// ssh workspace
Your terminals.
Every device.
One vault.
TermSSH puts your hosts, keys and sessions in a fast, beautiful terminal that runs in the browser, on the desktop and on your phone — with SSO sign-in and an end-to-end encrypted vault that follows you everywhere.
Free · self-hosted · sign in with your SSO
Built like an instrument,
not a toy.
Terminal precision
Tabs, draggable split panes, themes, snippets that type into the focused session. xterm-powered, latency-lean, keyboard-first.
Hosts, organized
Groups, tags, colors and instant search across your fleet. One click from list to live shell.
Identities & keys
Reusable SSH identities — usernames, passwords, private keys — encrypted on your device before they ever leave it.
SFTP built in
A file panel beside every session: browse, upload, download, rename — over the same SSH connection.
Sync everywhere
Hosts, snippets and settings sync to every device you sign in on. Start on the laptop, continue from the phone.
Your SSO
Sign in through Keycloak or any OpenID Connect provider. One identity for your whole team’s tooling.
Zero-knowledge
by design.
The sync server stores ciphertext, not credentials. Your master passphrase never leaves your device — without it, nobody can read your secrets. Not us, not anyone.
Create your vaultAES-256-GCMper-secret encryption, on devicePBKDF2 · 310kpassphrase key derivationTOFU pinningSSH host keys verified on every connectone-time ticketsWebSocket auth, 30-second lifetimeOIDC + PKCEno passwords stored for sign-inrate-limitedhardened API with strict CSP
Anywhere you are.
Web & PWA
Nothing to install. Open connect.termssh.com and you’re at a prompt in seconds — installable as an app.
Open the appDesktop
A focused Electron app for macOS, Windows and Linux that wraps the same fast UI in a native window.
Build from sourceMobile
iOS and Android via Capacitor — your whole fleet, your snippets, your vault, in your pocket.
Build from source