The zero-backend SSH client for iPhone, iPad & Mac
Your servers. Your keys. Your device. Nothing in between.
A desktop-grade terminal emulator with 20+ service dashboards — Docker, databases, security tools, and more — built native with SwiftUI for iPhone, iPad, and Mac. Zero backend servers. Zero data collection. Your credentials never leave your device.
Free, with unlimited SSH sessions. Pro from $1.99/month.
Your servers. Your keys. Your device.
Everything you need in one app
SSH, SFTP, tunneling, and more — everything you need to manage your servers.
Mosh That Keeps Roaming
Bootstrap over verified SSH, then switch to an encrypted UDP terminal that survives Wi-Fi and cellular changes. The GateShell Go binary can provide the server, with standard mosh-server compatibility and automatic SSH fallback.
Server Security Assistant
Scan updates, public listeners, SSH policy, firewall, backups, and TLS certificates. Review evidence for free, then use Pro guided fixes with explicit approval and an automatic after-state rescan.
Bring Your Own Coding Agent
Detect Claude Code, Codex, and Gemini CLI on your server. Pick a project, start or resume an agent in GateShell's live terminal, and interrupt it anytime.
See What You Just Built
Your agent starts a dev server; App Preview finds the port it is listening on, opens a loopback tunnel over the SSH session you already have, and renders the app in the browser. No public exposure, no tunnelling service, no redeploy.
SSH Terminal
Run 2-column, 2-row, or 4-pane sessions with optional input broadcast. Choose from 32 themes, three bundled Nerd Fonts, imported fonts, and named custom keyboard layouts on iPhone and iPad.
Git Diff Review
Review staged and unstaged changes file by file before you commit or deploy. Read clear, line-numbered hunks directly from your server over SSH.
Zero servers. Zero compromise.
Unlike other SSH clients, GateShell has no backend. Your credentials never touch our infrastructure. Everything runs on your device using Apple-native frameworks.
Up and running in 30 seconds
No accounts, no sign-ups, no configuration files.
Download
Get GateShell free from the App Store. Works on iPhone, iPad, and Mac.
Add a server
Enter your host, username, and credentials. Or use Quick Connect for one-tap access.
Connect
Tap to connect. You're in a full terminal session — directly from your device to your server.
Security without compromise
Your credentials are protected by the same hardware encryption that secures Apple Pay and Face ID.
Apple Keychain
All passwords and SSH keys stored in the hardware-encrypted Keychain. Never in plaintext.
Biometric Lock
Require Face ID or Touch ID to open GateShell. Your servers stay locked even if your phone isn't.
Direct Connection
Your SSH session goes straight from your device to your server. No relay, no middleman, no proxy.
iCloud E2E Encryption
Sync data is encrypted end-to-end by iCloud. Not even Apple can read your server configs.
Zero Data Collection
No analytics, no tracking, no telemetry. We don't know who you are or what servers you connect to.
No Backend Servers
GateShell runs entirely on your device. There's no server to breach because there is no server.
Verified Host Keys
Trust-on-first-use pinning verifies your server's identity on every connect and warns you the instant a host key changes — stopping man-in-the-middle attacks.
Simple, honest pricing
Start free with unlimited SSH sessions. Upgrade to Pro for $1.67 a month billed yearly — unlimited servers, SFTP, port forwarding, AI features, and more.
Why GateShell?
Designed for developers who care about privacy, performance, and owning their tools.
Zero Backend
No servers, no relays, no middleman. Your credentials stay on your device — always.
On-Device AI
Secret redaction, command guardrail, and plain-English explanations — powered by Apple Intelligence, running entirely on-device.
Apple Native
Built with SwiftUI. Keychain encryption, Face ID, iCloud sync, and every Apple platform.
Frequently asked questions
Yes. Nothing in GateShell connects through us — with one narrow, opt-in exception for delivering server alerts, covered below. Your passwords and SSH private keys are stored exclusively in Apple's Keychain (hardware-encrypted, and may sync via your iCloud Keychain), while your server configurations are stored on-device using SwiftData and optionally synced via your private iCloud database. We never see, store, or transmit your credentials.
If you're a Pro subscriber, your servers and settings sync automatically via iCloud. Sign in on your new device with the same Apple ID and everything is right where you left it. Free tier users can use Quick Connect for ad-hoc access.
Yes! GateShell is a universal app that runs natively on iPhone, iPad, and Mac, built with SwiftUI and optimized for each platform. One feature is iOS-only: exposing server folders as locations in the Files app. On Mac, use the built-in SFTP browser for the same job.
Yes. Pick the folders you want to expose — /var/www or /home/deploy, say — and each appears as a location under Browse in the Files app on iPhone and iPad. Any app can then open, edit, and save those remote files directly over SFTP, with no sync folder on your device and no third-party cloud in the path. Only the folders you choose are reachable, not the whole filesystem. This is iPhone and iPad only; on Mac, use the built-in SFTP browser.
GateShell connects over standard SSH, so the terminal, SFTP, and port forwarding work with any SSH-enabled host, regardless of OS. The 20+ platform dashboards — Docker, databases, reverse proxies, security tools, and the other server-management features — are built around Linux tooling (systemctl, apt/dnf, ufw, and similar), which isn't present on Windows, macOS, or BSD hosts. Those dashboards are Linux-only for now.
The free tier includes full SSH terminal access with unlimited session time, 1 saved server, Quick Connect for ad-hoc connections, command history suggestions, the default Dark theme, server health checks, and biometric lock (Face ID / Touch ID).
GateShell Pro is $1.99/month or $19.99/year ($1.67/month). It unlocks unlimited servers, native Mosh, 2- and 4-pane terminals with input broadcast, SFTP, port forwarding, Git diff review, remote coding workspaces for installed Claude Code, Codex, and Gemini CLIs, guided Security Assistant fixes, snippet variables and multi-host execution, all 32 themes, Nerd and custom fonts, named keyboard layouts on iPhone and iPad, proxy support, iCloud sync, session logging, 20+ service dashboards, on-device AI, and more. The Security Assistant's read-only findings remain available for free.
GateShell is a full-featured SSH client for iPhone and iPad offering a terminal emulator with XTerm-256 colors, SFTP file transfer, port forwarding, and on-device AI — all with zero backend servers. It's built native with SwiftUI, stores credentials in the Apple Keychain, and syncs via iCloud with end-to-end encryption.
GateShell is a privacy-first alternative to cloud-based SSH clients. Unlike services that run backend infrastructure, GateShell has zero servers — your credentials stay on your device, your connections are direct, and your data is never collected. It offers a free tier with unlimited SSH sessions, and Pro is $1.99/month or $19.99/year — a fraction of what subscription SSH clients charge.
The core difference is where your credentials live. Termius stores and syncs your SSH keys and passwords through its own cloud vault on paid plans (Pro is $9.99/month, billed annually as $119.99/year). GateShell keeps everything in your device's Apple Keychain and syncs only through your personal, end-to-end-encrypted iCloud — we operate no servers and never see your data. GateShell also has a free tier with unlimited SSH session time, and Pro is $19.99/year.
Yes. Both apps support Mosh sessions that survive network changes. Blink remains a mature, open-source, keyboard-focused terminal. GateShell adds a native Mac app, a visual SFTP browser, 20+ server dashboards, remote folders in the iOS Files app, and on-device AI. GateShell also has a permanently free SSH tier; Mosh is included with Pro.
Install the optional GateShell Go agent or a compatible standard mosh-server, then allow UDP ports 60000–61000 through the host and network firewall. GateShell authenticates over your verified SSH connection, checks the encrypted UDP handshake before switching transports, and continues over SSH with a clear message if Mosh is unavailable or UDP is blocked.
No. Your SSH private keys and passwords are stored exclusively in your device's Apple Keychain, which is hardware-encrypted. If you enable sync, they travel only through your own iCloud Keychain with end-to-end encryption that not even Apple can read. Unlike SSH clients that sync through a vendor's cloud vault, GateShell runs no credential vault of any kind and never transmits or stores your credentials.
Yes, if you install the optional open-source agent on the server itself. It watches the machine locally and pushes to your device when a service stops, a disk crosses its threshold, or a cron job fails — with the app closed. It also keeps up to ninety days of metric history on your own disk, so you can see what a server was doing last Tuesday rather than only right now. Without the agent, GateShell works exactly as it always has, live over your direct SSH connection.
Only for this. Apple requires every push notification to be signed with the developer's key, so the agent on your server cannot hand one to Apple directly — it forwards the notification through a small relay we run, which signs it and passes it on. That relay keeps nothing: no device-token registry, no account, no notification history, and its delivery logs record neither your server names nor the alert text. Your credentials, terminal output, and files never touch it, and if you do not install the agent or leave alerts off, nothing reaches it at all. Every other part of GateShell — SSH, SFTP, Mosh, port forwarding — still runs straight from your device to your server with nothing of ours in between.
Download GateShell from the App Store, add your server (hostname, port, auth method), and tap to connect. GateShell is a universal app optimized for iPad with Split View, Stage Manager, and keyboard shortcut support — giving you a full desktop-grade terminal experience.
Yes. GateShell provides a full interactive PTY shell on iOS that works seamlessly with tmux. Connect to your server, start a tmux session, and pick it up later from any device — including your Mac or iPad via GateShell's universal app and iCloud sync.
Team collaboration features — including shared vaults, live terminal sharing, and role-based access — are on our roadmap. They'll be built on Apple's native frameworks (CloudKit, SharePlay) with zero backend servers, just like the rest of GateShell.
Ready to take control of your servers?
Download GateShell for free. No account required. No credit card. Just open and connect.
Free tier includes SSH terminal, 1 saved server, and Quick Connect. No limits on session time.
Built by Hefty Innovations
GateShell is built by Hefty Innovations, an independent software studio based in Faridabad, India, building software since 2014. We made GateShell zero-backend for one reason: your server credentials are among the most sensitive data you own, and no one else should hold them — no servers, no telemetry, no accounts, by architecture rather than by policy.
Learn more about Hefty Innovations