Android SSH Terminal

The terminal,
reimagined for mobile.

A professional SSH and Telnet client with its own terminal engine, custom keyboard system, and zero-knowledge vault encryption. Built for people who live in the terminal.

sshtest@duero ~
$ ssh sshtest@duero
Connecting to 10.10.0.39:22...
Host key verified (Ed25519:SHA256:...)
Authentication successful.
sshtest@duero:~$ _
2000+ Unit Tests
20 Color Themes
10 Terminal Fonts
11/11 vttest Passing

What Makes It Different

A custom terminal engine and keyboard system designed specifically for mobile SSH work.

Own Terminal Engine

Full VT100/VT220/xterm parser with VT52 compatibility mode. 256-color and 24-bit truecolor, alternate screen buffer, bracketed paste, mouse reporting. All vttest conformance tests passing.

Custom Keyboard

Canvas-rendered, JSON-driven layouts with QuickBar, app shortcuts for vim/nano/tmux/screen, modifier keys, language packs, and a mini numpad with NumBlok toggle.

SFTP Browser

Full file manager with multi-select, batch delete, hidden file toggle, breadcrumb navigation. Each SFTP tab runs its own independent SSH connection.

Vault Security

Argon2id key derivation + AES-256-GCM encryption. Passwords in EncryptedSharedPreferences. Private keys never in plaintext. Zero-knowledge by design.

Port Forwarding

Local, remote, and dynamic SOCKS5 tunnels. Configured per connection, auto-activated on connect. Full RFC 1928/1929 SOCKS5 compliance.

SSH & Telnet

SSH with multi-hop jump host chains and cycle detection. Telnet for legacy systems — direct or tunneled via SSH jump host for secure access to older infrastructure.

20 Themes & 10 Fonts

Catppuccin, Dracula, Nord, Tokyo Night, Solarized, Gruvbox, and more. JetBrains Mono, Fira Mono, Cascadia, Hack. Per-connection theme overrides.

Multi-Session Tabs

Multiple simultaneous SSH, Telnet, and local shell sessions with tab switching, auto-reconnect, disconnect notifications, and session recovery.

Security First

Four independent security audits. OWASP-aligned. Every layer hardened.

CRYPTO

Argon2id + AES-256-GCM

JNI native crypto with volatile secure_zero on all sensitive memory. Compiler hardened with -fstack-protector-strong.

TOFU

Host Key Verification

Trust-on-first-use with algorithm-prefixed fingerprints. Default REJECT when no UI handler. Key change alerts with user confirmation.

STORAGE

EncryptedSharedPreferences

AES-256-GCM for values, AES-256-SIV for keys. Private SSH keys never in Room DB or plaintext. Password CharArrays zeroed after use.

NETWORK

System CAs Only

Cleartext traffic disabled globally. No custom certificate authorities. Paste sanitization prevents escape injection attacks.

SSH Workbench

Coming to Google Play

Register in the app to sync your vault across devices.