SSH Manager Pro

Manage your servers from your phone — without compromising on security.

SSH Manager Pro is a full-featured SSH client built around one idea: your credentials are yours. Keys and passwords are encrypted with AES-256-GCM using the Android Keystore, protected by your fingerprint or PIN, and never written to Android's cloud backups.

REAL TERMINAL
• Hardware-accelerated terminal with full xterm-256color support
• vim, less, htop and man draw, scroll and exit cleanly, as on a desktop
• Long-press to select and copy any part of your session output
• Multiple concurrent sessions with quick switching
• Automatic keepalive so long-running sessions stay connected
• Searchable session history

SECURE BY DEFAULT
• Biometric or PIN unlock, re-locked every time you leave the app
• Host key verification with trust-on-first-use pinning — you're warned if a server's fingerprint ever changes
• Hardware-backed keys generated inside the secure element, plus YubiKey over NFC
• SSH keys encrypted at rest, generated or imported on device
• Password, public-key, and cloud IAM authentication

CLOUD WITHOUT SSH KEYS
• AWS: Connect to EC2 instances using EC2 Instance Connect — fresh keys minted per session and discarded after a minute
• Google Cloud: Reach Compute Engine VMs with no public IP through IAP and OS Login without storing service account keys
• Browser Sign-in: Sign in via browser with your AWS or Google account using OAuth 2.0 PKCE. Zero static secrets on device
• Multiple cloud profiles: Keep separate AWS and Google Cloud accounts side by side with independent credentials

TAILSCALE & TUNNELS
• Embedded Tailscale node — reach servers behind NAT without a second VPN app
• Point it at Headscale or your own control server
• Jump host / bastion support for private VPCs
• Reach hosts behind Cloudflare Access with no open SSH port

AI COPILOT
• Describe what you want in plain English and get the command
• Works fully offline with an on-device rule engine — no account, no API key
• Optionally connect Google Gemini or OpenRouter for deeper help
• Destructive commands are flagged before they run, and nothing executes until you confirm it

SHARE HOSTS BY QR
• Show any host as a QR code and have a teammate scan it
• Connection details only — passwords and keys are never included
• Scan straight into the Add Host form

COMMAND SNIPPETS
• 73 commands built in, grouped by Disk, Processes, Network, Containers, Performance and SSH keys
• Save your own and launch them on any host
• Search across titles and commands instantly

BUILT FOR ONE-HANDED USE
• Dense lists: around a dozen hosts on screen at once, not four
• Dark by default, with an optional light theme
• Tap a host to connect — edit, share and delete are a long press away
• Export any session, or your whole history, to a file

ENCRYPTED CLOUD BACKUP (Pro)
• Back up hosts, saved passwords, private keys, jump hosts and snippets
• Restore onto a new phone without re-entering a single credential
• Zero-knowledge: encrypted on your device with a passphrase only you know before upload

PRO SUBSCRIPTION
Multi-cloud profiles, Google Cloud IAP, Cloudflare Access tunnels, jump hosts, cloud backup and live AI models are part of Pro. Everything else — SSH, Tailscale, terminal, snippets, AWS Instance Connect and the offline AI copilot — is free and unlimited.

PRIVACY
No analytics. No advertising. No tracking of any kind. The app requests five permissions: internet and network state to connect, biometric access to unlock your vault, and camera solely for scanning host-sharing QR codes. Full policy:
https://sshmanagerpro.app/privacy.html

PLATFORM
Android 8.0 or later, on 64-bit devices. This is an Android app - there is no iPhone, iPad, desktop or web version, and none is planned.

Recent changes:
• Terminal: the keyboard steps aside when Close tab, Disconnect and similar confirmations open, so their buttons are never hidden
• Terminal: the screen stays awake during an active session and while a recording plays
• Hosts: a bastion reachable only over the in-app Tailscale node now connects; a jump host's local tunnel listens on this phone only