Terminal Linux & SSH

Local shell

Native pseudo-terminal over a bundled Busybox (~150 applets: curl, wget, vi, awk, sed, find, gzip…).

SSH/SFTP

Password / KeyPair / Keyboard-interactive (MFA) auth, auto reconnect, TOFU verified.

Tabs and split

Multiple simultaneous sessions with renamable tabs. Horizontal/vertical split (Pro) + Broadcast (Pro).

Linux tools

File Manager · Processes · Network · Packages · Disk · System Info · Git Panel with native UI parsed from output.

100+ snippets

Built-in library in 15 categories (System, Docker, Git, Nginx, Database, Monitoring…) + custom snippets.

Security

Biometric + PIN + autolock + clipboard timeout. SSH keys encrypted on-device (AES256-GCM + Android KeyStore).

SSH

Password · KeyPair · Keyboard-interactive (MFA). Auto-reconnect on network restore. NONE/SOCKS5/HTTP/SSH_JUMP proxy. Agent forwarding. Startup command on connect.

SFTP

List, mkdir, delete, rename, read/write, download/upload with progress. Single-pane + Dual-pane (local↔remote) + inline remote file editor + transfer queue.

Telnet

Connect on port 23. No crypto auth — only for legacy devices / network consoles.

Serial / UART

USB OTG → /dev/ttyUSB0 with configurable baud (115200 default), databits 5-8, parity NONE/ODD/EVEN/MARK/SPACE, flow control NONE/RTS_CTS/XON_XOFF.

Mosh

Persistent session over UDP for unreliable networks. Predict mode ALWAYS / ADAPTIVE / NEVER / EXPERIMENTAL. Available when remote has mosh-server.

Key manager

List / generate / copy public key / deploy / delete. The private key is stored as an encrypted reference, never as plain text.

Host-key verification

Shows SHA256 fingerprint and distinguishes Trust (new host) from Warning: key changed (probable MITM). Decision is persisted as a known host.

Device-bound biometric keys

EC P-256 key pair generated and held entirely inside Android Keystore — the private key never exists as exportable bytes. Optional requirement of a recent biometric/PIN unlock (30s window) before it will sign. Same idea as Termius' SSH.id, without a public hosting dependency.

Import from ~/.ssh

Paste an SSH config to import Host blocks as hosts (wildcard patterns skipped), or a known_hosts file to import trusted keys (hashed entries are skipped — irrecoverable by design).

Nested groups

Groups and subgroups (not folders) with a color-coded filter chip row; "Connect all" opens one tab per host in the active group. Configuration merging: theme, proxy and default identity are inherited from the nearest ancestor that defines them; environment variables merge down the whole chain.

Identities

Reusable username + credential (password or a Key manager entry) applied as a template to any host or as a group's default. Save one straight from a host's Authentication section, or apply an existing one with a single tap.

localhost:8080 → remote:80. Access remote service from local.

remote:9000 → localhost:3000. Expose local service to remote.

Dynamic SOCKS5 proxy over the SSH session.

File Manager

ls -la, stat, du → browser with metadata

Process Viewer

ps aux → tree, filter by user/name, kill signal

Network Tools

ip a, ss, ping, traceroute, nslookup → parsed results + bandwidth monitor

Package Manager

apt list, yum list, apk info → paginated list with search, install/remove

Disk Usage

df -h, du -h → top dirs, mount points, inodes

System Info

uname, uptime, /proc/meminfo → cards for hostname, kernel, mem, CPU

Git Panel

git status, branch, log → panel + common git command shortcuts

Supported ANSI sequences

• Reset, bold, dim, italic, underline
• FG/BG standard (30-37 / 40-47)
• FG/BG bright (90-97 / 100-107)
• FG/BG 256-color (38;5;N / 48;5;N)
• FG/BG RGB (38;2;R;G;B / 48;2;R;G;B)
• OSC 52 → writes to Android clipboard; other OSC stripped (window title…)

Detected link types

• URL — http(s)://, ftp://, IP:PORT
• FILE — /absolute/path, ./rel, ~/home
• ERROR — file.ext:line:col → opens in editor
• emphasis — error, warning, failed

Roles and members

Live member list with role badges (Admin / read-write / read-only), enforced at the sync layer: a read-only peer that tries to write gets its change reverted and is disconnected before it reaches anyone else's device.

Shared hosts and snippets

A room is a live-only concept — it doesn't survive an app restart, same as a live editor collaboration session. No standing cloud copy of the room itself.

Security

• • Biometric + numeric PIN
• • Inactivity autolock (configurable minutes)
• • Clipboard timeout (60s default)
• • SSH private keys encrypted on-device (AES256-GCM + Android KeyStore)

Logging and recording

• • Logging: tee of output to plain text file (LOG badge)
• • Recording: asciicast v2 format compatible with asciinema (REC badge)
• • Auto-record per group: a group can force logging to start automatically on every host it contains, inherited the same way as theme/proxy
• • Session logs sheet: lists all logs with date search, star to bookmark (survives the 100-log trim) and a free-text comment per log

Smart autocomplete

Per-tab shell history, real recursive path completion against the workspace filesystem (local shell only), and username suggestions from saved Identities after ssh/scp.

Attach files to a session

Clip icon opens the system file picker. On a local shell it's written straight into the workspace; on a remote SSH session it's uploaded to /tmp via SFTP. The resolved path is inserted into the command field, with (1)/(2)… suffixing on a name collision — never overwrites.

Unseen output badge

A tab that isn't currently on screen gets a small badge on its connection dot the moment new output arrives — cleared the instant you switch to it. No heuristic guessing whether it "needs input", just a real signal that something happened.

Volume keys as arrows

Optional setting: while a session is connected, the physical volume buttons send arrow-up/arrow-down to the terminal instead of changing system volume.