Developer builds privacy-focused SSH client for Android with on-device keys

A developer who runs a home server created Pocket SSH Terminal because existing Android SSH apps required accounts, synced keys to the cloud, or displayed ads. The app generates Ed25519 keys on the device, encrypts the private key with a Keystore-backed AES-256-GCM key that requires biometric or screen-lock authentication per use, and excludes the encrypted file from backups. Keys never leave the phone, so switching devices means generating a new key, which the app addresses with a setup guide. The app also checks pasted text for hidden control or invisible Unicode characters and keeps session history only in memory. It is sold as a paid app after a free trial rather than being open source, and the developer says Mosh support, which is still missing, is the most requested feature.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in