Hosts & Vaults

Encrypted containers for hosts and credentials: create, lock, unlock, recover and delete.

Sync encrypted vaults across your devices — end-to-end encrypted, per vault.

Add hosts, organise them in groups and tags, and duplicate or move them between vaults.

Reusable credentials — password, private key, certificate or SSH agent — that hosts borrow.

Sign in with keys held by ssh-agent, 1Password or Bitwarden, and forward the agent to a host.

Bring the hosts, keys, jump hosts and environment from your OpenSSH config into a vault.

Reach hosts that only exist behind a bastion, using SSH ProxyJump saved on the host.

How host keys are verified on first connect, what a changed fingerprint means, and how to forget one.

Create Linux users limited to specific systemd services and apply, refresh or revoke them on many hosts.

Save an identity as a zip with the key and a README, usable with plain OpenSSH.

The icon on each host that tells you whether an SSH server is answering — before you connect.

Open an SSH terminal to any address without adding it to a vault first — or rdp:// for Remote Desktop.

The live terminal and port-forward counts in the top bar, and where they take you.