SSH Client for Apple Platforms

Your servers. Your keys.
Your device. Nothing in between.

A powerful SSH terminal with zero backend servers. Your credentials never leave your device.

Download on App StoreView Features
deploy@prod-api — GateShell
deploy@prod:~$ ssh deploy@prod-api.example.com
Connected — GateShell v1.0
Last login: Tue Apr 1 09:42:17 2026 from 192.168.1.42
deploy@prod:~$ docker ps --format "table {{.Names}}\t{{.Status}}"
NAMES          STATUS
api-gateway    Up 14 days
redis-cache    Up 14 days
postgres-db    Up 14 days
deploy@prod:~$ ▊

Your servers. Your keys. Your device.

Zero
Backend Servers
100%
On-Device
E2E
Encrypted
Apple
Native

Everything you need in one app

SSH, SFTP, tunneling, and more — everything you need to manage your servers.

SSH Terminal

XTerm-256 colors with fullscreen mode, gesture controls — swipe, pinch zoom, long-press paste. 12+ themes included.

SFTP Transfer

Browse, upload, and download files with real-time progress tracking and share sheet export.

Port Forwarding

Local, remote, and dynamic SOCKS tunnels with per-connection rules and live toggle.

Command Snippets

Save, tag, and reuse commands with autocomplete powered by remote server completions.

Session Logging

Automatically capture every session with timestamps. Search, review, and export logs for auditing.

iCloud Sync

Seamless sync across iPhone, iPad, and Mac — your servers follow you everywhere.

On-Device AI

Secret redaction, a dangerous-command guardrail, and plain-English explanations — powered by Apple Intelligence, running entirely on-device. Nothing leaves your phone.

Code Editor & Git

View and edit remote files with syntax highlighting for 13+ languages, then check git status, stage, and commit — without leaving the app.

SSH Key Manager

Generate ed25519, P-256, or RSA keys on-device, name them, and pick them per server. Private keys never leave the Keychain.

SSH Terminal

A terminal that feels native

Full XTerm-256 color support with an interactive PTY shell. Swipe for arrow keys, pinch to zoom, long-press to paste. The accessory bar gives you Esc, Tab, Ctrl, and special characters — right at your fingertips.

XTerm-256 colorsGesture controlsSmart autocomplete12+ themes
GateShell
deploy@prod:~$ htop --sort-key PERCENT_CPU
PID USER PR NI VIRT RES %CPU %MEM
842 deploy 20 0 1.2Gi 340Mi 12.3 4.3
1204 nginx 20 0 128Mi 42Mi 3.1 0.5
956 postgres 20 0 512Mi 180Mi 1.8 2.3
SFTP File Manager

Browse and transfer files securely

Navigate remote file systems with a familiar file browser. Upload from your Camera Roll or Files app, download with progress tracking, and share via the iOS share sheet. All transfers happen over your encrypted SSH connection.

Directory browsingUpload & downloadProgress trackingShare sheet export
GateShell
deploy@prod:~$ ls -la /var/www/html/
drwxr-xr-x 5 deploy deploy 4096 Mar 28 index.html
-rw-r--r-- 1 deploy deploy 12K Mar 28 style.css
-rw-r--r-- 1 deploy deploy 45K Mar 28 app.js
drwxr-xr-x 3 deploy deploy 4096 Mar 27 assets/
Port Forwarding

Tunnel anything, anywhere

Set up local, remote, and dynamic SOCKS tunnels with a few taps. Create multiple rules per connection with custom labels, toggle them live without disconnecting, and persist them for next time.

Local forwardingRemote forwardingDynamic SOCKS proxyLive toggle
GateShell
deploy@prod:~$ # Local: access remote DB on localhost:5432
Forwarding localhost:5432 → db.internal:5432
deploy@prod:~$ # Dynamic: SOCKS proxy on port 1080
SOCKS proxy listening on localhost:1080
Command Snippets

Save commands, run everywhere

Build a library of reusable commands with tags for fast lookup. Autocomplete pulls from your snippet library, server history, and live remote completions via compgen. Run the same snippet across multiple servers simultaneously.

Tag & organizeRemote autocompleteMulti-server executionVariable substitution
GateShell
deploy@prod:~$ # Snippet: deploy-latest
→ git pull origin main
→ docker compose build --no-cache
→ docker compose up -d
✓ Deployed to 3 servers
Session Logging

Every session, fully recorded

Automatically capture complete session logs with timestamps. Review what happened during any connection, export logs for auditing or compliance, and search across your session history by server or content.

Auto-captureSearchable historyExport & sharePer-server logs
GateShell
deploy@prod:~$ # Session log: prod-api @ 2026-04-01 09:42
Duration: 14m 32s
Commands: 23 | Output: 1.2 KB
✓ Log saved and searchable

Zero servers. Zero compromise.

Unlike other SSH clients, GateShell has no backend. Your credentials never touch our infrastructure. Everything runs on your device using Apple-native frameworks.

0
Backend Servers
0
Data Collection
100%
On-Device
Keychain Storage
Encrypted credentials
Face ID / Touch ID
Biometric app lock
Direct Connection
Device → Server only

Up and running in 30 seconds

No accounts, no sign-ups, no configuration files.

1

Download

Get GateShell free from the App Store. Works on iPhone, iPad, and Mac.

2

Add a server

Enter your host, username, and credentials. Or use Quick Connect for one-tap access.

3

Connect

Tap to connect. You're in a full terminal session — directly from your device to your server.

One app, every Apple device

A universal app built with SwiftUI — optimized for each platform, synced via iCloud.

iPhone

Full terminal with gestures, swipe arrows, and pinch zoom

iPad

Split view, Stage Manager support, and keyboard shortcuts

Mac

Native macOS app with menu bar, Touch Bar, and trackpad support

Requires iOS 17+ / macOS 15+ — AI features require iOS 26+ with Apple Intelligence

See it in action

A real SSH session, right from your iPhone or Mac.

deploy@prod-api — GateShell
deploy@prod:~$ ▊
Built on Apple's Security Stack

Security without compromise

Your credentials are protected by the same hardware encryption that secures Apple Pay and Face ID.

Apple Keychain

All passwords and SSH keys stored in the hardware-encrypted Keychain. Never in plaintext.

Biometric Lock

Require Face ID or Touch ID to open GateShell. Your servers stay locked even if your phone isn't.

Direct Connection

Your SSH session goes straight from your device to your server. No relay, no middleman, no proxy.

iCloud E2E Encryption

Sync data is encrypted end-to-end by iCloud. Not even Apple can read your server configs.

Zero Data Collection

No analytics, no tracking, no telemetry. We don't know who you are or what servers you connect to.

No Backend Servers

GateShell runs entirely on your device. There's no server to breach because there is no server.

Verified Host Keys

Trust-on-first-use pinning verifies your server's identity on every connect and warns you the instant a host key changes — stopping man-in-the-middle attacks.

Simple, honest pricing

Pro for less than $1/month. 12x cheaper than Termius Pro (annual).

Free

$0

Get started with core SSH

  • SSH terminal (unlimited sessions)
  • 1 saved server
  • Quick Connect
  • Command history
  • Default Dark theme
  • Server health check
  • Biometric lock (Face ID / Touch ID)

Pro Monthly

$0.99/month

Full access, billed monthly. Cancel anytime.

  • Unlimited saved servers
  • SFTP file browser
  • Port forwarding (local + remote)
  • Command snippets
  • All 12+ terminal themes
  • Proxy support (HTTP/SOCKS5)
  • Environment variables per server
  • SSH Agent Forwarding
  • Telnet protocol
  • Charset selection (12 encodings)
  • Smart remote autocomplete
  • iCloud sync across devices
  • Session logging with export
Best Value

Pro Yearly

$9.99/year

Everything in Pro for just $0.83/month.

  • Unlimited saved servers
  • SFTP file browser
  • Port forwarding (local + remote)
  • Command snippets
  • All 12+ terminal themes
  • Proxy support (HTTP/SOCKS5)
  • Environment variables per server
  • SSH Agent Forwarding
  • Telnet protocol
  • Charset selection (12 encodings)
  • Smart remote autocomplete
  • iCloud sync across devices
  • Session logging with export

Why GateShell?

Designed for developers who care about privacy, performance, and owning their tools.

Zero Backend

No servers, no relays, no middleman. Your credentials stay on your device — always.

On-Device AI

Secret redaction, command guardrail, and plain-English explanations — powered by Apple Intelligence, running entirely on-device.

Apple Native

Built with SwiftUI. Keychain encryption, Face ID, iCloud sync, and every Apple platform.

Ready to take control of your servers?

Download GateShell for free. No account required. No credit card. Just open and connect.

Download on App StoreExplore Features

Free tier includes SSH terminal, 1 saved server, and Quick Connect. No limits on session time.

Frequently asked questions

Yes. GateShell has zero backend servers. Your SSH keys, passwords, and server configurations are stored exclusively in your device's Keychain and synced via your personal iCloud account. We never see, store, or transmit your credentials.

If you're a Pro subscriber, your servers and settings sync automatically via iCloud. Sign in on your new device with the same Apple ID and everything is right where you left it. Free tier users can use Quick Connect for ad-hoc access.

Yes! GateShell is a universal app that runs natively on iPhone, iPad, and Mac. It's built with SwiftUI and optimized for each platform.

The free tier includes full SSH terminal access with unlimited session time, 1 saved server, Quick Connect for ad-hoc connections, command history suggestions, the default Dark theme, server health checks, and biometric lock (Face ID / Touch ID).

GateShell Pro is $0.99/month or $9.99/year ($0.83/month) — 12x cheaper than Termius Pro (annual). It unlocks unlimited servers, SFTP, port forwarding, command snippets, all 12+ themes, proxy support, iCloud sync, session logging, and more.

GateShell is a full-featured SSH client for iPhone and iPad offering a terminal emulator with XTerm-256 colors, SFTP file transfer, port forwarding, and on-device AI — all with zero backend servers. It's a privacy-first alternative to Termius and Blink Shell.

Yes — GateShell is a privacy-first Termius alternative with zero backend servers and on-device AI. Unlike Termius, GateShell stores all credentials exclusively on your device, offers a free tier with unlimited SSH sessions, and Pro is 12x cheaper at $0.99/month or $9.99/year.

The core difference is where your credentials live. Termius stores and syncs your SSH keys and passwords through its own cloud vault on paid plans (Pro is $10/month, billed annually as $120/year). GateShell keeps everything in your device's Apple Keychain and syncs only through your personal, end-to-end-encrypted iCloud — we operate no servers and never see your data. GateShell also has a free tier with unlimited SSH session time, and Pro is $9.99/year.

Yes. Blink Shell is a powerful keyboard- and Mosh-focused terminal offered as a $19.99/year subscription with a two-week trial. GateShell takes a more GUI-first approach — a visual SFTP file browser, a saved server list, 12+ terminal themes, port forwarding, and on-device AI — and includes a permanently free tier with unlimited SSH sessions, so you can use it long-term at no cost or upgrade to Pro for $9.99/year.

No. Your SSH private keys and passwords are stored exclusively in your device's Apple Keychain, which is hardware-encrypted. If you enable sync, they travel only through your own iCloud Keychain with end-to-end encryption that not even Apple can read. Unlike SSH clients that sync through a vendor's cloud vault, GateShell operates no backend servers and never transmits or stores your credentials.

Download GateShell from the App Store, add your server (hostname, port, auth method), and tap to connect. GateShell is a universal app optimized for iPad with Split View, Stage Manager, and keyboard shortcut support — giving you a full desktop-grade terminal experience.

Yes. GateShell provides a full interactive PTY shell on iOS that works seamlessly with tmux. Connect to your server, start a tmux session, and pick it up later from any device — including your Mac or iPad via GateShell's universal app and iCloud sync.

Team collaboration features — including shared vaults, live terminal sharing, and role-based access — are on our roadmap. They'll be built on Apple's native frameworks (CloudKit, SharePlay) with zero backend servers, just like the rest of GateShell.