One-click connections
Save your hosts once, then open a secure SSH session without re-entering the same details.
Secure SSH client
for Windows and Android.
Connect to servers, transfer files with SFTP, manage SSH keys and monitor your fleet from one secure workspace.
Everything connected
Built for the way you actually work.
From the first connection to the hundredth host, ShellSSH keeps the tools you reach for every day close and uncluttered.
Built-in SFTP
Move files, manage folders and inspect permissions without leaving your remote workspace.
Your keys, organized
Create and manage ED25519 and RSA identities with protected local key storage.
Know what is online
See reachability, latency and resource snapshots across your server fleet at a glance.
A real terminal
Fast when the moment matters.
Keep multiple sessions moving with familiar terminal behavior, quick commands and searchable scrollback.
- 01 Multi-session workflow
- 02 TrueColor and ANSI support
- 03 Saved commands and shortcuts
ShellSSH interactive demo — type “help”
Connected to production · Ubuntu 24.04
PRODUCTIONAll systems online 28 ms average
SECURE SYNCDevices up to dateClient-side encrypted
V2Encryption format
HWKeystore protected
Your workspace, with youView downloads →
Move between desk and pocket.
Keep supported devices aligned with encrypted sync, so your saved hosts and workspace are ready when you switch screens.
AES-256-GCMclient-side encryption
Windows + Androidbuilt for both screens
Protected credentials
Encrypted before it leaves your device.
ShellSSH uses the same authenticated encryption format on Android and Windows. The sync service receives opaque encrypted envelopes—not plaintext credentials or private keys.
01 · ON DEVICESSH credentialsPasswords · private keys · passphrases
HKDF→
AES-256-GCMAuthenticated item encryption
CIPHERTEXT→
02 · SYNC SERVICEOpaque envelopeVersion · nonce · ciphertext · tag
AES-256-GCM
Every synced record is encrypted with a 256-bit item key, a fresh 96-bit nonce and a 128-bit authentication tag.
HKDF-SHA256
A unique item key is derived from the vault key and bound to its account, vault, epoch, record type and record ID.
P-256 key agreement
New devices receive the vault key through ephemeral ECDH P-256 and authenticated AES-GCM key wrapping.
Protected recovery
A 256-bit recovery secret uses HKDF, AES-GCM and HMAC-SHA256 challenge proofs—never a server-readable vault key.
AndroidStrongBox / TEE
Hardware-backed when available.
Local AES keys and non-exportable device signing keys are generated in Android Keystore, preferring StrongBox and falling back to the device TEE.
- Android Keystore AES-256-GCM
- EncryptedSharedPreferences with AES-256-SIV/GCM
- Biometric or PIN app lock with configurable timeout
WindowsTPM / DPAPI
Bound to your Windows account.
Non-exportable P-256 device keys prefer the TPM, while local vault state is protected with current-user Windows DPAPI.
- TPM-backed CNG keys when available
- Current-user DPAPI local data protection
- Windows Hello unlock for protected access
Memory hygiene Sensitive key and plaintext buffers are cleared after cryptographic operations in both platform implementations.
Security without ceremony
Your credentials stay yours.
Host verification, protected key storage and on-device encryption help keep access secure without slowing down everyday work.
Questions, answered
Good to know.
Everything you need to understand the basics before your first connection.
01What is ShellSSH?+
ShellSSH combines an SSH terminal, SFTP browser, key manager and server dashboard in one focused workspace.
02Can I connect with an SSH key?+
Yes. ShellSSH supports private-key authentication and can generate ED25519 and RSA 4096-bit keys.
03Is SFTP included?+
Yes. You can browse remote folders, upload and download files, rename items and manage common file operations.
04How is synced data protected?+
Sensitive synchronized data is encrypted on your device with AES-256-GCM before it is sent to the sync service.
Ready when you are
Get ShellSSH ↗Make remote work feel local.
Start with ShellSSH and bring your servers into one focused workspace.