SSH Manager Pro: SSH & SFTP

If you manage homelabs or remote servers from Android, you've likely hit the platform's biggest limitation: Android only allows one active VPN service at a time. Turning on Tailscale kicks off your work or privacy VPN, and vice versa.

SSH Manager Pro is a full-featured SSH client built around one idea: your credentials are yours. Keys and passwords are encrypted with AES-256-GCM using the Android Keystore, protected by your fingerprint or PIN, and never written to Android's cloud backups.

REAL TERMINAL
• Hardware-accelerated terminal with full xterm-256color support
• vim, less, htop and man draw, scroll and exit cleanly, as on a desktop
• Long-press to select and copy any part of your session output
• Multiple concurrent sessions with quick switching
• Automatic keepalive while you work; idle sessions disconnect after a limit you choose (off if you prefer), with a warning first
• Searchable session history

SECURE BY DEFAULT
• Biometric or PIN unlock, re-locked every time you leave the app
• Host key verification with trust-on-first-use pinning — you're warned if a server's fingerprint ever changes
• Hardware-backed keys generated inside the secure element, plus YubiKey over NFC
• SSH keys encrypted at rest, generated or imported on device
• Password, public-key, and cloud IAM authentication

CLOUD WITHOUT SSH KEYS
• AWS: Connect to EC2 instances using EC2 Instance Connect — fresh keys minted per session and discarded after a minute
• Google Cloud: Reach Compute Engine VMs with no public IP through IAP and OS Login without storing service account keys
• Browser Sign-in: Sign in via browser with your AWS or Google account using OAuth 2.0 PKCE. Zero static secrets on device
• Multiple cloud profiles: Keep separate AWS and Google Cloud accounts side by side with independent credentials

TAILSCALE & TUNNELS
• Embedded Tailscale node — reach servers behind NAT without a second VPN app
• Point it at Headscale or your own control server
• Jump host / bastion support for private VPCs
• Reach hosts behind Cloudflare Access with no open SSH port

AI COPILOT
• Describe what you want in plain English and get the command
• Works fully offline with an on-device rule engine — no account, no API key
• Optionally connect Google Gemini or OpenRouter for deeper help
• Destructive commands are flagged before they run, and nothing executes until you confirm it

SHARE HOSTS BY QR
• Show any host as a QR code and have a teammate scan it
• Connection details only — passwords and keys are never included
• Scan straight into the Add Host form

COMMAND SNIPPETS
• 74 commands built in, grouped by Disk, Processes, Network, Containers, Performance and SSH keys
• Save your own and launch them on any host
• Search across titles and commands instantly

ENCRYPTED CLOUD BACKUP (Pro)
• Back up hosts, saved passwords, private keys, jump hosts and snippets
• Restore onto a new phone without re-entering a single credential
• Zero-knowledge: encrypted on your device with a passphrase only you know before upload

PRO SUBSCRIPTION
Multi-cloud profiles, Google Cloud IAP, Cloudflare Access tunnels, jump hosts, cloud backup and live AI models are part of Pro. Everything else — SSH, Tailscale, terminal, snippets, AWS Instance Connect and the offline AI copilot — is free and unlimited.

PRIVACY
No analytics. No advertising. No tracking of any kind. The app requests five permissions: internet and network state to connect, biometric access to unlock your vault, and camera solely for scanning host-sharing QR codes. Full policy:
https://sshmanagerpro.app/privacy.html

PLATFORM
Android 8.0 or later, on 64-bit devices. Full tablet support: optimized for phones, foldables, and 7-inch & 10-inch tablets with adaptive multi-pane layouts. iOS support is planned and in active development.