SSH, SFTP file transfer, and port forwarding — with every host, key, and credential kept in a single encrypted vault on your Mac. No accounts, no cloud, no telemetry.
macOS 14 (Sonoma) or later·Native app, not Electron·One-time purchase, lifetime 1.x updates
SSHVault is a native macOS SSH client that keeps every host, key, and credential in one encrypted vault on your Mac. Everything stays local and encrypted at rest, unlocked with your master password or Touch ID — no accounts, no cloud sync, no analytics, and no network connections other than the SSH, Telnet, and SFTP sessions you start yourself. Beyond the terminal, it's a full dual-pane SFTP file manager with an in-app editor, organizes your hosts into collapsible groups, and keeps your sessions and tunnels alive even while the vault is locked.
🖥️
Truly native
A real macOS app — not an Electron wrapper.
🔒
Local & encrypted
Encrypted at rest — your secrets never leave your Mac.
🚫
No tracking
No accounts, no telemetry, no analytics.
♾️
Buy once
One-time purchase — no subscription.
Features
Everything in one vault
A complete SSH, SFTP, and tunneling toolkit — designed around a single encrypted vault and a keyboard-first, native macOS experience.
🔐
One encrypted vault
All hosts, keys, identities, and credentials stored in a single vault, encrypted at rest.
Unlock with your master password or Touch ID.
Auto-lock on idle, on ⌘L, or when the screen locks — and your open SSH sessions and port-forward tunnels keep running behind the lock screen.
Automatic daily encrypted backups of your vault, kept locally (last 7).
Portable: export/import an encrypted .sshvault file to move or sync your setup between Macs.
Local-only by design: no accounts, no cloud, no telemetry, no analytics.
🌐
Connect to anything
SSH and Telnet, plus local shell tabs.
Authentication: password, SSH keys (ed25519, ECDSA), passphrase-protected keys, and CA certificates.
Jump hosts (ProxyJump) for reaching servers behind a bastion.
Host-key verification (Trust On First Use) with fingerprint approval, and a known-hosts manager.
Automatic reconnect with backoff when a connection drops.
Per-host initial commands that run automatically after you log in.
Test Connection: verify reachability, host key, and login before you save.
📂
Built-in SFTP file transfer
Dual-pane file manager: browse local and remote side by side.
Drag to copy or move — local↔remote, remote↔remote, and local↔local — with a transfer queue and overwrite / skip / keep-both conflict handling.
Create, rename, delete, and set permissions on remote files and folders.
Edit files in place in a built-in editor — nothing is written to a temp file on disk.
Per-tab transfer log.
🗂️
Organize your hosts
Group hosts into collapsible folders, nested to any depth, inside each vault.
Reorganize by drag-and-drop (including across vaults) or a "Move to Group" menu.
Duplicate and rename hosts inline. Groups travel with your encrypted vault export.
🔀
Port forwarding
Local, remote, and dynamic (SOCKS) port forwarding.
Tunnels run in the background, independent of your terminal tabs.
⌨️
A terminal that feels native
Tabbed sessions in a single window.
Themed, native macOS terminal; choose your monospaced font, size, and scrollback.
Keyboard-first throughout — full keyboard navigation of the file panes and every confirmation dialog, with safe, deliberate confirmations for destructive actions.
A look inside
Screenshots
A native interface built for everyday server work.
Tabbed terminal with themes.
Dual-pane SFTP file manager, mid-transfer.
Sidebar with hosts in nested groups.
Host editor — auth, initial commands, and Test Connection.
Pricing
One price, yours for good
One-time purchase
$9.99 USD
Lifetime license · all 1.x updates & bug fixes
Lifetime license including all 1.x updates and bug fixes (a future major version, 2.0, may be a separate upgrade).
Free 14-day trial with full features.
Offline license verification — checked locally, no phone-home.
