Modern SSH Client
Open-source, secure, and beautiful — for your phone and your laptop. TabSSH brings true browser-style tabs, full VT100 terminal emulation, and hypervisor management to Android, Linux, macOS, Windows, and BSD.
Why Choose TabSSH?
True Tabbed Interface
Browser-style tabs for multiple SSH sessions. Switch between connections instantly without losing context.
Enterprise-Grade Security
Hardware-backed encryption, biometric authentication, multiple key formats (RSA, ECDSA, Ed25519), and secure storage policies.
Dual-Pane SFTP Browser
Side-by-side local + remote file browser. Multi-file selection, batch transfers with resume, recursive folder upload/download, chmod editing, and tap-to-edit text files in-app.
Advanced Tunneling
Local, remote, and dynamic port forwarding with SOCKS proxy support. Full SSH config import including ProxyJump.
VT100/ANSI Terminal
Full terminal emulation with 256-color support, Unicode handling, and tmux-compatible keyboard shortcuts.
23 Built-in Themes + Editor
Dracula, Monokai, Nord, Solarized, Gruvbox, Tokyo Night, Catppuccin, Rosé Pine, Everforest, Kanagawa, Cobalt2, and more. Built-in GUI theme editor for full customisation.
Open Source
Fully open-source under MIT license. Transparent development with community contributions welcome.
Privacy First
No tracking, no ads, no data collection. Your connections and credentials stay on your device.
Accessibility
Full screen reader support, high contrast themes, keyboard navigation, and WCAG 2.1 AA compliance.
SSH Config Import
Import your existing ~/.ssh/config with full support for ProxyJump, IdentityFile, and advanced directives.
Session Persistence
Automatic tab restoration, scrollback preservation, and seamless reconnection after app restarts.
Universal Key Management
Generate, import, and manage SSH keys in OpenSSH, PEM, PKCS#8, and PuTTY formats. RSA, ECDSA, Ed25519, and DSA. OpenSSH user certificate auth supported.
Hypervisor Management
Manage VMs on Proxmox VE, XCP-ng, Xen Orchestra (with real-time WebSocket updates), and VMware ESXi/vCenter. Power, snapshot, and backup operations from your phone — no other Android SSH client offers this.
VM Serial Console
Connect to VMs that have no network — straight through your hypervisor's serial console. Perfect for troubleshooting boot issues or watching an OS install.
Mosh + X11 Forwarding
Mobile Shell with native binaries shipped per-architecture for unstable connections and roaming. X11 forwarding for graphical apps. Telnet for legacy gear.
Sync Without Google
Mobile syncs through Android's Storage Access Framework — Google Drive, Dropbox, OneDrive, Nextcloud, local storage, anything. Desktop watches a folder synced by your existing client (Nextcloud, Syncthing, rclone). The encrypted AES-256-GCM blob is interchangeable across phone and laptop.
Snippets, Identities & Workspaces
Reusable command snippets with variable prompts. Reusable credential identities. Workspaces save groups of tabs to re-open with one tap. Cluster broadcast types one keystroke into many sessions.
Cloud Host Import
Pull in your droplets and instances from DigitalOcean, Hetzner, Linode, and Vultr with an explicit token. No telemetry, no auto-discovery — opt-in only.
Native ~/.ssh/ Access 💻 Desktop
The desktop client reads your existing ~/.ssh/config, keys, and known_hosts directly — no import step. Add a host on the command line, see it in TabSSH instantly.
CLI Mode 💻 Desktop
Launch a session straight from your shell: tabssh user@host. No GUI step. Pipes naturally into .desktop files, shell aliases, and tmux integrations.
System Tray + Auto-Launch 💻 Desktop
Connect on login, manage your tabs from the tray, never lose a session to an app close. (Coming with v0.1.)
Download TabSSH
📱 Mobile
Android 7.0 and up. ARM64, ARM v7, x86_64, plus a Universal APK that works on every device.
AndroidF-Droid coming soon · all releases
💻 Desktop
Linux, macOS, Windows, BSD. Single static Rust binary — no installer, no runtime. Drop it into $PATH and run.
amd64 + arm64 builds · all releases
Technical Specifications
🔐 Security Features
📱 Mobile
- Android Keystore (hardware-backed)
- AES-256-GCM credential encryption
- Biometric + PIN code app lock
- Host key TOFU + MITM detection
- Screenshot protection (FLAG_SECURE)
- OpenSSH user certificates (Wave 2.2)
- Crash + ANR capture in debug builds
💻 Desktop
- OS keychain (macOS Keychain / Windows Credential Manager / Linux Secret Service)
- AES-256-GCM credential encryption
- Same host key TOFU + MITM detection
- panic-handler crash reporter
- Memory safety: Rust compile-time guarantees
- OpenSSH user certificates (when shipped)
🚀 Protocol Support
📱 Mobile
- SSH 2.0 (JSch 2.27 — rsa-sha2-512 ready)
- Mosh with native per-arch binaries
- Telnet (RFC 854)
- SFTP with resume + recursive folders
- Local / Remote / Dynamic forwarding
- SOCKS proxy + ProxyJump cascading
- X11 forwarding for graphical apps
💻 Desktop
- SSH 2.0 via
russh(pure Rust, no JNI) - Mosh client implementation in pure Rust (planned)
- Telnet + SFTP + port forwarding (when shipped)
- Native X11 forwarding via
x11rb ssh2-configfor~/.ssh/configround-trip
🎨 User Interface
📱 Mobile
- Material Design 3 (DayNight)
- 23 built-in terminal themes + GUI editor
- Browser-style swipe-between tabs
- Split-view multi-pane terminal
- Foldable book-mode + tablet sw720dp layouts
- Customisable 1-5 row on-screen keyboard
- Long-press context menus, command palette (Ctrl+K), quick switcher (Ctrl+J)
💻 Desktop
- egui (immediate-mode, pure Rust)
- Multi-window
- Real keyboard shortcuts (Ctrl+Tab, Ctrl+W, Ctrl+T, Ctrl+K palette, Ctrl+J switcher, Ctrl+R history)
- Native font rendering at any size
- Same 23 themes — JSON format shared with mobile
Two Clients, One Design Language
TabSSH ships as two separate apps — an Android client built in Kotlin and a desktop client built in Rust. They share the same data model (encrypted sync blobs are interchangeable), the same theme JSON format, and the same security stance — but each is built for its platform's strengths.
Mobile ships first and is feature-complete for SSH, SFTP, hypervisor management, and 23 built-in themes. Desktop is in active development — tabssh/desktop on GitHub for current status. The encrypted sync format is designed so a profile pair-imported on mobile becomes available on desktop automatically.
Enterprise-Ready SSH Client
TabSSH is built by developers, for developers. Whether you're managing production servers, developing on remote systems, or need secure mobile access to your infrastructure, TabSSH provides enterprise-grade features in a mobile-friendly package.