shared/setup-settings), for a device without a coordinator. */
+  settings?: string;
+  includePassword: boolean;
+}
+
+export interface SetupLinkResult {
+  link: string;
+  /** What the QR code shows: [link], or without its settings when they'd make the code too dense to scan. */
+  codeLink: string;
+  /** Whether the credential store has this login's password (so it can be included). */
+  passwordAvailable: boolean;
+}
diff --git a/desktop/src/shared/deep-link.test.ts b/desktop/src/shared/deep-link.test.ts
index d78104e6..34956bca 100644
--- a/desktop/src/shared/deep-link.test.ts
+++ b/desktop/src/shared/deep-link.test.ts
@@ -26,3 +26,33 @@ describe("deep links", () => {
     for (const u of ["hocket://album/a1", "hocket://track/t1", "hocket://open"]) expect(formatDeepLink(parseDeepLink(u)!)).toBe(u);
   });
 });
+
+describe("setup links", () => {
+  it("round-trips every field in the form Android writes", () => {
+    // The same link as SetupLinkTest.roundTripsEveryField on Android.
+    const text = "hocket://setup?server=https%3A%2F%2Fmusic.example.net%2Fnavidrome&user=ada%20lovelace&password=p%26ss%3Dw0rd%2B%C3%BC&coordinator=wss%3A%2F%2Fcoord.example.net";
+    const link = parseDeepLink(text);
+    expect(link).toEqual({ kind: "setup", server: "https://music.example.net/navidrome", user: "ada lovelace", password: "p&ss=w0rd+ü", coordinator: "wss://coord.example.net" });
+    expect(formatDeepLink(link!)).toBe(text);
+  });
+
+  it("leaves out what the link leaves out and normalises the server", () => {
+    expect(parseDeepLink("HOCKET://setup?user=ada&server=Https%3A%2F%2Fmusic.example.net%2F&extra=1")).toEqual({ kind: "setup", server: "https://music.example.net", user: "ada" });
+    expect(formatDeepLink({ kind: "setup", server: "https://x", user: "ada" })).toBe("hocket://setup?server=https%3A%2F%2Fx&user=ada");
+  });
+
+  it("carries packed settings, dropping a value that isn't packed", () => {
+    const link = { kind: "setup", server: "https://x", user: "ada", settings: "eNqrVg_-" } as const;
+    expect(formatDeepLink(link)).toBe("hocket://setup?server=https%3A%2F%2Fx&user=ada&settings=eNqrVg_-");
+    expect(parseDeepLink(formatDeepLink(link))).toEqual(link);
+    expect(parseDeepLink("hocket://setup?server=https%3A%2F%2Fx&user=ada&settings=a%20b")).toEqual({ kind: "setup", server: "https://x", user: "ada" });
+  });
+
+  it("rejects setup links without a usable server or user", () => {
+    expect(parseDeepLink("hocket://setup?user=ada")).toBeUndefined();
+    expect(parseDeepLink("hocket://setup?server=ftp%3A%2F%2Fx&user=ada")).toBeUndefined();
+    expect(parseDeepLink("hocket://setup?server=https%3A%2F%2Fx&user=%20")).toBeUndefined();
+    expect(parseDeepLink("hocket://setup?server=https%3A%2F%2Fx&user=ada%ZZ")).toBeUndefined();
+    expect(parseDeepLink("hocket://setup/x?server=https%3A%2F%2Fx&user=ada")).toBeUndefined();
+  });
+});
diff --git a/desktop/src/shared/deep-link.ts b/desktop/src/shared/deep-link.ts
index e79ead71..6a2dd923 100644
--- a/desktop/src/shared/deep-link.ts
+++ b/desktop/src/shared/deep-link.ts
@@ -1,14 +1,26 @@
 // `hocket://` deep links, parsed once in main before anything is forwarded to
-// a renderer. Only the four documented hosts plus `open` are accepted; the id
-// is a single path segment. Anything else is dropped.
+// a renderer. Only the four documented hosts plus `open` and `setup` are
+// accepted; the id is a single path segment. Anything else is dropped.
+//
+// `setup` is another device's setup code (Set up another device):
+// `hocket://setup?server=<url>&user=<name>[&password=<p>][&coordinator=<url>][&settings=<s>]`,
+// each value percent-encoded; `settings` (sent when there is no coordinator)
+// is packed by ./setup-settings and kept packed here, since unpacking is async.
+// Android reads and writes the same form (android/…/ui/screens/setup/SetupLink.kt).
 import { DEEP_LINK_SCHEME } from "./constants";
 
-export type DeepLink = { kind: "album" | "artist" | "playlist" | "track"; id: string } | { kind: "open" };
+export type SetupLink = { kind: "setup"; server: string; user: string; password?: string; coordinator?: string; settings?: string };
+
+/** A packed settings value: unpadded base64url. */
+const PACKED_RE = /^[A-Za-z0-9_-]+$/;
+
+export type DeepLink = { kind: "album" | "artist" | "playlist" | "track"; id: string } | { kind: "open" } | SetupLink;
 
 const ID_RE = /^[A-Za-z0-9._~-]{1,256}$/;
 
 export function parseDeepLink(url: string): DeepLink | undefined {
-  if (typeof url !== "string" || url.length > 2048) return undefined;
+  // Room for a setup link's packed settings.
+  if (typeof url !== "string" || url.length > 8192) return undefined;
   let u: URL;
   try {
     u = new URL(url);
@@ -19,6 +31,7 @@ export function parseDeepLink(url: string): DeepLink | undefined {
   const kind = u.hostname.toLowerCase();
   const id = u.pathname.replace(/^\/+/, "");
   if (kind === "open") return id ? undefined : { kind: "open" };
+  if (kind === "setup") return id ? undefined : parseSetup(u.search);
   if (kind !== "album" && kind !== "artist" && kind !== "playlist" && kind !== "track") return undefined;
   if (!ID_RE.test(id)) return undefined;
   return { kind, id };
@@ -26,5 +39,40 @@ export function parseDeepLink(url: string): DeepLink | undefined {
 
 /** Canonical form of a parsed link, the only string main forwards. */
 export function formatDeepLink(link: DeepLink): string {
-  return link.kind === "open" ? `${DEEP_LINK_SCHEME}://open` : `${DEEP_LINK_SCHEME}://${link.kind}/${link.id}`;
+  if (link.kind === "open") return `${DEEP_LINK_SCHEME}://open`;
+  if (link.kind === "setup") {
+    const params: [string, string | undefined][] = [["server", link.server], ["user", link.user], ["password", link.password], ["coordinator", link.coordinator], ["settings", link.settings]];
+    return `${DEEP_LINK_SCHEME}://setup?${params.filter(([, v]) => v !== undefined).map(([k, v]) => `${k}=${encodeURIComponent(v!)}`).join("&")}`;
+  }
+  return `${DEEP_LINK_SCHEME}://${link.kind}/${link.id}`;
+}
+
+/**
+ * A setup link's query: an http(s) server (trimmed, without trailing slashes,
+ * the scheme lower-cased) and a user are required; unknown parameters are ignored.
+ */
+function parseSetup(search: string): SetupLink | undefined {
+  const values = new Map<string, string>();
+  for (const pair of search.replace(/^\?/, "").split("&")) {
+    const i = pair.indexOf("=");
+    if (i <= 0) continue;
+    try {
+      // Not URLSearchParams: it reads "+" as a space, and the links encode spaces as %20.
+      values.set(pair.slice(0, i), decodeURIComponent(pair.slice(i + 1)));
+    } catch {
+      // A malformed escape: as if the parameter were missing.
+    }
+  }
+  const [, scheme, rest] = /^(https?):\/\/(.+)$/i.exec((values.get("server") ?? "").trim().replace(/\/+$/, "")) ?? [];
+  const user = values.get("user")?.trim();
+  if (!scheme || !rest || !user) return undefined;
+  const link: SetupLink = { kind: "setup", server: `${scheme.toLowerCase()}://${rest}`, user };
+  const password = values.get("password");
+  if (password) link.password = password;
+  const coordinator = values.get("coordinator")?.trim();
+  if (coordinator) link.coordinator = coordinator;
+  // Settings that aren't packed are dropped, not the whole link.
+  const settings = values.get("settings")?.trim();
+  if (settings && PACKED_RE.test(settings)) link.settings = settings;
+  return link;
 }
diff --git a/desktop/src/shared/setup-settings.test.ts b/desktop/src/shared/setup-settings.test.ts
new file mode 100644
index 00000000..c731dc5c
--- /dev/null
+++ b/desktop/src/shared/setup-settings.test.ts
@@ -0,0 +1,31 @@
+import { describe, expect, it } from "vitest";
+import { packSetupSettings, setupSettingsCount, unpackSetupSettings } from "./setup-settings";
+
+describe("setup settings", () => {
+  it("packs link-safe and unpacks", async () => {
+    const json = JSON.stringify({ "queue.savedCap": 7, "nav.mobileBar": ["home", "search"], note: "ü" });
+    const packed = await packSetupSettings(json);
+    expect(packed).toMatch(/^[A-Za-z0-9_-]+$/);
+    expect(await unpackSetupSettings(packed)).toBe(json);
+  });
+
+  it("reads what Android packs", async () => {
+    // java.util.zip.Deflater(BEST_COMPRESSION) and unpadded base64url, as SetupLink.packSettings writes them.
+    expect(await unpackSetupSettings("eNqrViosTS1N1StOLEtNcU4sULIy11FKySwuyEms1AMRqUVBiSWZeelKViVFpam1AKegEag"))
+      .toBe('{"queue.savedCap":7,"display.playerRating":true}');
+  });
+
+  it("refuses what isn't packed settings", async () => {
+    expect(await unpackSetupSettings("%%%")).toBeUndefined();
+    expect(await unpackSetupSettings("AAAA")).toBeUndefined();
+    expect(await unpackSetupSettings(await packSetupSettings("[1]"))).toBeUndefined();
+    expect(await unpackSetupSettings(await packSetupSettings("x".repeat(70_000)))).toBeUndefined();
+  });
+
+  it("counts settings", () => {
+    expect(setupSettingsCount('{"a":1,"b":2}')).toBe(2);
+    expect(setupSettingsCount("{}")).toBe(0);
+    expect(setupSettingsCount("[1]")).toBe(0);
+    expect(setupSettingsCount(undefined)).toBe(0);
+  });
+});
diff --git a/desktop/src/shared/setup-settings.ts b/desktop/src/shared/setup-settings.ts
new file mode 100644
index 00000000..5216c3be
--- /dev/null
+++ b/desktop/src/shared/setup-settings.ts
@@ -0,0 +1,53 @@
+// The settings a setup link carries when there is no coordinator to sync them
+// (Set up another device): `Query.setupSettings`'s JSON object, zlib-deflated
+// and in unpadded base64url so the code stays small and the value link-safe.
+// Android packs and unpacks the same way (SetupLink.packSettings/unpackSettings).
+
+/** Unpacked settings past this size are refused (a link is a few KiB at most). */
+const MAX_UNPACKED = 64 * 1024;
+
+export async function packSetupSettings(json: string): Promise<string> {
+  const stream = new Blob([json]).stream().pipeThrough(new CompressionStream("deflate"));
+  const bytes = new Uint8Array(await new Response(stream).arrayBuffer());
+  let binary = "";
+  for (const b of bytes) binary += String.fromCharCode(b);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+
+/** [packSetupSettings] undone, or undefined when [packed] is not a packed JSON object. */
+export async function unpackSetupSettings(packed: string): Promise<string | undefined> {
+  try {
+    const b64 = packed.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
+    const bytes = Uint8Array.from(binary, (c) => c.charCodeAt(0));
+    const reader = new Blob([bytes]).stream().pipeThrough(new DecompressionStream("deflate")).getReader();
+    const decoder = new TextDecoder();
+    let json = "";
+    let size = 0;
+    for (;;) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.length;
+      if (size > MAX_UNPACKED) {
+        await reader.cancel();
+        return undefined;
+      }
+      json += decoder.decode(value, { stream: true });
+    }
+    json += decoder.decode();
+    const parsed: unknown = JSON.parse(json);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? json : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/** How many settings a `Query.setupSettings` answer holds (0 when it isn't one). */
+export function setupSettingsCount(json: string | undefined): number {
+  try {
+    const parsed: unknown = json ? JSON.parse(json) : undefined;
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? Object.keys(parsed).length : 0;
+  } catch {
+    return 0;
+  }
+}
diff --git a/desktop/src/shared/strings.ts b/desktop/src/shared/strings.ts
index d55ca1eb..195bb519 100644
--- a/desktop/src/shared/strings.ts
+++ b/desktop/src/shared/strings.ts
@@ -781,6 +781,27 @@ const STRINGS = {
   "settings.account.syncing": "Syncing…",
   "settings.account.stats": "Listening stats",
   "settings.account.devices": "Devices",
+  "settings.account.setUpDevice": "Set up another device",
+  "setupDevice.title": "Set up another device",
+  "setupDevice.body": "Scan this code with Hocket on your phone (Scan a setup code, on its first screen) or its camera. On another computer, paste the link into the server address field.",
+  "setupDevice.code": "Setup code for {host}",
+  "setupDevice.server": "Server",
+  "setupDevice.serverValue": "{user} on {host}",
+  "setupDevice.coordinator": "Coordinator",
+  "setupDevice.noCoordinator": "None. The other device connects to your server directly.",
+  "setupDevice.settings": "Settings",
+  "setupDevice.settingsSynced": "Come across through the coordinator",
+  "setupDevice.settingsNone": "All at their defaults, so nothing to bring",
+  "setupDevice.settingsCountOne": "1 changed setting comes along",
+  "setupDevice.settingsCount": "{count} changed settings come along",
+  "setupDevice.settingsTooMany": "Too many to fit in the code. Copy the link to bring them along.",
+  "setupDevice.includePassword": "Include password",
+  "setupDevice.includePasswordOn": "Anyone who sees the code can sign in as you",
+  "setupDevice.includePasswordOff": "The other device will ask for it",
+  "setupDevice.passwordUnavailable": "This device can't read the password right now",
+  "setupDevice.copy": "Copy link",
+  "setupDevice.copied": "Setup link copied",
+  "setupDevice.alreadySetUp": "This device is already set up. Sign out to use another device's setup code.",
   "settings.section.general": "Library & queue",
   "settings.section.audio": "Audio",
   "settings.section.transcoding": "Streaming",
diff --git a/scripts/gen-android-icons.mjs b/scripts/gen-android-icons.mjs
index 18cb3245..9af71ffa 100644
--- a/scripts/gen-android-icons.mjs
+++ b/scripts/gen-android-icons.mjs
@@ -51,6 +51,7 @@ const SYMBOLS = {
   NestDisplay: "nest_display", NestDisplayMax: "nest_display_max", Chromecast2: "chromecast_2", ChromecastDevice: "chromecast_device",
   NestWifiPoint: "nest_wifi_point",
   OpenInNew: "open_in_new", Laptop: "laptop_windows", DesktopWindows: "desktop_windows", Warning: "warning", Equalizer: "equalizer",
+  QrCode2: "qr_code_2", QrCodeScanner: "qr_code_scanner",
 };
 
 /** Which glyphs each group emits. AutoMirrored ones flip in right-to-left layouts. */
@@ -76,6 +77,8 @@ const GROUPS = [
     // Cast receivers by kind: the connect button and the Connect sheet.
     "SpeakerGroup", "NestMini", "HomeMini", "NestAudio", "HomeMax", "NestDisplay", "NestDisplayMax", "Chromecast2",
     "ChromecastDevice", "NestWifiPoint",
+    // Set up another device: the account sheet's entry, and scanning a code at setup.
+    "QrCode2", "QrCodeScanner",
   ] },
   { path: ["Outlined"], fill: false, mirror: false, names: [
     "Album", "BarChart", "Category", "CloudOff", "Download", "FilterAlt", "History", "Home", "Info", "LibraryMusic", "MusicNote",

From 7ce223ad8960fb3c403732debdfb35167a407278 Mon Sep 17 00:00:00 2001
From: Ingo Wolf <me@ingo.au>
Date: Fri, 13 Nov 2026 21:09:42 +1100
Subject: [PATCH 2/3] Setup links opened from outside drop their coordinator
 and settings

A hocket:// link any web page can open showed only the server and user,
while its coordinator (which receives the account's credential when the
device joins it) and settings were kept hidden and applied on Connect.
Now only a scanned or pasted link brings them, and typing a server or
user of one's own drops them.

Also: Android never replays a setup link from Recents and reads the
keystore off the main thread; both apps find a link pasted into a field
that already holds an address; the desktop dialog offers no link until
its settings are known, and turns away a link that arrived before a
cold start's servers loaded.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../src/main/java/app/hocket/MainActivity.kt  |  6 ++--
 .../app/hocket/ui/nav/SetupDeviceSheet.kt     | 18 ++++++----
 .../ui/screens/setup/ServerSetupScreen.kt     | 31 +++++++++-------
 .../java/app/hocket/ui/SetupDeviceTest.kt     | 15 ++++----
 desktop/e2e/setup-device.spec.ts              |  9 ++++-
 desktop/src/renderer/App.tsx                  |  8 +++++
 .../renderer/components/SetupDeviceDialog.tsx | 24 +++++++------
 desktop/src/renderer/views/Setup.tsx          | 36 ++++++++++++-------
 8 files changed, 96 insertions(+), 51 deletions(-)

diff --git a/android/app/src/main/java/app/hocket/MainActivity.kt b/android/app/src/main/java/app/hocket/MainActivity.kt
index 31e101d0..c1bc08e4 100644
--- a/android/app/src/main/java/app/hocket/MainActivity.kt
+++ b/android/app/src/main/java/app/hocket/MainActivity.kt
@@ -193,8 +193,10 @@ class MainActivity : ComponentActivity() {
      */
     private fun handleShortcut(intent: Intent?) {
         if (intent?.action == Intent.ACTION_VIEW) {
-            // Another device's setup code (hocket://setup), once, as for shortcuts.
-            app.hocket.ui.screens.setup.SetupLink.parse(intent.dataString)?.let(AppLinks::openSetup)
+            // Another device's setup code (hocket://setup), once, as for shortcuts: never again from Recents.
+            if (intent.flags and Intent.FLAG_ACTIVITY_LAUNCHED_FROM_HISTORY == 0) {
+                app.hocket.ui.screens.setup.SetupLink.parse(intent.dataString)?.let(AppLinks::openSetup)
+            }
             setIntent(Intent(intent).setAction(Intent.ACTION_MAIN).setData(null))
             return
         }
diff --git a/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt b/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
index f482a69e..973e4854 100644
--- a/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
+++ b/android/app/src/main/java/app/hocket/ui/nav/SetupDeviceSheet.kt
@@ -63,6 +63,8 @@ import com.google.zxing.EncodeHintType
 import com.google.zxing.common.BitMatrix
 import com.google.zxing.qrcode.QRCodeWriter
 import com.google.zxing.qrcode.decoder.ErrorCorrectionLevel
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.withContext
 import kotlinx.serialization.json.jsonObject
 
 /**
@@ -99,11 +101,13 @@ internal const val MAX_CODE_LINK = 1800
 fun SetupDeviceSheetContent(server: ServerInfo, coordinatorUrl: String?, settings: String? = null) {
     val context = LocalContext.current
     var includePassword by remember { mutableStateOf(false) }
-    // The keystore read happens only once the person asks for the password to go in.
-    val password = remember(server.url, server.username, includePassword) {
-        if (includePassword) CoreHost.credentials?.get(server.url, server.username)?.password else null
+    // Off the main thread (a keystore decrypt), and the password itself only once the person asks for it.
+    val passwordAvailable by produceState<Boolean?>(null, server.url, server.username) {
+        value = withContext(Dispatchers.IO) { CoreHost.credentials?.get(server.url, server.username) != null }
+    }
+    val password by produceState<String?>(null, server.url, server.username, includePassword) {
+        value = if (!includePassword) null else withContext(Dispatchers.IO) { CoreHost.credentials?.get(server.url, server.username)?.password }
     }
-    val passwordAvailable = remember(server.url, server.username) { CoreHost.credentials?.get(server.url, server.username) != null }
     val coordinator = coordinatorUrl?.takeIf { it.isNotBlank() }
     val settingsCount = remember(settings) { settings?.let { runCatching { HocketJson.json.parseToJsonElement(it).jsonObject.size }.getOrNull() } ?: 0 }
     val carried = settings?.takeIf { coordinator == null && settingsCount > 0 }
@@ -141,14 +145,14 @@ fun SetupDeviceSheetContent(server: ServerInfo, coordinatorUrl: String?, setting
                 headlineContent = { Text(stringResource(R.string.setup_device_include_password)) },
                 supportingContent = {
                     Text(stringResource(when {
-                        !passwordAvailable -> R.string.setup_device_password_unavailable
+                        passwordAvailable == false -> R.string.setup_device_password_unavailable
                         on -> R.string.setup_device_include_password_on
                         else -> R.string.setup_device_include_password_off
                     }), color = if (on) MaterialTheme.colorScheme.error else MaterialTheme.colorScheme.onSurfaceVariant)
                 },
-                trailingContent = { Switch(checked = on, onCheckedChange = null, enabled = passwordAvailable) },
+                trailingContent = { Switch(checked = on, onCheckedChange = null, enabled = passwordAvailable == true) },
                 colors = ListItemDefaults.colors(containerColor = Color.Transparent),
-                modifier = Modifier.toggleable(value = on, enabled = passwordAvailable, role = Role.Switch) { includePassword = it }.testTag("setupDevice.includePassword"),
+                modifier = Modifier.toggleable(value = on, enabled = passwordAvailable == true, role = Role.Switch) { includePassword = it }.testTag("setupDevice.includePassword"),
             )
         }
         OutlinedButton(
diff --git a/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt b/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
index 684da4e3..e5620219 100644
--- a/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
+++ b/android/app/src/main/java/app/hocket/ui/screens/setup/ServerSetupScreen.kt
@@ -102,7 +102,8 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
     var urlError by rememberSaveable { mutableStateOf(false) }
     var error by rememberSaveable { mutableStateOf<String?>(null) }
     var started by rememberSaveable { mutableStateOf(needsRelogin) }
-    // The coordinator, or else the settings (a JSON object), from a setup link: applied as the form connects.
+    // The coordinator, or else the settings (a JSON object), from a scanned or pasted setup link:
+    // applied as the form connects, and dropped once the person types a server or user of their own.
     var linkCoordinator by rememberSaveable { mutableStateOf<String?>(null) }
     var linkSettings by rememberSaveable { mutableStateOf<String?>(null) }
     val sync by client.syncProgress.collectAsStateWithLifecycle()
@@ -136,23 +137,24 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
     }
     /**
      * Another device's setup code: fills the form (its coordinator or settings are applied as the
-     * form connects).
-     * Scanned or pasted here, with the password, it signs in straight away; a link opened from
-     * outside (any web page can open one) waits for Connect, so the person sees the server first.
+     * form connects). Scanned or pasted here ([fromHere]), with the password, it signs in straight
+     * away. A link opened from outside (any web page can open one) only fills in the server and
+     * user and waits for Connect: its coordinator and settings are dropped, since neither shows in
+     * the form and a coordinator receives the account's credential when the device joins it.
      */
-    fun applySetupLink(link: SetupLink, connectNow: Boolean) {
+    fun applySetupLink(link: SetupLink, fromHere: Boolean) {
         url = link.server
         username = link.username
         password = link.password ?: ""
-        linkCoordinator = link.coordinator
-        linkSettings = link.settings
+        linkCoordinator = link.coordinator?.takeIf { fromHere }
+        linkSettings = link.settings?.takeIf { fromHere }
         urlError = false
         error = null
         started = true
-        if (connectNow && link.password != null && !connecting) connect()
+        if (fromHere && link.password != null && !connecting) connect()
     }
     fun scan() = app.hocket.SetupScanner.scan(context,
-        onResult = { text -> SetupLink.parse(text)?.let { applySetupLink(it, connectNow = true) } ?: run { started = true; error = invalidCode } },
+        onResult = { text -> SetupLink.parse(text)?.let { applySetupLink(it, fromHere = true) } ?: run { started = true; error = invalidCode } },
         onError = { started = true; error = scanFailed })
     // A setup link opened from outside (the camera, a shared link), while the form can take it.
     val pendingLink by app.hocket.AppLinks.setup.collectAsStateWithLifecycle()
@@ -160,7 +162,7 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
         val link = pendingLink ?: return@LaunchedEffect
         if (step == SetupStep.Summary) return@LaunchedEffect
         app.hocket.AppLinks.consume(link)
-        applySetupLink(link, connectNow = false)
+        applySetupLink(link, fromHere = false)
     }
     val cleartext = url.trim().startsWith("http://", ignoreCase = true)
     val ground = Brush.verticalGradient(listOf(MaterialTheme.colorScheme.surface, MaterialTheme.colorScheme.surfaceContainer))
@@ -199,7 +201,12 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
                     }
                     val field = RoundedCornerShape(16.dp)
                     OutlinedTextField(
-                        value = url, onValueChange = { typed -> SetupLink.parse(typed)?.let { applySetupLink(it, connectNow = true) } ?: run { url = typed; urlError = false } }, label = { Text(stringResource(R.string.setup_url)) },
+                        value = url, onValueChange = { typed ->
+                            // A pasted link, even into a field that already holds an address.
+                            val link = typed.indexOf("hocket://setup?", ignoreCase = true).takeIf { it >= 0 }?.let { SetupLink.parse(typed.substring(it)) }
+                            if (link != null) applySetupLink(link, fromHere = true)
+                            else { url = typed; urlError = false; linkCoordinator = null; linkSettings = null }
+                        }, label = { Text(stringResource(R.string.setup_url)) },
                         placeholder = { Text(stringResource(R.string.setup_url_hint)) }, singleLine = true, isError = urlError, shape = field,
                         supportingText = if (urlError) ({ Text(stringResource(R.string.setup_error_url)) }) else null,
                         keyboardOptions = KeyboardOptions(keyboardType = KeyboardType.Uri, imeAction = ImeAction.Next),
@@ -211,7 +218,7 @@ fun ServerSetupScreen(existing: ServerInfo?, needsRelogin: Boolean = false, summ
                         }
                     }
                     val user = @Composable { m: Modifier ->
-                        OutlinedTextField(value = username, onValueChange = { username = it }, label = { Text(stringResource(R.string.setup_username)) }, singleLine = true, shape = field,
+                        OutlinedTextField(value = username, onValueChange = { username = it; linkCoordinator = null; linkSettings = null }, label = { Text(stringResource(R.string.setup_username)) }, singleLine = true, shape = field,
                             keyboardOptions = KeyboardOptions(imeAction = ImeAction.Next), modifier = m.testTag("setup.username"), enabled = !connecting)
                     }
                     val pass = @Composable { m: Modifier ->
diff --git a/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt b/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
index 148e5f58..83782b13 100644
--- a/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
+++ b/android/app/src/test/java/app/hocket/ui/SetupDeviceTest.kt
@@ -88,18 +88,20 @@ class SetupDeviceTest {
     }
 
     @Test
-    fun anOpenedSetupLinkFillsTheFormAndConnectSignsInAndSetsTheCoordinator() {
+    fun anOpenedSetupLinkFillsTheFormWaitsForConnectAndDropsItsCoordinatorAndSettings() {
         val core = TestCore(startWithServer = false, startPlaying = false)
         compose.setThemedContent(core) { AppRoot(core.client) }
         core.start()
         await("setup.start")
-        AppLinks.openSetup(SetupLink("https://music.example.net", "ada", "secret", "wss://coord.example.net"))
-        // A link from outside waits for Connect (any web page can open one); nothing is set before.
+        AppLinks.openSetup(SetupLink("https://music.example.net", "ada", "secret", "wss://coord.example.net", """{"${SettingKeys.QUEUE_SAVED_CAP}":7}"""))
+        // A link from outside waits for Connect (any web page can open one), and what the form
+        // doesn't show (a coordinator, which would get the credential, and settings) stays out.
         await("setup.connect")
-        assertEquals(null, core.client.connection.value.coordinatorUrl)
         click("setup.connect")
         await("setup.continue")
-        assertEquals("wss://coord.example.net", core.client.connection.value.coordinatorUrl)
+        assertEquals(null, core.client.connection.value.coordinatorUrl)
+        val cap = runBlocking { core.client.query(Queries.setting(SettingKeys.QUEUE_SAVED_CAP)) as QueryResult.SettingDetail }
+        assertEquals("10", cap.data?.value)
         assertEquals(null, AppLinks.setup.value)
     }
 
@@ -110,8 +112,9 @@ class SetupDeviceTest {
         core.start()
         click("setup.start")
         await("setup.url")
-        compose.onNodeWithTag("setup.url").performTextInput(SetupLink("https://music.example.net", "ada", "secret").format())
+        compose.onNodeWithTag("setup.url").performTextInput(SetupLink("https://music.example.net", "ada", "secret", "wss://coord.example.net").format())
         await("setup.continue")
+        assertEquals("wss://coord.example.net", core.client.connection.value.coordinatorUrl)
     }
 
     @Test
diff --git a/desktop/e2e/setup-device.spec.ts b/desktop/e2e/setup-device.spec.ts
index 1d088635..6c1a273b 100644
--- a/desktop/e2e/setup-device.spec.ts
+++ b/desktop/e2e/setup-device.spec.ts
@@ -57,7 +57,9 @@ test.describe("set up another device", () => {
     const { app, page } = hocket;
     const open = (url: string) => app.evaluate(({ BrowserWindow }, u) => { for (const w of BrowserWindow.getAllWindows()) w.webContents.send("hocket:deep-link", u); }, url);
     await expect(page.getByTestId("setup")).toBeVisible();
-    await open("hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice&password=secret");
+    // Its settings (like a coordinator) don't show in the form, so a link from outside doesn't bring them.
+    const settings = deflateSync(JSON.stringify({ "queue.savedCap": 7 })).toString("base64url");
+    await open(`hocket://setup?server=https%3A%2F%2Fmusic.example.org&user=alice&password=secret&settings=${settings}`);
     await expect(page.getByTestId("setup-url")).toHaveValue("https://music.example.org");
     await expect(page.getByTestId("setup-password")).toHaveValue("secret");
     // Any web page can open a hocket:// link: nothing connects until the person presses Connect.
@@ -66,6 +68,11 @@ test.describe("set up another device", () => {
     await page.getByTestId("setup-connect").click();
     await page.getByTestId("setup-continue").click({ timeout: 15_000 });
     await expect(page.getByTestId("app")).toBeVisible({ timeout: 15_000 });
+    const cap = await page.evaluate(async () => {
+      const r = await window.hocket.query({ type: "setting", data: { key: "queue.savedCap" } });
+      return r.type === "settingDetail" ? r.data?.value : undefined;
+    });
+    expect(cap).toBe("10");
     await open("hocket://setup?server=https%3A%2F%2Fother.example.org&user=bob");
     await expect(page.getByText("This device is already set up", { exact: false })).toBeVisible();
   });
diff --git a/desktop/src/renderer/App.tsx b/desktop/src/renderer/App.tsx
index 9687aed8..27b6df8b 100644
--- a/desktop/src/renderer/App.tsx
+++ b/desktop/src/renderer/App.tsx
@@ -66,6 +66,14 @@ export function App() {
   useGlobalKeyboard(true);
   useDeepLinks();
   useQueueDropReveal();
+  // A setup link that arrived before the servers loaded (a cold start from the link): turned away
+  // once this device turns out to be signed in, rather than waiting for a sign-out.
+  const pendingSetup = useApp((s) => !!s.pendingSetup);
+  useEffect(() => {
+    if (!ready || !hasServer || setupSummary || !pendingSetup) return;
+    useApp.getState().setPendingSetup(undefined);
+    showToast(t("setupDevice.alreadySetUp"));
+  }, [ready, hasServer, setupSummary, pendingSetup]);
 
   if (!ready) return <div className="setup" role="main"><div className="muted" role="status">{t("app.loading")}</div></div>;
   if (!hasServer || setupSummary) return <Setup />;
diff --git a/desktop/src/renderer/components/SetupDeviceDialog.tsx b/desktop/src/renderer/components/SetupDeviceDialog.tsx
index 6d3584ba..fec5cd56 100644
--- a/desktop/src/renderer/components/SetupDeviceDialog.tsx
+++ b/desktop/src/renderer/components/SetupDeviceDialog.tsx
@@ -22,23 +22,27 @@ export function SetupDeviceDialog() {
   const [includePassword, setIncludePassword] = useState(false);
   const [result, setResult] = useState<SetupLinkResult>();
   // Without a coordinator the settings ride in the link: the core's JSON, then packed.
-  const [settings, setSettings] = useState<{ json: string; packed: string }>();
+  // "loading" until they're known, so no link (or Copy) goes out without them.
+  const [settings, setSettings] = useState<{ json: string; packed: string } | "loading" | undefined>(coordinator ? undefined : "loading");
 
   useEffect(() => {
-    setSettings(undefined);
-    if (coordinator) return;
+    if (coordinator) return setSettings(undefined);
+    setSettings("loading");
     let live = true;
     void (async () => {
       const r = await bridge().query({ type: "setupSettings" });
-      if (r.type !== "text" || setupSettingsCount(r.data) === 0) return;
-      const packed = await packSetupSettings(r.data);
-      if (live) setSettings({ json: r.data, packed });
-    })().catch((err: unknown) => console.error("setup settings failed", err));
+      const json = r.type === "text" && setupSettingsCount(r.data) > 0 ? r.data : undefined;
+      const next = json ? { json, packed: await packSetupSettings(json) } : undefined;
+      if (live) setSettings(next);
+    })().catch((err: unknown) => {
+      console.error("setup settings failed", err);
+      if (live) setSettings(undefined);
+    });
     return () => { live = false; };
   }, [coordinator]);
 
   useEffect(() => {
-    if (!server) return;
+    if (!server || settings === "loading") return;
     let live = true;
     bridge().setupLink({ server: server.url, user: server.username, coordinator, settings: settings?.packed, includePassword })
       .then((r) => { if (live) setResult(r); })
@@ -63,7 +67,7 @@ export function SetupDeviceDialog() {
         <dt>{t("setupDevice.coordinator")}</dt>
         <dd data-testid="setup-device-coordinator">{coordinator ?? t("setupDevice.noCoordinator")}</dd>
         <dt>{t("setupDevice.settings")}</dt>
-        <dd data-testid="setup-device-settings">{settingsSummary(coordinator, settings?.json, result)}</dd>
+        <dd data-testid="setup-device-settings">{settings === "loading" ? "…" : settingsSummary(coordinator, settings?.json, result)}</dd>
       </dl>
       <label className="setup-device-password">
         <span className="grow">
@@ -75,7 +79,7 @@ export function SetupDeviceDialog() {
         <Switch checked={passwordOn} disabled={unavailable} onChange={setIncludePassword} aria-describedby="setup-device-password-desc" data-testid="setup-device-password" />
       </label>
       <div className="buttons">
-        <button type="button" className="btn" disabled={!result} onClick={() => { if (result) { bridge().clipboard.writeText(result.link); showToast(t("setupDevice.copied")); } }} data-testid="setup-device-copy"><Icon name="copy" size={18} />{t("setupDevice.copy")}</button>
+        <button type="button" className="btn" disabled={!result || settings === "loading"} onClick={() => { if (result) { bridge().clipboard.writeText(result.link); showToast(t("setupDevice.copied")); } }} data-testid="setup-device-copy"><Icon name="copy" size={18} />{t("setupDevice.copy")}</button>
         <button type="button" className="btn primary" onClick={close} data-autofocus>{t("misc.close")}</button>
       </div>
     </>
diff --git a/desktop/src/renderer/views/Setup.tsx b/desktop/src/renderer/views/Setup.tsx
index 728763d1..4f18b64f 100644
--- a/desktop/src/renderer/views/Setup.tsx
+++ b/desktop/src/renderer/views/Setup.tsx
@@ -68,7 +68,8 @@ function ConnectForm() {
   }, [lastError, submittedAt, busy]);
 
   const cleartext = /^http:\/\/./i.test(url.trim());
-  // The coordinator, or else the (packed) settings, from a setup link: applied as the form connects.
+  // The coordinator, or else the (packed) settings, from a pasted setup link: applied as the form
+  // connects, and dropped once the person types a server or user of their own.
   const [linkCoordinator, setLinkCoordinator] = useState<string | undefined>(undefined);
   const [linkSettings, setLinkSettings] = useState<string | undefined>(undefined);
   const connect = (rawUrl: string, user: string, pass: string, coordinator = linkCoordinator, settings = linkSettings) => {
@@ -95,17 +96,20 @@ function ConnectForm() {
     connect(url, username, password);
   };
   // Another device's setup code (Set up another device): fills the form (its
-  // coordinator or settings are applied as the form connects). Pasted here with the password, it
-  // connects straight away; a hocket:// link opened from outside (any web page
-  // can open one) waits for Connect, so the person sees the server first.
-  const applySetupLink = (link: SetupLink, connectNow: boolean) => {
+  // coordinator or settings are applied as the form connects). Pasted here
+  // (fromHere) with the password, it connects straight away. A hocket:// link
+  // opened from outside (any web page can open one) only fills in the server and
+  // user and waits for Connect: its coordinator and settings are dropped, since
+  // neither shows in the form and a coordinator receives the account's
+  // credential when the device joins it.
+  const applySetupLink = (link: SetupLink, fromHere: boolean) => {
     setUrl(link.server);
     setUsername(link.user);
     setPassword(link.password ?? "");
-    setLinkCoordinator(link.coordinator);
-    setLinkSettings(link.settings);
+    setLinkCoordinator(fromHere ? link.coordinator : undefined);
+    setLinkSettings(fromHere ? link.settings : undefined);
     setError(undefined);
-    if (connectNow && link.password && !busy) connect(link.server, link.user, link.password, link.coordinator, link.settings);
+    if (fromHere && link.password && !busy) connect(link.server, link.user, link.password, link.coordinator, link.settings);
   };
   const pendingSetup = useApp((s) => s.pendingSetup);
   useEffect(() => {
@@ -115,11 +119,17 @@ function ConnectForm() {
     // eslint-disable-next-line react-hooks/exhaustive-deps -- applies each link once, as it arrives
   }, [pendingSetup]);
   const onUrl = (value: string) => {
-    // A pasted setup link, rather than an address.
-    const link = /^\s*hocket:/i.test(value) ? parseDeepLink(value.trim()) : undefined;
-    if (link?.kind === "setup") applySetupLink(link, true);
-    else setUrl(value);
+    // A pasted setup link, rather than an address (even pasted into a field that holds one).
+    const at = value.search(/hocket:\/\/setup\?/i);
+    const link = at >= 0 ? parseDeepLink(value.slice(at).trim()) : undefined;
+    if (link?.kind === "setup") return applySetupLink(link, true);
+    setUrl(value);
+    forgetLink();
   };
+  function forgetLink() {
+    setLinkCoordinator(undefined);
+    setLinkSettings(undefined);
+  }
   const ready = !!url.trim() && !!username.trim() && !!password;
   return (
     <form className="setup-card" onSubmit={submit} aria-labelledby="setup-title" aria-describedby="setup-subtitle">
@@ -129,7 +139,7 @@ function ConnectForm() {
       <label className="setup-field">{t("setup.url")}<input className="input" type="url" aria-required="true" aria-invalid={error === t("setup.errorUrl") || undefined} aria-describedby={[error ? "setup-error" : "", "setup-url-hint", cleartext ? "setup-cleartext" : ""].filter(Boolean).join(" ")} placeholder={t("setup.urlPlaceholder")} value={url} onChange={(e) => onUrl(e.target.value)} autoFocus data-testid="setup-url" /><span className="setup-hint" id="setup-url-hint">{t("setup.urlHint")}</span></label>
       {cleartext ? <div className="setup-cleartext" id="setup-cleartext" data-testid="setup-cleartext"><Icon name="warn" size={18} />{t("setup.cleartext")}</div> : null}
       <div className="setup-pair">
-        <label className="setup-field">{t("setup.username")}<input className="input" aria-required="true" value={username} onChange={(e) => setUsername(e.target.value)} autoComplete="username" data-testid="setup-username" /></label>
+        <label className="setup-field">{t("setup.username")}<input className="input" aria-required="true" value={username} onChange={(e) => { setUsername(e.target.value); forgetLink(); }} autoComplete="username" data-testid="setup-username" /></label>
         <label className="setup-field">{t("setup.password")}
           <span className="setup-password">
             <input className="input" type={showPassword ? "text" : "password"} aria-required="true" value={password} onChange={(e) => setPassword(e.target.value)} autoComplete="current-password" data-testid="setup-password" />

From 6b56b81c1162d5dda8f4e9c38967ef9302df3b9b Mon Sep 17 00:00:00 2001
From: Ingo Wolf <me@ingo.au>
Date: Fri, 13 Nov 2026 21:24:11 +1100
Subject: [PATCH 3/3] resample: iterate the planes (clippy 1.100
 needless_range_loop)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 crates/hocket-core/src/audio/resample.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/crates/hocket-core/src/audio/resample.rs b/crates/hocket-core/src/audio/resample.rs
index c87a86b6..eeec7c06 100644
--- a/crates/hocket-core/src/audio/resample.rs
+++ b/crates/hocket-core/src/audio/resample.rs
@@ -143,8 +143,8 @@ impl Resampler {
         self.out_frames += (frames - skip) as u64;
         out.reserve((frames - skip) * self.channels);
         for i in skip..frames {
-            for ch in 0..self.channels {
-                out.push(self.out_planar[ch][i]);
+            for plane in self.out_planar.iter().take(self.channels) {
+                out.push(plane[i]);
             }
         }
     }