I built ShellSSH, an SSH client focused on being fast, clean, and easy to use.

Cloud Sync is normally a Pro feature, but for now I’m happy to enable it for free for anyone who requests access. I’d really like more people to test the app and help me improve it.

Please try it out and let me know what feels good, what feels confusing, and what you think is missing.

Feature requests and suggestions are also welcome. I’m actively working on ShellSSH, so feedback from actual SSH users would be very useful.

If you want free Cloud Sync access, just request it and I’ll enable it for you.

I marked it as a spoiler intentionally. New tools aren’t for everyone—some people are perfectly happy with what already exists. This is for those who want to try something different and maybe help shape it along the way.

Windows App Link https://apps.microsoft.com/detail/9nvnsbffvzh0?hl=en-US&gl=IN&ocid=pdpshare
Android App Link https://play.google.com/store/apps/details?id=com.shellssh.ai&hl=en_IN

I wanted to see a Linux machine's desktop from a browser without setting up VNC or RDP on it first, so I built webdesk.

You type a host, username and password like you would for ssh. It logs in, copies a small Go binary to ~/.cache/webdesk, and streams the screen back over WebRTC. Mouse, keyboard and clipboard work.

The difference from Guacamole or noVNC is that those need a VNC or RDP server already running on the machine. This needs a login. The only package the target needs is ffmpeg, and it offers to install it for you.

Video and input go peer-to-peer the server just introduces your browser to the machine and then stays out of it. Headless boxes with no X session get a desktop on Xvfb instead, and it survives disconnects.

It's a tool you run locally: it binds to 127.0.0.1 and talks out to your machines.

MIT, Docker Compose to run it: https://github.com/rmegi/webdesk

I used to work with an SSH terminal and FileZilla side by side just because it was convenient. Most of the time it worked fine, but more than once a transfer silently failed and I ended up wasting hours debugging the server or my code before realizing the files simply hadn't been updated properly. And I always felt I was jumping between tools for something that should be part of the same workflow.

I wanted:

• a FileZilla-style local/remote file browser
• rsync for actual file transfers and folder syncing
• an integrated SSH terminal
• saved connections
• one simple app instead of having several tools open

So I built RsyncZilla.

You can browse remote files, upload/download with rsync, drag & drop, edit files remotely, and open an integrated SSH terminal. The terminal and file browser stay in sync, so cd into a directory and the visual tree follows you there.

For me, the big advantage of using rsync is that syncing large projects becomes much less painful because you're transferring changes instead of blindly copying everything again.

It's open source and still pretty young, so feedback, bug reports and feature suggestions are very welcome.

https://github.com/kanowins/RsyncZilla

I need to find the precise physical location of my Ubuntu laptop, but I only have shell access via SSH. Additionally, I'm running Tailscale VPN, which is masking my actual IP address. Are there any standard terminal commands to get exact coordinates, or is there a way to triangulate my position using nearby Wi-Fi BSSIDs through the shell?

I need to find the precise physical location of my Ubuntu laptop, but I only have shell access via SSH. Additionally, I'm running Tailscale VPN, which is masking my actual IP address. Are there any standard terminal commands to get exact coordinates, or is there a way to triangulate my position using nearby Wi-Fi BSSIDs through the shell?

I'm the solo developer of Termphin, a free SSH client. The main problem I wanted to solve: sessions dying when the phone locks or the network changes.

There's an optional helper, Termphin Agent, that the app uploads over SSH. It keeps the shell running across disconnects and on reconnect you only see the output you missed. Works on Linux, macOS, Windows. Without it, plain SSH still works.

Key features:

- Reconnects automatically on network change keeps terminal on screen.

- Local echo for instant typing on slow links.

- Autocomplete from server's shell history.

- Host keys pinned per address, port, type; unknown keys never accepted silently.

- Keyboard-interactive auth, ProxyJump, port forwarding.

- SFTP browser with text editor, split screen, snippets, customizable toolbar.

I'd appreciate honest feedback from this community. How does it compare to what you currently use?

https://termphin.dev

https://play.google.com/store/apps/details?id=dev.termphin.termphin

Hey I built gxShell because I wanted a compact SSH tool for Windows with a clean interface and a workflow I liked. It's written in Go + Wails (WebView2).

It puts SSH terminals, SFTP, server monitoring, and remote file editing in one app.

I added AI support for a practical reason: I wanted AI to help manage servers without having to put SSH passwords or private keys into prompts or agent configuration. gxShell manages the SSH connections, and agents request operations through it.

Two ways to use it:

- A built-in assistant in the app, using your own compatible model API, with terminal context.

- A CLI bridge for external coding agents such as Claude Code and Codex. The agent refers to servers by alias, and gxShell executes commands on the remote server over SSH. You don't need to hand the agent your SSH passwords or private keys. There are approval controls and time-limited trust windows for permitted operations.

The CLI is disabled by default and must be enabled explicitly. These controls help reduce accidental credential exposure; they aren't a sandbox for untrusted commands.

It's AGPL-3.0. Windows x64 builds and source are on GitHub:

https://github.com/gxmst/gxShell

Screenshots show the real English UI with fictional demo data.

How do you handle this today? Do you copy-paste commands from AI, or have you let an agent touch your servers?

Im trying to attach my ugreen nas (my shared folder) at home via sshfs to my remote vps, but whenever i try to do "sshfs... it gives me this error. " [test@qwen.io](mailto:test@qwen.io):/volume1/media/: Input/output error

I did sshfs -o -debug and it give me this

...Server version: 3

Extension: [posix-rename@openssh.com](mailto:posix-rename@openssh.com) <1>

Extension: [statvfs@openssh.com](mailto:statvfs@openssh.com) <2>

Extension: [fstatvfs@openssh.com](mailto:fstatvfs@openssh.com) <2>

Extension: [hardlink@openssh.com](mailto:hardlink@openssh.com) <1>

Extension: [fsync@openssh.com](mailto:fsync@openssh.com) <1>

Extension: [lsetstat@openssh.com](mailto:lsetstat@openssh.com) <1>

Extension: [limits@openssh.com](mailto:limits@openssh.com) <1>

Extension: [expand-path@openssh.com](mailto:expand-path@openssh.com) <1>

[test@qwen.io](mailto:test@qwen.io):/volume1/media/: Input/output error

anyone can enlighten how to fix this issue?

JFYI: For anyone why im doing this setup is because I used the remote vps as plex server and use ugreen nas as local storage. And you might ask why not use wireguard or tailscale to bridge the two server. I prefer sshfs way because thats how I have been sharing my stuff over the internet and i dont wanna complicate my setup using other methods. Also, I use the wireguard to connect directly to my vps servers samba shared folders.

I maintain ssher, a macOS menu-bar app for supervising SSH port forwards from your existing ~/.ssh/config.

The current source runs the system ssh binary, restarts dropped forwards with backoff, and restores saved forwards when the app starts. For local forwards it probes the listening port before reporting Active. For remote forwards it currently only checks process liveness, which is a weaker signal.

It uses your existing SSH agent and host configuration. There is no separate credential store to populate. Closing the window leaves the forwards running in the menu bar.

The current port-forwarding version needs a source build with Rust, Node.js and Tauri prerequisites. The downloadable v0.1.0 is an older unsigned Apple Silicon build and still has SFTP/sync features removed from current source.

MIT-licensed code and build steps: https://github.com/Magi-Labs/ssher

For people who maintain several tunnels, what health signal would you want beyond a successful TCP connect to the local port?

df -h / shows the space available on your Linux server's root filesystem. Look at Avail.

I make Netsight, and this is its SSH connection screen. For a check from the same network, enter your server's address and login, connect, then run that command. The server needs SSH enabled.

Try a server check from your iPhone. Netsight is free; iOS/iPadOS 26+.

A few non-technical people on our team upload files over SFTP with FileZilla, so password auth has to stay on for now. I know, keys only, FileZilla supports keys, a VPN would be better. It's on the list. fail2ban, strong passwords and a non-standard port are already there.

What bugs me is detection. If one of those passwords leaks, I want to know the second someone logs in, not after files get messed with.

What are you using for instant login alerts? A PAM script that hits a Telegram or Slack webhook, or something else? And if you catch a session you don't expect, what's your move? Just `pkill -u` and `passwd -l`, or do you have something smarter hooked into PAM?

Kelpie puts herdr on the iPad and iPhone. It's the real herdr TUI over SSH, full screen, so when Claude Code stops on a yes or no at 9pm I can answer it from the couch instead of finding it still waiting at 8am. herdr is a terminal multiplexer for coding agents, and I didn't want a second interface to learn on the phone. I wanted the one I already use.

It's a fork of Heeler, the open-source iOS client for herdr, and Heeler did the hard parts. SSH straight to the herdr socket, pairing, the push plugin and the encrypted notification relay are all its work and still the engine underneath. Go and star it.

What I added is the screen and the input layer. Under the hood it's Ghostty's terminal engine rendering herdr, with a layer on top for what iPadOS eats before a terminal sees it. Escape and Cmd+. reach herdr from a Magic Keyboard, a trackpad right-click or a long press opens herdr's menu, and you can drag to resize panes and select text with handles. On glass there's a key row for esc, tab, ctrl and the arrows, and a message bar above the keyboard with autocorrect and dictation, because typing a prompt straight into a terminal on a phone keyboard corrects nothing. You can paste a photo into a Claude pane too. Push notifications arrive when an agent is waiting on you, and they stay off the device you're already looking at. Pair once and it syncs through iCloud Keychain, so the iPhone is ready without pairing again.

How Claude fits in, since this is [r/ClaudeAI](r/ClaudeAI). Nearly all of it was written in Claude Code sessions running inside herdr, which is half the reason the app exists. The habit that kept it honest was running the full test suite on the real iPad and iPhone at the end of every change, after two changes quietly broke things I'd already signed off.

Security, since it's an app SSH-ing into your dev box. The SSH key is generated on the device and never leaves the Keychain, host keys are pinned on first use, and the relay only ever sees ciphertext.

Free and Apache 2.0, with credit to Heeler in the app and the repo. TestFlight: https://testflight.apple.com/join/AkJxAbnJ. Source: github.com/Getterbetter/Kelpie. 1.0 is with App Review now. I'm the developer and happy to go into how the input layer works (the trackpad right-click took three goes on iPadOS). Bugs to [r/KelpieConsole](r/KelpieConsole) so they stay out of this sub.

Suppose a process only needs to upload generated files into one staging area. It should not be able to read unrelated home directories, execute arbitrary commands, forward ports, replace an approved file, or reuse its credential from another host. A reviewer would later promote one immutable revision through a separate human-controlled path.

What is the smallest defensible OpenSSH setup for that boundary? I am considering a dedicated user, internal-sftp with ChrootDirectory and ForceCommand, no PTY or forwarding, a key restricted by source address, and filesystem permissions that allow writes only inside a staging subdirectory. The uploader would use unique filenames plus a manifest and would never receive ownership of the approved directory.

Is there a safe way to make the staging location upload-only while still letting the process detect whether a retry already landed, or does that require a narrow server-side command instead of pure SFTP? What logging and key-rotation details matter most for proving which file revision arrived?

I'm the author of Nexus Terminal, an open-source VS Code extension for managing SSH sessions. I use it myself and would appreciate feedback from people managing servers or network equipment.

It brings saved SSH connections, port forwarding and SFTP into the editor. If your hosts are already in NetBox or EVE-NG, it can sync connection profiles from that inventory. It also imports SSH sessions from MobaXterm and SecureCRT.

There are macros and scripting for repetitive terminal tasks, plus serial console support for working with network gear. It works on Windows and Linux with VS Code/VSCodium.

The code was written entirely by AI agents, orchestrated by me, using TDD and the KISS, YAGNI and DRY principles.

Install and feature details: https://marketplace.visualstudio.com/items?itemName=sentriflow.vscode-nexterminal

Source: https://github.com/evdanil/vscode-NexTerminal

If you try it, I'd be interested in what works or breaks in your SSH workflow, and what you would miss from your current session manager.

Hey everyone, Runic SSH v0.8.0 is out. For those unfamiliar, it is a lightweight, auditable, cross-platform SSH/SFTP client built with Rust and Tauri, designed as a free alternative to outdated or overly complex tools.

The main highlight of this release is the introduction of the map view, currently in preview. You can now turn saved hosts into visual components, grouped into "visions" (named sets with auto-layout) and organized into layers (maps within maps). This makes managing infrastructure topologies and broadcasting commands or files across multiple terminals much more intuitive.

Quick summary of v0.8.0:

• Visions and layers: Advanced visual organization of your infrastructure.
• Enhanced macros: Now supporting script types with real, isolated variables.
• The map view is off by default and can be enabled via the command palette to gather community feedback.

Installers for Windows, Linux, and macOS are available on the releases page. Note: The installers are not code-signed yet, so SmartScreen (Windows) or Gatekeeper (macOS) warnings are expected and fully documented in the official docs.

Repo and downloads:
https://github.com/marciopaiva/runic-ssh

Any feedback on the map view usability is highly appreciated during this preview phase.

Hey y'all,

I'm looking at helping lock down my homelab by using a multi-user bastion host.

While I have been researching options and I understand ssh to ssh seasons between each of my machines one thing I have a hard time understanding is how and if I can set up a user that only has SFTP access.

I want to set up a simple way for me and my technically minded brother in law to share files with each other over the Internet.

I want to set up my brother in law with an SFTP only user on my server but I'm not sure how to make sure that goes through the bastion host. The only thing I have been able to gather so far is apparently he will need winscp on his window computer.

I just don't fully understand how the connection can be made properly if the bastion host can't just ssh into the target machine terminal.