Security

Built with security as a foundation. Learn how TabSSH protects your connections and credentials.

🔐 Security Features

Hardware-Backed Encryption

  • Android Keystore: Hardware-backed key storage when available
  • Secure Element: Keys stored in secure hardware on supported devices
  • Biometric Protection: Fingerprint/face unlock for key access
  • Encrypted Storage: All credentials encrypted at rest

SSH Protocol Security

  • Modern Algorithms: Support for latest SSH protocols
  • Host Key Verification: Prevents man-in-the-middle attacks
  • Multiple Key Types: RSA, ECDSA, Ed25519 support
  • Certificate Validation: X.509 certificate support

🛡️ Best Practices

  • Use SSH Keys: Prefer key authentication over passwords
  • Verify Host Keys: Always verify fingerprints on first connection
  • Keep Updated: Update TabSSH regularly for security patches
  • Strong Passphrases: Protect SSH keys with strong passphrases

🚨 Security Issues

Found a security vulnerability? Please report it responsibly:

  • GitHub Security: Use GitHub's private vulnerability reporting
  • No Public Issues: Don't create public issues for security bugs
  • Provide Details: Include reproduction steps and impact assessment

Questions About Security?

Security is complex. If you have questions or concerns, we're here to help.