diff --git a/CHANGELOG.md b/CHANGELOG.md
index 35a1909d..90df75b6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@
 
 - Remove agent singleton so that client TLS certificates are reloaded on every API request.
 - Use Axios client to receive event stream so TLS settings are properly applied.
+- Set `usage-app=vscode` on `coder ssh` to fix deployment session counting.
 
 ## [v1.4.1](https://github.com/coder/vscode-coder/releases/tag/v1.4.1) (2025-02-19)
 
diff --git a/src/remote.ts b/src/remote.ts
index e587a70d..54bb64be 100644
--- a/src/remote.ts
+++ b/src/remote.ts
@@ -627,7 +627,7 @@ export class Remote {
     const proxyCommand = featureSet.wildcardSSH
       ? `${escape(binaryPath)}${headerArg} --global-config ${escape(
           path.dirname(this.storage.getSessionTokenPath(label)),
-        )} ssh --stdio --network-info-dir ${escape(this.storage.getNetworkInfoPath())}${await this.formatLogArg(logDir)} --ssh-host-prefix ${hostPrefix} %h`
+        )} ssh --stdio --usage-app=vscode --network-info-dir ${escape(this.storage.getNetworkInfoPath())}${await this.formatLogArg(logDir)} --ssh-host-prefix ${hostPrefix} %h`
       : `${escape(binaryPath)}${headerArg} vscodessh --network-info-dir ${escape(
           this.storage.getNetworkInfoPath(),
         )}${await this.formatLogArg(logDir)} --session-token-file ${escape(this.storage.getSessionTokenPath(label))} --url-file ${escape(