The zero-backend SSH client and server command center for iPhone, iPad & Mac.
Your servers. Your keys. Your device. Nothing in between.
A desktop-grade terminal emulator with 20+ service dashboards — Docker, databases, security tools, and more — built native with SwiftUI for iPhone, iPad, and Mac. Zero backend servers. Zero data collection. Your credentials never leave your device.
Free, with unlimited SSH sessions. Pro from $1.99/month.
Your servers. Your keys. Your device.
Everything you need in one app
SSH, SFTP, tunneling, and more — everything you need to manage your servers.
SSH Terminal
XTerm-256 colors with fullscreen mode, gesture controls — swipe, pinch zoom, long-press paste. 12+ themes included.
SFTP Transfer
Browse, upload, and download files with real-time progress tracking, resumable transfers, and two-way recursive folder sync that flags conflicts instead of guessing.
Port Forwarding
Local, remote, and dynamic SOCKS tunnels with per-connection rules and live toggle.
Command Snippets
Save, tag, and reuse commands with autocomplete powered by remote server completions.
Session Logging
Automatically capture every session with timestamps. Search, review, and export logs for auditing.
iCloud Sync
Seamless sync across iPhone, iPad, and Mac — your servers, recent connections, and open sessions follow you everywhere. Handoff a session mid-command and pick up right where you left off.
On-Device AI
AI-powered command composer with voice input, multi-step task plans you review and approve before anything runs, dangerous-command guardrail, secret redaction, plain-English explanations, and a suggested-fix pill that offers a one-tap remedy when a command fails — all running on-device via Apple Intelligence. Your terminal data never leaves your device.
Your Server in the Files App
Pick the folders you want — not the whole filesystem — and each one appears as a location in the Files app. Open, edit, and save remote files from any app over SFTP, no sync folder and no third-party cloud. iPhone and iPad only.
Server Overview & Apps
Real-time health metrics. Auto-detect system services and installed tools on Linux servers, then manage 20+ of them from dedicated dashboards — Docker, PM2, Redis, PostgreSQL, MySQL, MongoDB, Caddy, Traefik, Grafana, Prometheus, Vault, Fail2Ban, WireGuard, Certbot, MinIO, Samba, Firewall, and more.
SSH Key Manager
Generate ed25519, P-256, RSA, or hardware-backed Secure Enclave keys on-device, name them, and pick them per server. Private keys never leave the Keychain — Secure Enclave keys never leave the chip.
Widgets & Shortcuts
Home Screen widgets for quick-connect and last session status, Siri/Shortcuts actions to connect or run a snippet, and a Focus filter to hide GateShell during Do Not Disturb.
Live Activity
See your connection status right on the Lock Screen and Dynamic Island, with a background grace window that flushes session data and catches a dropped connection before it goes stale.
In-App Code Editor
Browse the remote project tree, edit files with on-device syntax highlighting and git status badges, and open a self-hosted code-server instance right inside GateShell.
24+ integrations on the way
We're adding support for every tool you use. Each gets its own management dashboard inside GateShell.
A terminal that feels native
Full XTerm-256 color support with an interactive PTY shell. Swipe for arrow keys, pinch to zoom, long-press to paste. The accessory bar gives you Esc, Tab, Ctrl, and special characters — right at your fingertips.
Browse and transfer files securely
Navigate remote file systems with a familiar file browser. Upload from your Camera Roll or Files app, download with progress tracking, and share via the iOS share sheet. All transfers happen over your encrypted SSH connection.
Use your own server as your cloud drive
Already paying for a VPS? That disk can be the drive you open from your iPhone. Pick the folders you want to expose and each one shows up under Locations in the Files app, so any app can open, edit, and save straight to your server over SFTP — no extra storage plan, no sync folder eating your device, and no third-party cloud holding your files. You choose the folders, so only those are reachable. iPhone and iPad only.
Tunnel anything, anywhere
Set up local, remote, and dynamic SOCKS tunnels with a few taps. Create multiple rules per connection with custom labels, toggle them live without disconnecting, and persist them for next time.
Save commands, run everywhere
Build a library of reusable commands with tags for fast lookup. Autocomplete pulls from your snippet library, server history, and live remote completions via compgen. Run the same snippet across multiple servers simultaneously.
Every session, fully recorded
Automatically capture complete session logs with timestamps. Review what happened during any connection, export logs for auditing or compliance, and search across your session history by server or content.
One dashboard to rule them all
Connect and get an instant health snapshot — CPU, memory, swap, disk, load averages, and uptime. On Linux servers, GateShell also auto-detects what's actually running and gives you 20+ dedicated management dashboards — Docker, PM2; reverse proxies like Nginx, Caddy, and Traefik — test and reload configs, manage enabled sites; databases like Redis, PostgreSQL, MySQL, and MongoDB; observability with Grafana and Prometheus; file sharing with Samba — shares, connected clients, and open files, with reload and restart; and security tools like Fail2Ban, WireGuard, Certbot, Vault, and the firewall itself — add/remove rules, enable or disable it, or allow your current IP with one tap. Tap any card for full management — restart a container, kill a process, or inspect a database.
The toolkit competitors don't have
SSL certificate expiring? GateShell flags it before your users notice. A runaway process eating CPU? Kill it from your phone. Disk filling up? A guided cleanup wizard finds what's safe to remove. Need a backup before a risky change? Snapshot the database first. Migrating servers? Compare two side-by-side and see exactly what's different.
Your terminal, now thinking
Speak or type a command in plain English — GateShell composes it for you. Before any dangerous command runs, the guardrail warns you with a risk classification. PII and secrets are automatically redacted. All AI runs locally on Apple Intelligence. Nothing is ever sent to a cloud server.
Zero servers. Zero compromise.
Unlike other SSH clients, GateShell has no backend. Your credentials never touch our infrastructure. Everything runs on your device using Apple-native frameworks.
Up and running in 30 seconds
No accounts, no sign-ups, no configuration files.
Download
Get GateShell free from the App Store. Works on iPhone, iPad, and Mac.
Add a server
Enter your host, username, and credentials. Or use Quick Connect for one-tap access.
Connect
Tap to connect. You're in a full terminal session — directly from your device to your server.
One app, every Apple device
A universal app built with SwiftUI — optimized for each platform, synced via iCloud.
iPhone
Full terminal with gestures, swipe arrows, and pinch zoom
iPad
Split view, Stage Manager support, and keyboard shortcuts
Mac
Native macOS app with menu bar, Touch Bar, and trackpad support
Requires iOS 17+ / macOS 15+ — AI features require iOS 26+ with Apple Intelligence
See it in action
A real SSH session, right from your iPhone or Mac.
Security without compromise
Your credentials are protected by the same hardware encryption that secures Apple Pay and Face ID.
Apple Keychain
All passwords and SSH keys stored in the hardware-encrypted Keychain. Never in plaintext.
Biometric Lock
Require Face ID or Touch ID to open GateShell. Your servers stay locked even if your phone isn't.
Direct Connection
Your SSH session goes straight from your device to your server. No relay, no middleman, no proxy.
iCloud E2E Encryption
Sync data is encrypted end-to-end by iCloud. Not even Apple can read your server configs.
Zero Data Collection
No analytics, no tracking, no telemetry. We don't know who you are or what servers you connect to.
No Backend Servers
GateShell runs entirely on your device. There's no server to breach because there is no server.
Verified Host Keys
Trust-on-first-use pinning verifies your server's identity on every connect and warns you the instant a host key changes — stopping man-in-the-middle attacks.
Simple, honest pricing
Start free with unlimited SSH sessions. Upgrade to Pro for less than $1/month — unlimited servers, SFTP, port forwarding, AI features, and more.
Why GateShell?
Designed for developers who care about privacy, performance, and owning their tools.
Zero Backend
No servers, no relays, no middleman. Your credentials stay on your device — always.
On-Device AI
Secret redaction, command guardrail, and plain-English explanations — powered by Apple Intelligence, running entirely on-device.
Apple Native
Built with SwiftUI. Keychain encryption, Face ID, iCloud sync, and every Apple platform.
Ready to take control of your servers?
Download GateShell for free. No account required. No credit card. Just open and connect.
Free tier includes SSH terminal, 1 saved server, and Quick Connect. No limits on session time.
Frequently asked questions
Yes. GateShell has zero backend servers. Your passwords and SSH private keys are stored exclusively in Apple's Keychain (hardware-encrypted, and may sync via your iCloud Keychain), while your server configurations are stored on-device using SwiftData and optionally synced via your private iCloud database. We never see, store, or transmit your credentials.
If you're a Pro subscriber, your servers and settings sync automatically via iCloud. Sign in on your new device with the same Apple ID and everything is right where you left it. Free tier users can use Quick Connect for ad-hoc access.
Yes! GateShell is a universal app that runs natively on iPhone, iPad, and Mac, built with SwiftUI and optimized for each platform. One feature is iOS-only: exposing server folders as locations in the Files app. On Mac, use the built-in SFTP browser for the same job.
Yes. Pick the folders you want to expose — /var/www or /home/deploy, say — and each appears as a location under Browse in the Files app on iPhone and iPad. Any app can then open, edit, and save those remote files directly over SFTP, with no sync folder on your device and no third-party cloud in the path. Only the folders you choose are reachable, not the whole filesystem. This is iPhone and iPad only; on Mac, use the built-in SFTP browser.
GateShell connects over standard SSH, so the terminal, SFTP, and port forwarding work with any SSH-enabled host, regardless of OS. The 20+ platform dashboards — Docker, databases, reverse proxies, security tools, and the other server-management features — are built around Linux tooling (systemctl, apt/dnf, ufw, and similar), which isn't present on Windows, macOS, or BSD hosts. Those dashboards are Linux-only for now.
The free tier includes full SSH terminal access with unlimited session time, 1 saved server, Quick Connect for ad-hoc connections, command history suggestions, the default Dark theme, server health checks, and biometric lock (Face ID / Touch ID).
GateShell Pro is $1.99/month or $19.99/year ($1.67/month). It unlocks unlimited servers, SFTP, port forwarding, command snippets, all 12+ themes, proxy support, iCloud sync, session logging, 20+ service dashboards (Docker, databases, reverse proxies, security tools, observability, and more), on-device AI, and more.
GateShell is a full-featured SSH client for iPhone and iPad offering a terminal emulator with XTerm-256 colors, SFTP file transfer, port forwarding, and on-device AI — all with zero backend servers. It's built native with SwiftUI, stores credentials in the Apple Keychain, and syncs via iCloud with end-to-end encryption.
GateShell is a privacy-first alternative to cloud-based SSH clients. Unlike services that run backend infrastructure, GateShell has zero servers — your credentials stay on your device, your connections are direct, and your data is never collected. It offers a free tier with unlimited SSH sessions, and Pro is $1.99/month or $19.99/year — a fraction of what subscription SSH clients charge.
The core difference is where your credentials live. Termius stores and syncs your SSH keys and passwords through its own cloud vault on paid plans (Pro is $10/month, billed annually as $120/year). GateShell keeps everything in your device's Apple Keychain and syncs only through your personal, end-to-end-encrypted iCloud — we operate no servers and never see your data. GateShell also has a free tier with unlimited SSH session time, and Pro is $19.99/year.
Yes. Blink Shell is a powerful keyboard- and Mosh-focused terminal offered as a $19.99/year subscription with a two-week trial. GateShell Pro is the same $19.99/year, so this isn't a price decision — it's a difference in approach. GateShell is GUI-first: a visual SFTP file browser, a saved server list, 20+ service dashboards for managing what's running on the server, remote folders in the iOS Files app, and on-device AI. It also has a permanently free tier with unlimited SSH session time rather than a two-week trial, so you can run it long-term at no cost before deciding.
No. Your SSH private keys and passwords are stored exclusively in your device's Apple Keychain, which is hardware-encrypted. If you enable sync, they travel only through your own iCloud Keychain with end-to-end encryption that not even Apple can read. Unlike SSH clients that sync through a vendor's cloud vault, GateShell operates no backend servers and never transmits or stores your credentials.
Download GateShell from the App Store, add your server (hostname, port, auth method), and tap to connect. GateShell is a universal app optimized for iPad with Split View, Stage Manager, and keyboard shortcut support — giving you a full desktop-grade terminal experience.
Yes. GateShell provides a full interactive PTY shell on iOS that works seamlessly with tmux. Connect to your server, start a tmux session, and pick it up later from any device — including your Mac or iPad via GateShell's universal app and iCloud sync.
Team collaboration features — including shared vaults, live terminal sharing, and role-based access — are on our roadmap. They'll be built on Apple's native frameworks (CloudKit, SharePlay) with zero backend servers, just like the rest of GateShell.
Built by Hefty Innovations
GateShell is built by Hefty Innovations, an independent software studio based in Faridabad, India, building software since 2014. We made GateShell zero-backend for one reason: your server credentials are among the most sensitive data you own, and no one else should hold them — no servers, no telemetry, no accounts, by architecture rather than by policy.
Learn more about Hefty Innovations