# OpenClaw dashboard says "pairing required" ("disconnected (1008): pairing required" / "Approve this browser")

- Fix ID: AGT-03
- Exact error: `disconnected (1008): pairing required`
- Status: Manually verified (CI: pending, no CI results exist yet)
- Last verified: 2026-10-26
- Platforms: OpenClaw
- Versions: os=Debian 13 (container); node=26.12.1; openclaw=2026.10.7 (157d8c2); browser=Headless Chrome 156
- Repro: https://stucktoshipped.com/repros/AGT-03/ (file hashes only; files are in the paid repro bundle)
- Canonical: https://stucktoshipped.com/fixes/openclaw/pairing-required/

## In brief
Each new browser has to be approved once on the gateway host, even with the right token. The full fix walks through finding the pending request and approving it, plus a one-time-link alternative.

## Symptom
You open the OpenClaw Control UI (dashboard) from another computer, a phone, a VPS's public or LAN address, or inside Docker. Even with the right gateway token, it won't connect.
- Older versions show `disconnected (1008): pairing required`.
- Version 2026.10.7 shows an **"Approve this browser"** screen, with raw error `device pairing required (requestId: ...)`.
- Gateway logs show `code=1008 ... cause=device-required`.

## Why it happens
- **The token is only the first lock.** Every new browser also has to be approved once on the gateway machine (device pairing).
- **Browsers on the gateway machine itself** (`http://127.0.0.1`) can be approved automatically. Browsers coming from any other address can't.
- **A new or private browser profile counts as a new device,** and so does clearing site data.

## What we could not test
- Docker (`docker compose exec ...`), a browser on a different physical machine or phone, and Tailscale Serve.
- Re-pairing after an update, and token-mismatch variants.
- The older UI wording "disconnected (1008): pairing required". We only saw the new wording, plus the 1008 code in logs.

## Full fix (paid)
The step-by-step fix, commands and test record are paid content and are not in this file. Price: $4 per fix (planned launch price; checkout not open yet). SHA-256 of the full fix: 395471489f17de0415853f0bc173ef90da93fbc70d83b8f53807988f4a1c24bf. How to buy: https://stucktoshipped.com/pricing/ and https://stucktoshipped.com/products.json

## Sources
- [OpenClaw docs: Connect and pair](https://docs.openclaw.ai/web/control-ui/connect-and-pair)
- [GitHub #4531: disconnected (1008): pairing required](https://github.com/openclaw/openclaw/issues/4531)
- [GitHub #21236: pairing required after update](https://github.com/openclaw/openclaw/issues/21236)
- [GitHub #16305: Gateway unreachable: pairing required](https://github.com/openclaw/openclaw/issues/16305)

## How this page was made
Drafted by an AI agent and reproduced on our test machine on 2026-10-26. No warranty; test on a copy first.