Out now on iPhone, iPad, Mac, Android & Windows

Your terminal,
in your pocket.

A real SSH client for iPhone, iPad, Mac, Android and Windows. Free. Fast. Built by someone who actually uses it every day. Plus a 1-month free trial of every Pro feature.

App Store Google Play Microsoft Store

No account, no email. On the App Store for iPhone, iPad & Mac — and on Google Play for Android. On Windows: get it from the Microsoft Store — or grab the direct installer.

See it in action

ShellPhone, in under a minute.

A quick tour from your phone to your Mac — a real terminal, SFTP, a whole network toolbox and a split-pane desktop.

~/shellphone/screenshots · 7

The why

Yet another SSH client?

JuiceSSH died in 2021 and left a hole on Android that nobody really filled. Termius works on both platforms but tucks SFTP, snippets and tunnels behind its Pro plan. Other modern alternatives exist — but mostly only on Android.

ShellPhone is the SSH client I wanted to use myself.

Free. On every device — iPhone, iPad, Mac, Android. With the features I actually use every day — multi-tab terminal, SFTP, tunnels, snippets, biometrics — and nothing that I don't. Three optional annual subscriptions from €1.99/year for power-user comfort, or grab the All-in-one at €4.99/year and forget about it. Cancel anytime. No tracking. No cloud.

— Built in Madrid with love. Tested around the world for you.

What's inside

Every feature, done right.

  1. 01

    Multi-tab terminalFree

    Reorderable tabs and independent sessions. Keep htop running on one tab while you edit a file on another. Real xterm-256color, true colour, UTF-8.

    SSH-2 (RFC 4251) xterm-256color · true color UTF-8 + combining mouse SGR / X10 SIGWINCH on rotate session resume after background
  2. 02

    Local terminal — your own machine, next to your serversFree

    Open a terminal on your own computer or phone inside ShellPhone, right next to your servers. On macOS it is your real shell (when Remote Login is on) — or your favourite terminal app, one click away. On Windows, PowerShell, CMD or WSL inside the app. On Android, the system shell. Tabs and the automatic journal work just like with any server; writing notes is part of the Power user bundle. Free — one at a time in the free version.

    macOS · Windows · Android macOS: real shell or terminal app Windows: PowerShell · CMD · WSL Android: system shell tabs · automatic journal notes: Power user free: one at a time
  3. 03

    SFTP — downloads always freeFree

    Browse and pull files from your server with biometric auth. Downloads stream with live progress and a cancel button, no size limit. Free forever; uploads live in the Power user bundle.

    SFTP v3 over SSH iOS Files / macOS Finder / SAF streaming · live progress · cancel no size limit biometric per-action free downloads · paid uploads
  4. 04

    Tunnels — local forward & SOCKS5Free

    Hit your private Postgres from a laptop on tethering. Run a SOCKS5 proxy through your phone. Tunnels run free; saving them is in the Power user bundle.

    LOCAL forward (-L) SOCKS5 dynamic (-D) multi-port concurrent tunnels survive reconnects IPv4 + IPv6 background-tolerant
  5. 05

    Snippets with variablesFree

    Long commands with placeholders. Tap the snippet, fill in the gaps, send. Running snippets is free; saving your own is in the Power user bundle.

    {{placeholders}} types: text · password · choice shell-safe single-quote escape run free · save with Power user JSON export / import common library bundled
  6. 06

    Termux-style keyboardFree

    Ctrl, Esc, Tab, arrows and pipe always one tap away. Bye to fighting the iOS keyboard for a single backtick.

    Ctrl · Esc · Tab · Alt arrows · pipe · ~ · / · $ chord combos (Ctrl-A, Ctrl-D…) sticky modifiers (tap-and-hold) 10k–100k scrollback copy on selection
  7. 07

    Native auth, native securityFree

    Face ID / Touch ID / fingerprint to unlock. Keys live in the OS keychain — never in app storage, never in the cloud. On macOS your ~/.ssh keys are listed and copy into your synced keys with one tap.

    ed25519 (preferred) RSA 2048+ · 3072 · 4096 ECDSA p256 · p384 · p521 biometric · TOFU host-key macOS ~/.ssh list + copy-in known_hosts SHA256 · strict
  8. 08

    Saved connectionsPower user

    Bookmark every host with name, user, port, key and tags. Open from a list, sorted or searched. Stored in encrypted local SQLite, with optional end-to-end encrypted sync to your own iCloud / Google Drive.

    encrypted SQLite name · user · port · key tags & full-text search biometric on open optional E2EE sync ordered & favourited
  9. 09

    Theme, font & language persistenceFree

    Pick your terminal theme, monospace font and UI language once. The app remembers across launches, updates and reboots.

    5 themes included JetBrains Mono · IBM Plex SF Mono · Fira Code 9 UI languages respects system dark/light per-device store
  10. 10

    ~/.ssh/config importPower user

    Drop your existing ssh_config and ShellPhone parses Host blocks into saved connections. On macOS it's read straight from ~/.ssh, no file picking. Bring 30 hosts in 5 seconds — no manual re-typing.

    OpenSSH-compatible parser Host · HostName · User · Port IdentityFile · ProxyCommand macOS ~/.ssh auto-read Include directives batch import + dedupe
  11. 11

    Quick ConnectFree

    Type user@host, port and a key. Three taps from launch to a remote prompt. Connection isn't saved unless you have the Power user bundle.

    user@host syntax port · password · key no signup · no account 3-tap path to prompt session-only (free) saved with Power user
  12. 12

    Natural-language snippet searchFree

    Type compress folder and get tar -czvf. Powered by community shell snippets via cht.sh. No API key, no account, anonymous lookup.

    cht.sh integration 1k+ topics indexed anonymous queries no API key required no per-query fee tap to copy or insert
  13. 13

    Command historyFree

    Every command typed is searchable, per session and globally. Find that long awk one-liner from three days ago without scrolling forever.

    per-session + global full-text search encrypted on device preserved across closes configurable depth tap to re-run
  14. 14

    Hardware keyboard shortcutsFree

    iPad and Mac get the full treatment. ⌘T new tab, ⌘W close, ⌘1–⌘9 switch, ⌘[ ⌘] prev/next, ⌘K command search, ⌘/ snippets, ⌘, settings.

    ⌘T · ⌘W · ⌘1–⌘9 ⌘K · ⌘/ · ⌘, ⌘[ · ⌘] (prev/next) iPad + macOS only Smart Keyboard / Magic external Bluetooth
  15. 15

    iTerm2 theme importFree

    Drop in any .itermcolors file from iterm2colorschemes.com. Hundreds of themes parsed and stored as ARGB locally. Preview before saving.

    .itermcolors XML plist ARGB color storage iterm2colorschemes.com drop-in import preview before save JSON export
  16. 16

    Multi-window on iPadFree

    Drag a tab out into its own window. Run two servers side-by-side in Stage Manager or Split View. Each window gets its own scene and history.

    drag-out tabs Stage Manager support Split View Slide Over scene-aware iPad + macOS only
  17. 17

    Split panesFree

    View two live sessions at once, side by side or stacked, with a draggable divider to resize. This is real in-app splitting — not the OS Split View — and it coexists with the macOS tools panel.

    two sessions at once horizontal or vertical draggable resize divider in-app, not OS Split View coexists with tools panel desktop + iPad
  18. 18

    Transparent reconnectionFree

    Switch Wi-Fi to cellular, lock the phone, walk through a dead spot — ShellPhone reconnects on its own with backoff and re-attaches the shell to the same tab, scrollback intact. A manual Reconnect button is there for when it finally gives up.

    automatic with backoff re-attach to same tab scrollback preserved handles Wi-Fi↔cellular & sleep manual Reconnect fallback survives short outages
  19. 19

    Follow mode (terminal ↔ SFTP)Free

    cd in the terminal and the SFTP browser follows. Open a folder in the browser and the terminal cds there. Toggleable, on by default, remembered across sessions.

    two-way path sync terminal cd → SFTP follows SFTP open → terminal cd toggleable · on by default remembered per session no extra round-trips
  20. 20

    Connection label coloursFree

    Tag a server with a colour — production red, staging amber — shown in the list and on the terminal tab. Live search and filter the list, and duplicate any saved connection with one tap.

    per-connection colour tag shown on list + terminal tab live search / filter one-tap duplicate no naming clashes fast visual triage
  21. 21

    Encrypted backup fileFree

    Export your connections, keys and settings to a passphrase-encrypted .spbk file and restore it on any device. The offline alternative to Cloud Sync — nothing leaves your hands.

    .spbk encrypted file passphrase-derived key connections · keys · settings restore on any device offline, no cloud needed share via Files / Drive
  22. 22

    Deep links & icon quick actionsFree

    Tap an ssh://user@host:port link anywhere and ShellPhone opens Quick Connect pre-filled — it never auto-connects. Long-press the app icon for Quick Connect and your three most recent connections.

    ssh:// URL scheme pre-fills Quick Connect never auto-connects long-press icon shortcuts 3 most-recent connections iOS · Android · macOS
  23. 23

    Comfort & safety netsFree

    A multi-line paste is previewed before it hits the shell. Closing a live tab or quitting the desktop app asks first. Background tabs show a bell badge. Pinch to zoom the terminal font, and keep the screen awake while connected.

    multi-line paste preview close-tab / quit confirmation terminal bell badge pinch-to-zoom font keep-screen-awake toggle all on by default
  24. 24

    ProxyJump / bastion hopsPower user

    Real ssh -J chaining. Pick a saved connection as the jump host and we tunnel through it. No port-forward dance, no workarounds — actual ProxyJump.

    ssh -J equivalent multi-hop chains forwardLocal under hood credential per hop saved jump targets auto-reconnect on hop drop
  25. 25

    Telnet protocolPower user

    For legacy network gear that only speaks Telnet — switches, routers, ancient terminal servers. Tiny IAC-aware client, refuses option negotiations, shows a loud cleartext warning.

    RFC 854 IAC parsing refuses negotiations cleartext warning (loud) for legacy switches telnet:// URLs no encryption (by design)
  26. 26

    Wi-Fi triggersPower user

    Join the office Wi-Fi, get a one-tap suggestion to open prod-bastion. Match SSIDs to saved connections. iOS asks once for location-when-in-use; Android reads SSID passively.

    SSID-based detection auto-suggest on connect match per connection no location stored iOS NSLocation prompt Android passive SSID
  27. 27

    Pubkey agent (in-memory)Power user

    Decrypt your keys once per app session, cached in RAM. Skip the unlock prompt on every connection. Cleared on app restart, lockable on demand.

    RAM-only cache session-scoped cleared on restart biometric to unlock once agent-style flow explicit lock available
  28. 28

    Strict SSH key validationPower user

    When you save a key for a connection, ShellPhone parses the PEM strictly first. Stray BOM bytes, mixed line endings, truncated content — all caught before anything is stored. You get a clear error in your language, and your key list never ends up with half-written entries.

    strict PEM parser BOM stripped · CRLF→LF whitespace trimmed PKCS#1 · PKCS#8 · OpenSSH localised error message nothing saved on failure
  29. 29

    Cross-device sync (iCloud / Google Drive)Free

    Your saved connections, snippets and tunnels follow you across iPhone, iPad, Mac and Android. Apple devices sync through your own iCloud account; Android devices through your own Google Drive. Everything is end-to-end encrypted before it leaves the device — there is no ShellPhone server in the middle. Off by default: flip the toggle once and your config is everywhere.

    end-to-end encrypted iCloud (Apple) · Drive (Android) no ShellPhone server your account, your devices off by default one toggle to enable
  30. 30

    SFTP file uploadsPower user

    Push files from Files / Photos / Drive to the remote machine over SFTP. Downloads stay free for everyone; uploads are gated to Power user because that's the actually-mutating direction. Background-aware progress so you can lock the phone mid-transfer without dropping the connection.

    SFTP v3 over SSH upload from Files / Photos / Drive background-aware progress resumable on disconnect size + permission preserved conflict-aware overwrite
  31. 31

    Macros — saved command sequencesPower user

    A saved sequence of commands you fire at a host with one tap. Optional delays between commands let the previous one settle (e.g. wait 2s for the service to restart before tailing logs). Perfect for "deploy", "git pull && restart", "tail logs", "weekly cleanup" — anything you'd otherwise paste line by line.

    named macros · Hive store N steps · per-step delay inline newlines (multi-line OK) dry-run preview abort on first non-zero (opt) share via JSON export
  32. 32

    Wake on LANNetwork tools

    Boot your home server, NAS or office PC from your phone with one tap. Builds the WoL magic packet and broadcasts it on the local subnet over UDP/9. Accepts MAC addresses in any common notation (AA:BB:CC:DD:EE:FF, AA-BB-…, Cisco aabb.ccdd.eeff). Saves devices for repeat use.

    UDP/9 broadcast (RFC, sort of) multi-format MAC parser custom broadcast address saved-devices list named per device no listener required
  33. 33

    TCP PingNetwork tools

    Latency, jitter and loss to a TCP service — not ICMP, because mobile sandboxes block raw sockets. TCP connect-timing is what actually matters: the latency to the service you care about (your bastion at port 22, your API at 443) instead of an irrelevant ICMP echo on a different code path.

    TCP connect timing host:port input configurable count + interval min / avg / max / stddev loss percentage copy summary as text
  34. 34

    DNS lookupNetwork tools

    A, AAAA, MX, TXT, NS, CNAME, SOA, PTR — every record type a sysadmin actually queries, with a custom UDP/53 resolver client (RFC 1035) instead of relying on the OS resolver. Pick the upstream: Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9 9.9.9.9, or your own. See raw answer + parsed view side by side.

    UDP/53 resolver (RFC 1035) 8 record types preset upstreams + custom EDNS0 buffer 4096 TC bit → TCP fallback copy answer as text
  35. 35

    Reverse DNSNetwork tools

    Type an IP, pick PTR, get the hostname. We auto-build the in-addr.arpa chain so you don't have to remember that 192.0.2.1 reverses to 1.2.0.192.in-addr.arpa. Also works with IPv6 → ip6.arpa nibble form.

    IPv4 + IPv6 input auto in-addr.arpa builder ip6.arpa nibble form shares same UDP/53 client shares same upstream picker copy hostname as text
  36. 36

    WhoisNetwork tools

    Owner lookup for a domain or IP, RFC 3912. We start at IANA's whois.iana.org bootstrap server, follow one level of refer: referral to the right registry, and show you the raw text answer. Most queries resolve in under a second.

    RFC 3912 over TCP/43 IANA bootstrap 1 level of refer: follow raw text response copy / share output no third-party API
  37. 37

    Subnet scannerNetwork tools

    Discover live hosts on the network from your phone. Accepts CIDR (192.168.1.0/24), range (10.0.0.10-20) or single IPs. Bounded concurrency so it doesn't fry your battery or trip a captive portal. Optional reverse-DNS pass turns IPs into hostnames in the result list.

    CIDR / range / single IP TCP host discovery bounded concurrency optional reverse-DNS pass abort anytime copy results as text
  38. 38

    Port scannerNetwork tools

    Find open TCP ports on a host. Use the "common" preset (top 30 nmap-style with service names — 22/SSH, 80/HTTP, 443/HTTPS, 3306/MySQL, 6379/Redis, etc.) or paste a custom spec like 22, 80-90, 443, 8000-8100. TCP connect-scan only — no SYN flood, no stealth tricks.

    TCP connect-scan common preset (top 30) custom spec parser service-name labels bounded concurrency copy results as text
  39. 39

    TLS certificate inspectorNetwork tools

    Open a TLS handshake to host:port, parse the leaf certificate, show subject / issuer / validity dates / SAN list / SHA-1 + SHA-256 fingerprints / DER size. Loud red banner if it expires in <30 days, or if it's already expired. Saves the cert as PEM if you want to compare or pin.

    TLS handshake leaf cert parsing SAN list extraction SHA-1 + SHA-256 fingerprints expiry-soon warning (30d) PEM export
  40. 40

    HTTP / curl testerNetwork tools

    Build a request — method, URL, headers, body — and inspect the response: status, response headers, body in monospace with selectable text. Postman in your pocket without the account, the workspace bloat, or the "sign in with Google" pop-up.

    all common HTTP methods custom headers + body response status + headers monospace body view copy as curl command no account, no workspace
  41. 41

    VNC viewerRemote desktop

    When SSH isn't enough — start a GUI installer, verify a graphical app, debug a desktop service. RFC 6143 client that connects to TightVNC, RealVNC, x11vnc, macOS Screen Sharing, Ubuntu Remote Desktop, Raspberry Pi VNC. Pinch-zoom up to 10×, drag to pan a 4K screen from your iPhone. Auto-negotiates raw + CopyRect (best over LAN) encodings.

    RFC 6143 RFB protocol RFB · VNC (RFC 6143) isolate-based IO (UI never blocks) encodings: raw / CopyRect VNC Authentication password
  42. 42

    chmod calculatorFree

    Convert between octal (755, 644, 4775 with setuid) and symbolic (rwxr-xr-x) in either direction. Bidirectional: type one side, the other updates live. Setuid / setgid / sticky bits supported. Useful when SSH-ing into a server and you can't remember if 644 means "readable by group" or "writable by everyone".

    octal ↔ symbolic 3 or 4-digit input setuid / setgid / sticky bit toggles for owner/group/other copy either form no network needed
  43. 43

    SSH key generator (Ed25519)Free

    Generate a fresh Ed25519 keypair on-device — modern algorithm, smaller and faster than RSA, the one OpenSSH itself recommends. The OpenSSH-format private key + the ssh-ed25519 … public line. Copy the public to paste into ~/.ssh/authorized_keys; the private stays in the OS keychain.

    Ed25519 keypair OpenSSH private-key format ssh-ed25519 public line optional passphrase private → OS keychain copy / share public
  44. 44

    Bandwidth testFree

    Measure your real download speed by streaming a known-size HTTP blob from Cloudflare, Hetzner or OVH. Same idea as speedtest.net or fast.com, but no ads, no tracking, no JavaScript runtime — just an HTTP GET timed against the bytes received. Useful before you SSH into a remote box on a flaky cellular connection.

    HTTP GET, known-size blob endpoints: Cloudflare / Hetzner / OVH streamed download real Mbps over wall-clock no JS runtime no third-party SDK
  45. 45

    Auto-sync SFTPPower user

    Upload a file once via SFTP and ShellPhone remembers its local path. When you come back from background or tap Re-upload, it diffs against the original and pushes the new bytes in one tap. No background watchers, no extra permissions — only when you ask for it.

    remembers local path diff against original explicit Re-upload action no background watchers no extra OS permissions shares the SFTP-upload pipe
  46. 46

    Multi-host sendNetwork tools

    Broadcast what you type to several SSH tabs at once. Toggle per tab, so you decide which sessions receive the keystrokes. Perfect for apt update && apt upgrade -y across a fleet, or applying the same change to ten servers in parallel without copy-pasting commands ten times.

    per-tab opt-in toggle keystrokes broadcast live each tab keeps own scrollback visual indicator on synced tabs panic-stop on session crash works across clusters of N tabs
  47. 47

    iperf3 clientNetwork tools

    A standard iperf3 client, native implementation of the JSON wire protocol. Measure real TCP / UDP throughput against your own iperf3 server, not against generic Internet speed-test endpoints. Configurable parallel streams, duration, window size and direction (upload, download, bidirectional). The honest number for your real link.

    iperf3 JSON wire protocol TCP + UDP modes parallel streams (-P) upload / download / bidir window size + duration JSON result export
  48. 48

    Code editor for remote filesPower user

    Open any text file from the SFTP browser in a built-in editor with syntax highlighting, code folding, auto-indent, find / replace, go-to-line and line-ending control — then save it straight back over SFTP.

    re_editor + re_highlight ~28 languages fold / auto-indent find / replace · go-to-line LF / CRLF control save back over SFTP
  49. 49

    Zip and unzip over SFTPPower user

    Extract a remote archive, or compress files and folders into .zip or .tar.gz and upload — all from the SFTP browser, without dropping to a shell. Works on a single file, a selection or a whole folder.

    zip + tar.gz .zip + .tar.gz extract / compress file · selection · folder size-guarded no shell needed
  50. 50

    Multitail log viewerPower user

    Follow several remote logs at once in split panes, each a live tail -F with severity highlighting, a per-pane grep filter, pause and clear. Presets for common log paths plus an SFTP picker. Lives as its own terminal tab.

    tail -n 200 -F per pane split panes severity highlight per-pane grep filter 1000-line ring buffer own terminal tab
  51. 51

    Remote SQLite browserPower user

    Point it at a remote .db — type the path, pick it via SFTP, or hit Refresh to detect every database in the folder your terminal is in (even files with no .db extension) — and browse tables, schema and paginated rows over SSH using the server's own sqlite3. A free SQL box runs SELECTs with per-database history and reusable SQL snippets, and asks for confirmation before any write. Its own terminal tab; no download, no extra deps.

    sqlite3 over SSH (no DB download) auto folder tracker (magic-byte detect) tables · schema · 50 rows/page per-database query history global SQL snippets ({{vars}}) SELECT + guarded writes
  52. 52

    SFTP file managementPower user

    Rename files, create folders and set permissions with a visual chmod editor — an rwx grid that shows the live octal — right from the SFTP browser. View file info too. No dropping to a shell.

    rename · mkdir visual chmod (rwx grid) live octal readout file info / stat from the SFTP browser no shell needed
  53. 53

    Search the scrollbackPower user

    Find text across thousands of lines of terminal output, with a live match count and jump-to-next. Stop scrolling by hand looking for that one error line.

    search visible scrollback live match count jump to next / previous case-sensitive toggle highlights in place works per-tab
  54. 54

    Extract URLs from outputPower user

    Pull every link out of the terminal output into a tappable list — open it in the browser or copy it. No more selecting a long URL character by character on a phone.

    scans visible output http/https · ssh:// · ftp de-duplicated list tap to open · copy from the session menu phone-friendly
  55. 55

    Session recordingPower user

    Record a session's output (ANSI-stripped) to a log file and share it. Perfect for audits, change records, and the "what did I just do" moment after a long shift.

    output to log file ANSI escape stripping start / stop per session share or save out audits & change records local file, no upload
  56. 56

    Live latency indicatorPower user

    See the real round-trip time to the server, next to the session uptime and colour-coded. Know instantly whether the lag is the link or the box.

    real RTT to server shown by session uptime colour-coded thresholds updates live spot link vs host lag low overhead
  57. 57

    SSH over HTTP proxyNetwork tools

    Open the SSH connection through an HTTP CONNECT proxy (corkscrew-style), to reach servers from behind a restrictive corporate or HTTP proxy. Optional proxy authentication, with a built-in proxy test before you connect.

    HTTP CONNECT tunnel corkscrew-style optional proxy auth SSHSocket adapter proxy test built in behind corporate proxies
  58. 58

    Remote port forward (-R)Network tools

    Expose a local service through the server — ssh -R style. Open a port on the remote host that tunnels back to a service on your device or LAN. The reverse of a local forward: perfect for sharing a dev server or a quick demo from behind NAT.

    REMOTE forward (-R) remote port → local service reverse of -L GatewayPorts aware IPv4 + IPv6 share from behind NAT
  59. 59

    Theme colour editorFree

    Open any built-in theme and tap any colour — background, foreground, cursor, selection and the full 16-colour ANSI palette — to tune it with a HEX field and RGB sliders. A live terminal preview updates as you drag. Save it as your own named theme; it joins the theme list and rides along with Cloud Sync. No screenshots, no config files.

    tap any colour to edit HEX field + RGB sliders background · cursor · selection full 16-colour ANSI palette live terminal preview save as your own theme
  60. 60

    Active sessions managerFree

    A live list of every open connection, each with a real status dot — connected, reconnecting or dropped, not just a cosmetic colour — and the remote folder it's sitting in, so two shells on the same server are easy to tell apart. Tap one to jump straight to its terminal tab. A sidebar panel on macOS, an inline list under the connection banner on phones.

    live list of open sessions real status dot (not cosmetic) connected · reconnecting · dropped remote folder per session tap to open its tab macOS sidebar · phone inline
  61. 61

    Server monitor — no agentFree

    Open a session and you get the live dashboard of that machine: CPU total and per core, RAM, swap, disk, load, uptime, network throughput and the heaviest processes with their header — plus temperatures, battery, TCP connections and logged-in users wherever the system publishes them. Linux, macOS and Windows servers (PowerShell collector, no WSL needed). Nothing to install on the server: no agent, no daemon, no account — just your SSH access. What cannot be measured is hidden; we never print a made-up number.

    no agent · no daemon · no account CPU total + per core · RAM · swap disk · load · uptime · net throughput top processes with header temps · battery · TCP conns · users Linux · macOS · Windows (PowerShell)
  62. 62

    The Fleet — every server at a glancePower user

    Mark the saved connections that matter and watch them together: on desktop the status and the coloured metrics sit inline on each connection row, on phones they become a card carousel. Twenty-four hours of history are kept ON YOUR DEVICE — never on our servers — and the charts show honest gaps: a minute the app did not measure is drawn as a break, never interpolated. Threshold alerts come with hysteresis, disk strict and CPU lenient, so the warning that matters fires and alarm fatigue does not. Settings has a button to wipe the history.

    inline metrics on the connection row card carousel on phones 24h history stored on device honest gaps · never interpolated threshold alerts with hysteresis disk strict · CPU lenient clear history from Settings
  63. 63

    tmux auto-attachPower user

    Turn it on per connection, with an optional session name, and every login does the attach for you (tmux new -A -s). Paired with the transparent reconnection that is real continuity: walk out of Wi-Fi onto cellular, the socket dies and comes back, and you land in the same session, same panes, same build still running.

    per-connection toggle optional session name tmux new -A -s on login pairs with transparent reconnect survives Wi-Fi ↔ cellular panes and jobs kept alive
  64. 64

    Jump to recent foldersFree

    The terminal keeps track of where you have been on each server — it reads the shell's own working directory (OSC 7), so it learns your cds without you configuring anything. Open the Jump to folder menu, pick one, and the cd is typed for you. No more retyping a forty-character path from memory on a phone keyboard.

    learns your cd history reads the shell CWD (OSC 7) per-server folder list Jump to folder… menu types the cd for you zero configuration
  65. 65

    Drop an image into the promptPower user

    Pick or drag a screenshot and it goes up over SFTP to the server's /tmp with mode 600 — then the quoted remote path lands in your command bar, ready to hand to whatever is going to read it. Built for driving coding agents over SSH: throw in the screen that is failing, point Claude Code at the path, done. The server's own cleanup takes the file away.

    pick or drag a screenshot SFTP upload to /tmp mode 600 · the OS cleans it up quoted remote path in the prompt POSIX servers built for AI agents over SSH
  66. 66

    Dev-server preview in one tapPower user

    The app is running on port 3000 on that box and you want to look at it. One tap: a local tunnel to the remote port comes up and your browser opens on it. No ports to remember, no -L to type, nothing published to the internet — the tunnel is yours and it goes down when you are done.

    one tap from the session local tunnel to the remote port browser opens on localhost nothing exposed to the internet uses the tunnels engine tears down when you are done
  67. 67

    Subnet calculatorNetwork tools

    CIDR, mask and wildcard, network and broadcast, the usable range and the host count — with the binary view and a range expander that turns a start–end IP into the minimum set of CIDRs. Handles /31 and /32 per RFC 3021, entirely offline.

    CIDR ↔ mask ↔ wildcard network · broadcast · usable range host count · binary view range → minimal CIDRs /31 and /32 (RFC 3021) offline, on device
  68. 68

    Timestamp converterNetwork tools

    Unix seconds or milliseconds ↔ human ↔ ISO-8601, shown at once in local time, UTC and a time zone you pick, with a 'now' button. For reading a log line that carries only an epoch — select the number in the terminal and it opens already filled in.

    Unix seconds / milliseconds human ↔ ISO-8601 local · UTC · a zone you pick 'now' button selection → prefilled offline, on device
  69. 69

    UUID / ULID generatorNetwork tools

    UUID v4 and ULID (time-ordered, Crockford base32), in batches of 1 to 100, copy the lot in one tap. Generated with a secure RNG on the device — no id ever touches a server.

    UUID v4 ULID (time-ordered) Crockford base32 batches of 1–100 copy all in one tap secure RNG, offline
  70. 70

    Crontab builder & explainerFree

    Both directions: pick minutes, hours and days and read off the expression, or paste */5 2 * * 1-5 and read what it actually does, in your language. It knows the five fields and the @daily/@reboot shortcuts, and warns about the day-of-month + day-of-week OR trap.

    build ↔ explain five fields + @daily / @reboot plain-language read-out day-of-month/week OR warning in your language offline, on device
  71. 71

    Hashes & checksumsFree

    MD5, SHA-1, SHA-256 and SHA-512 of text or of a local file — streamed, so a 2 GB ISO doesn't blow up memory — with a built-in comparator: paste the expected checksum for a green or red verdict. It tolerates the hash filename format you copy off a release page.

    MD5 · SHA-1 · SHA-256 · SHA-512 text or local file streamed (2 GB ISO is fine) paste-and-compare verdict tolerates `hash filename` offline, on device
  72. 72

    Checksum of a remote filePower user

    One button inside the free hashes tool computes the checksum of a file on the server, through your active SSH session (sha256sum, falling back to shasum), and compares it with a local file or a pasted value. The 'did the upload arrive intact?' question, answered without leaving the app.

    runs on your SSH session sha256sum → shasum fallback compare vs local or pasted no download needed upload-integrity check lives in the hashes tool
  73. 73

    Base64 & URL encodersFree

    Text ↔ Base64 both ways (invalid input is said, never guessed) and percent-encoding for a single component or a whole URL. It runs on the device, so the thing you are decoding never lands in someone else's logs.

    text ↔ Base64 invalid input is flagged URL percent-encode one component or whole URL nothing uploaded offline, on device
  74. 74

    Password & token generatorFree

    A length slider, character sets (upper, lower, digits, symbols) and an optional 'no ambiguous characters' (0O1lI|). Built on a secure RNG, copy in one tap. Nothing is stored — we keep no history of your secrets.

    length slider upper / lower / digits / symbols no-ambiguous option (0O1lI|) secure RNG copy in one tap nothing stored
  75. 75

    MAC vendor lookupFree

    Who made this network card? The IEEE OUI database ships inside the app (trimmed, ~1 MB), so it answers with no Internet at all — and every hit from the subnet scanner links straight to it. Select a MAC in the terminal and it opens filled in.

    IEEE OUI database, bundled ~1 MB, trimmed works fully offline linked from the subnet scanner selection → prefilled nothing leaves the device
  76. 76

    JWT decoderPower user

    Paste a token and read its header, its claims and its dates (exp/iat/nbf) in human form, with a clear expired-or-valid verdict. It says out loud that it decodes, it does not verify the signature — and everything stays on the device: a JWT is a credential, it has no business travelling to jwt.io.

    header · claims · exp/iat/nbf human-readable dates expired / valid verdict decodes, does not authenticate selection → prefilled nothing leaves the device
  77. 77

    Format converter — JSON/YAML/TOML/XMLPower user

    JSON ↔ YAML ↔ TOML ↔ XML with input auto-detection, plus prettify and minify for JSON. The same tool on phone, tablet and desktop — and none of it round-trips through a website.

    JSON ↔ YAML ↔ TOML ↔ XML input auto-detection prettify / minify JSON same on phone/tablet/desktop nothing uploaded offline, on device
  78. 78

    Connection groupsFree

    Sort your saved connections into folders. The list becomes collapsible sections, each with a count, and the editor gains a 'Group' field with autocomplete, so a server drops into a folder — existing or new — as you save it. It tames a long list, and it costs nothing.

    folders for saved connections collapsible sections with a count 'Group' field with autocomplete existing or new folder organizes what you have free
  79. 79

    Multiexec — type once, run everywherePower user

    Pick several open SSH sessions and everything you type goes to all of them at once. On desktop and iPad they sit in a mosaic — each pane named, each with an × to drop it, and a mode bar always in view to leave. On the phone a persistent 'sending to N sessions' banner keeps you honest. Add or remove machines live, with a warning before you paste several lines.

    type once → every chosen session mosaic on desktop / iPad name + × per pane · mode bar phone: 'sending to N' banner add / remove machines live multi-line paste warning

Tech specs

Under the hood.

Standard SSH-2 protocols, native crypto APIs and the platform's secure storage. Nothing exotic, nothing rolled by hand.

SSH

  • SSH-2 (RFC 4251-4254)
  • zlib@openssh compression
  • keepalive + auto-reconnect
  • LOCAL · SOCKS5 · ProxyJump
  • Telnet (legacy fallback)
  • multi-session FDs

Auth

  • ed25519 (preferred)
  • RSA 2048-4096 · ECDSA p256/384/521
  • password · keyboard-interactive
  • TOFU host-key trust
  • in-memory pubkey agent
  • strict PEM parse on import

Storage

  • iOS / iPadOS / macOS: Keychain
  • Android: encrypted prefs
  • biometric-gated access
  • local DB, encrypted
  • optional iCloud / Google sync
  • no telemetry · no SDKs

Terminal

  • xterm-256color
  • true color (24-bit RGB)
  • UTF-8 + combining
  • mouse passthrough (SGR/X10)
  • SIGWINCH on rotate
  • scrollback 10k–100k

SFTP

  • SFTP v3 over SSH
  • browse · sort · search
  • pause / resume transfers
  • iOS Files / macOS Finder / SAF
  • text + image preview
  • conflict-aware overwrite

Platforms

  • iOS 13+ (iPhone)
  • iPadOS 13+ (iPad · multi-window)
  • macOS 11+ (menu bar · shortcuts)
  • Android 7+ (API 24+ · phones & tablets)
  • native UX per platform
  • 9 languages built in

Pricing

Free, plus annual subscriptions from €1.99/year.

The whole app is usable for free. Three optional annual subscriptions unlock power-user features — auto-renewing every year, cancel anytime in the App Store / Play Store with no penalty.

Universal Purchase. Subscribe once on any Apple device and the unlock follows you on iPhone, iPad and Mac under the same Apple ID. On Android, the same Google Play account works across all your devices.

The whole app

Free

€0 forever
  • Quick Connect (no signup)
  • Multi-tab terminal · true colour · UTF-8
  • Active sessions manager (status + remote folder)
  • Server monitor — CPU, RAM, disk and processes of any Linux, macOS or Windows server, live, with no agent installed
  • Jump to recent folders — the terminal learns your cds and types the jump
  • SFTP downloads
  • Run tunnels & snippets (LOCAL + SOCKS5)
  • Command history search
  • Natural-language snippet search (cht.sh)
  • SSH key import (encrypted)
  • Host-key trust (TOFU)
  • App lock with biometrics
  • Termux-style keyboard · 5 themes · 9 languages
  • Persist theme, font & language across launches
  • Hardware keyboard shortcuts (⌘T, ⌘W, ⌘1–⌘9, ⌘K, ⌘/, ⌘,)
  • iTerm2 .itermcolors theme import
  • Theme colour editor — make your own theme
  • Multi-window on iPad (Stage Manager)
  • Cloud Sync via iCloud / Google Drive — end-to-end encrypted with your passphrase
  • Tools: chmod calculator · Ed25519 SSH key generator · bandwidth test

Everything you need to actually SSH from your phone — no trial, no watermark, no tracking, no ads.

Annual · €1.99/year

Power user

€1.99 / year
  • Save your SSH connections (host, port, user, keys) — reconnect with one tap
  • Bulk-import from ~/.ssh/config — read automatically from ~/.ssh on macOS (no file picking)
  • Strict SSH key validation when saving (clear errors before the server gets to)
  • Save SSH tunnels — LOCAL forward (-L) + SOCKS5 proxy (-D) with on/off toggle
  • Save snippets with {{variables}} — prompted on insert
  • SFTP file uploads (downloads stay free)
  • ProxyJump / bastion host (ssh -J style)
  • Telnet protocol (legacy gear: routers, switches)
  • Wi-Fi triggers — auto-suggest a connection by SSID
  • Pubkey agent — decrypt your key once per app session
  • Macros — saved command sequences with optional delays
  • Auto-sync SFTP — re-upload a file with one tap when it changes locally
  • Built-in code editor for remote files — syntax highlighting, code folding, find and replace, line endings
  • Zip and unzip over SFTP — extract archives or compress files and folders to .zip / .tar.gz
  • Multitail log viewer — follow several remote logs at once in split panes (tail -F), with highlight and filter
  • Remote SQLite browser — tables, schema and paginated rows over SSH, with a folder tracker, per-database history and reusable SQL snippets
  • SFTP file management — rename, create folders and a visual chmod editor (rwx grid with live octal), right from the browser
  • Search the scrollback — find text across thousands of lines of terminal output, with live match count
  • Extract URLs from output — pull every link out of the terminal into a tappable list (open or copy)
  • Session recording — record a session's output (ANSI-stripped) to a log file and share it
  • Live latency indicator — real RTT to the server next to the session uptime, colour-coded
  • The Fleet — all your servers at a glance, 24h history stored on your device, threshold alerts with hysteresis
  • tmux auto-attach per connection — reconnect and re-attach, continuity across network changes
  • Insert an image — upload a screenshot to the server's /tmp over SFTP and get the path in your prompt (great for AI agents)
  • Dev-server preview — one tap opens a local tunnel to the remote port and your browser on it
  • Universal Purchase — same subscription on all your Apple devices

For sysadmins and devs who use SSH every day. Same price as the bar's coffee, once a year.

Annual · €1.99/year

Network tools

€1.99 / year
  • Wake on LAN — boot a PC / NAS / server by its MAC address
  • TCP Ping — latency, jitter and loss towards a TCP service
  • DNS lookup — A, AAAA, MX, TXT, NS, CNAME, SOA, PTR, with configurable resolver (Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9, custom)
  • Reverse DNS — IP → hostname (auto-builds the in-addr.arpa chain when you pick PTR + IPv4)
  • Whois — domain or IP owner lookup, with IANA bootstrap
  • Subnet scanner — discover live hosts in a CIDR / range / single IP
  • TCP port scanner — common presets or custom (e.g. 22, 80-90, 443)
  • TLS cert inspector — subject, issuer, fingerprints, expiry alert under 30 days
  • HTTP / curl tester — request builder + response viewer (Postman in your pocket)
  • iperf3 client — real TCP / UDP throughput against your own iperf3 server
  • Multi-host send — broadcast keystrokes to several SSH tabs at once
  • SSH over HTTP CONNECT proxy — reach servers from behind a restrictive corporate proxy (corkscrew-style)
  • Remote port forward (ssh -R) — expose a local service on a remote port
  • Universal Purchase — same subscription on all your Apple devices

For sysadmins, network engineers and ethical hackers — replaces opening the laptop to scan, ping or check DNS.

Annual · €3.99/year

Remote desktop

€3.99 / year
  • VNC viewer (RFC 6143) — TightVNC, RealVNC, x11vnc, macOS Screen Sharing, Ubuntu Remote Desktop, Raspberry Pi VNC
  • Pinch-zoom up to 10× and drag-pan a 4K screen from your iPhone
  • Raw + CopyRect encodings, auto-negotiated — best over LAN or fast links
  • Password support (standard VNC Authentication)
  • Universal Purchase — same subscription on all your Apple devices

Visual access to a server when SSH isn't enough — start a GUI, verify an installer, debug a graphical issue.

Best value · all-in-one · €4.99/year

All-in-one — everything in one go

€4.99 / year — saves ~37% vs €7.97 separately

Invite friends and your renewal drops even more — €3.99/year with 3 subscribed friends, €0.99/year with 5.

  • Power user — saved connections, tunnels, snippets, SFTP upload, auto-sync SFTP, ProxyJump, Telnet, Wi-Fi triggers, pubkey agent, macros, code editor, zip/unzip, Multitail, SQLite browser
  • Network tools — Wake-on-LAN, TCP ping, DNS, Whois, subnet/port scanners, TLS inspector, HTTP tester, iperf3, HTTP CONNECT proxy, multi-host send
  • Remote desktop — VNC viewer for TightVNC, RealVNC, x11vnc, macOS, Linux, Raspberry Pi
  • Universal Purchase — same subscription on all your Apple devices

If you'll use more than one bundle, this is the obvious choice — for sysadmins, DevOps and network pentesters.

Privacy

No cloud. No tracking. No nonsense.

Your servers, your keys, your traffic. The app talks to your machines and to nobody else.

  • Storage Connections, snippets and tunnels live on your device. Optional sync to your own iCloud or Google account, off by default. There is no account on our end.
  • Keys Stored in the OS keychain. Unlocked with biometrics. Never copied to the cloud.
  • Network The app speaks SSH to your servers. Other outbound traffic: receipt validation when you buy a pack, and — only if you enable it — sync to your own iCloud or Google account.
  • Telemetry None. No analytics SDK, no crash reporter that ships data home.

FAQ

Frequently asked questions

Is ShellPhone free?

Yes — the full SSH/SFTP client is free forever. Optional annual subscriptions unlock power-user bundles.

Do I need an account?

No. There's no sign-up and no backend that stores your identity. Keys live in your device's keychain.

What do the subscriptions include?

Power user (€1.99/yr), Network tools (€1.99/yr) and Remote desktop (€3.99/yr), or the All-in-one bundle for €4.99/year (~37% off vs buying the three separately).

Do you collect my data?

No telemetry, no analytics, no crash reporting. The internet is used only for SSH, optional anonymous snippet search, your own cloud sync, and signed receipt validation.

Do I have to install anything on my server for the monitor?

No. Nothing. It uses your existing SSH access — no agent, no daemon, no account. If the system does not publish a metric, we hide it instead of inventing a number.

Does it work on iPad and Mac?

Yes. On Apple it's a Universal Purchase — one subscription unlocks iPhone, iPad and Mac with the same Apple ID.

Can I cancel anytime?

Yes, from your Apple ID / Google Play settings. You keep the bundle until the end of the paid period.

Get it

Ready when you are.

App Store Google Play Microsoft Store

No account, no email. On the App Store for iPhone, iPad & Mac — and on Google Play for Android. On Windows: get it from the Microsoft Store — or grab the direct installer.