Interactive Terminal
VT100 terminal emulator with splits, tabs, scrollback search, customizable fonts, and palettes. Replaces raw shell access with a modern macOS window.
No forced subscriptions · Choose your plan
The SSH console & tunnel managerbuilt natively for macOS.
SSH, SFTP, bastions, and tunnels in one native app — the power of a pro terminal with the elegance of Apple. Built in Swift & SwiftNIO for rock-solid, blazing-fast sessions.
Version 1.0 · see what’s new
- Free to download, full core features
- Keychain & App Sandbox secure
- Native for macOS 15 Sequoia
Complete Remote Console
SSHSFTPSOCKS5Swift & SwiftNIOKeychainApp Sandbox
2terminal & SFTP
0forced subscription loop
100%native Swift & SwiftNIO
∞saved hosts, even free
Connectivity
SSH connections done properly
One app to manage your remote hosts, terminal sessions, port tunnels, and file transfers — with the authentications your servers actually request, from private keys to 2FA.
Port Forwarding
Local (-L), Remote (-R), and Dynamic SOCKS5 (-D) port forwarding with an active status panel. Perfect for database tunnels or secure web routing.
Co-Session SFTP
Browse and transfer remote files, watch and auto-upload edits, and edit permissions with a visual CHMOD grid — operating on the same SSH channel without logging in again.
Credentials are stored in the macOS Keychain. Private keys never leave your Mac. Host fingerprints are verified with TOFU checks.
Built for remote ops
Everything a sysadmin needs, none of the complexity
A multi-tab terminal with horizontal and vertical splits, an SSH tunnel manager, a built-in key manager, and visual file transfers.
Tabs & Splits
Organize your screens with tabs and splits
Open infinite terminal tabs and split them horizontally or vertically. The geometry is controlled by you — split pane fractions stay locked exactly where you drag them, and tab environment colors dynamically signal where you are.
- Horizontal and vertical splits in any view
- Environment colors under tabs (red for production)
- Stable panel proportions when connecting
- Temporarily rename tabs and assign custom environment tags or colors
Bastion Routing
ProxyJump through multiple bastions
Reach internal hosts through multiple SSH jump servers. Up to 8 hops supported natively, resolving inline usernames and ports. Credentials for each hop authenticate separately, and host key fingerprints are verified end-to-end for every single hop.
- Imports ProxyJump configurations from ssh config
- Authenticates each hop in the chain separately
- Host key verification (TOFU) per endpoint
PRO
Secure in-process SSH Agent
Enabling agent forwarding should not be a security risk. Upshell runs a private, in-process agent that only signs signatures inside the app. Your private keys never leave your Mac and the agent is gated per host, never globally.
- Private keys stay safe in the Keychain
- Agent is gated per host, never enabled globally
- Only read and sign requests are allowed
PRO
Co-session SFTP & file management
Open a visual browser for files next to your terminal session. Drag files to upload, download, watch and auto-upload remote edits, or change file permissions natively using a visual chmod grid — all on the same connection, with zero secondary logins.
- Zero secondary logins — runs on the same SSH connection
- Watch mode auto-uploads on file saves
- CHMOD octal editor and remote Quick Look
PRO
Jump to anything with ⌘K palette
Press ⌘K, type a few letters, and fuzzy search finds your saved hosts, snippets, active forwards, or settings. Local key monitoring intercepts arrow keys and escape, so you can execute actions without touching the mouse.
- Fuzzy matching for hosts, snippets and actions
- Saved snippets runner for single or multi-host execution
- Keyboard focus intercepts arrow and escape keys
More inside
Packed with thoughtful details
Dozens of small decisions that add up to a client you actually enjoy using.
Keychain security
Every credential is stored in the macOS Keychain. Nothing ever leaves your Mac in the clear.
Quick Look
Preview remote files instantly with the spacebar — no download, no detour.
2FA & TOTP support
Full support for keyboard-interactive multi-round authentication challenges.
Server Dashboard
Watch active connections, history, and real node stats inside the Parco Server welcome screen.
SOCKS5 Tunneling
Create local, remote, and dynamic SOCKS5 tunnels with rules configuration.
Instant search & filters
Filter any listing as you type to find the one file among thousands in a heartbeat.
Transfer history
Every transfer is recorded with speed, duration and the exact error if it failed.
Folder size
Calculate the size of a remote folder with a live count and a Stop button.
Copy public URL
Map your web root once, then copy the public address of any remote file from the context menu.
Import from ssh config PRO
Migrate every server in seconds, including wildcards and ProxyJump bastions.
Host key TOFU PRO
Verifies host fingerprints with strict Trust-On-First-Use checks. Changes block the connection.
Multiple tabs PRO
Stay connected to several servers at once and switch sessions in a click.
Saved snippets PRO
Save commands and run them locally in your terminal or on multiple hosts.
Bandwidth limit PRO
Cap the global transfer speed so a big upload never hogs your whole connection.
iCloud sync PRO
Keep your saved hosts in sync across all your Macs via CloudKit, and credentials via iCloud Keychain.
Remote File Editing PRO
Edit remote files directly in your local editor, with watch mode auto-upload on save.
Jump host (bastion) PRO
Reach servers that only answer through an SSH bastion. Up to 8 hops supported natively.
Trust by design
Security that isn't an afterthought
Upshell runs inside Apple's App Sandbox and treats your servers and credentials the way a native Mac app should.
App Sandbox & Keychain
The app is fully sandboxed per Apple's guidelines, and every password lives in the system Keychain — never in plain text.
Identity verification
SFTP and SSH host keys are pinned in a known-hosts store. If a fingerprint changes, Upshell stops and blocks to protect you from MITM.
No accounts, no tracking
There's no Upshell login, no telemetry, and no analytics harvesting your activity. Your sites, keys and files are yours.
Private SSH keys stay put
RSA and ed25519 keys are read locally and used only to authenticate. They're never uploaded, copied or shared with anyone.
Who it's for
One console, every workflow
From managing production clusters to homelab tinkering, Upshell fits the way you work.
Sysadmins & DevOps
Manage fleets of servers, ProxyJump through bastions, execute snippets, and keep port forwards under control.
Web developers
Open tabs and splits, edit remote configurations directly in VS Code, and browse remote directories over SFTP.
Homelab & Raspberry Pi
Save credentials securely in Keychain, import ssh_configs, and connect with a single click.
Agencies & freelancers
Organize saved hosts with tags and environment colors, and sync them across all your Macs through iCloud.
Switching over?
Bring every server with you in seconds
Coming from another client? Upshell imports your whole server list so you don't retype a single host, port or username.
1
Point Upshell at your ~/.ssh/config.
2
Import the config file — every host, port, username, ProxyJump and tunnel comes across intact.
3
Add passwords to the Keychain or select your SSH private key, and you're connected.
Free vs Pro
Powerful for free. Unstoppable with Pro.
Core SSH terminal and SFTP connections are always free. Pro adds advanced automation — choose subscription or lifetime.
| Feature | Free | Pro |
|---|---|---|
| Free · Pro 19,90 €/yr or 99,00 € once | — | ✓ |
| Yes (Swift) | ✓ | ✓ |
| Tabs only · splits in Pro | ✓ | ✓ |
| Yes | ✓ | ✓ |
| Yes | ✓ | ✓ |
| — · Pro only | — | ✓ |
| — · Pro only | — | ✓ |
| — · Pro only | — | ✓ |
| Yes | ✓ | ✓ |
| — · Pro only | — | ✓ |
| — · Pro only | — | ✓ |
| — · Pro only | — | ✓ |
| — · Pro only | — | ✓ |
See it in action
A closer look
Pricing
Choose your plan. Own it forever.
No forced subscriptions. Flexible plans. Free core features.
Upshell Free
Free
Everything you need to connect to your servers.
- Unlimited SSH hosts & connections
- Basic terminal tabs & SFTP browser
- Keychain & Sandbox security
- 2FA & TOTP authentication
Best Value
Pro Annual
19,99 €/ year
Professional automation suite, billed annually.
- Terminal splits & stable fractions
- ProxyJump bastion chains & agent forwarding
- Port forwarding rules panel (L/R/SOCKS)
- Saved snippets, ssh_config import & iCloud
Pro Lifetime
99,00 €once
One-time purchase, own it forever.
- Terminal splits & stable fractions
- ProxyJump bastion chains & agent forwarding
- Port forwarding rules panel (L/R/SOCKS)
- Saved snippets, ssh_config import & iCloud
All paid plans support Family Sharing. You can restore purchases on any of your Macs.
Guides
Answers to the SSH details
Practical write-ups on the problems remote servers and bastions throw at you — useful whichever client you use.
SSH Keys & Keychain
How to generate an ed25519 key, install it on your server, and use it for SSH and SFTP from a Mac client — including what App Sandbox means for reading ~/.ssh and how passphrases are handled.
Read guide →SSH Port Forwarding & Tunnels
How to configure local (-L), remote (-R), and dynamic (-D) SOCKS5 port forwarding on macOS, and manage tunnels through a visual client instead of the terminal.
Read guide →Renaming SSH Tabs & Colors
How to temporarily rename SSH tabs and set custom environment tags and tinting colors in Upshell to easily manage multiple sessions connected to the same host.
Read guide →SSH Agent Forwarding
How SSH agent forwarding works, the security risks of forwarding standard sockets, and how Upshell runs a secure in-process agent to restrict key access per host.
Read guide →FAQ
Good questions, clear answers
Is Upshell free?
Yes, the core features of Upshell are completely free: unlimited SSH host connections, single terminal tabs, basic SFTP file browsing, host key verification (TOFU), and two-factor authentication (KBI). You can use it indefinitely for basic tasks without ever paying.
What does Upshell Pro add?
Upshell Pro (unlocked via in-app purchase) adds power-user features for professional administration: terminal vertical/horizontal splits with locked geometry, ProxyJump bastion routing, local/remote/dynamic port forwarding tunnels, secure in-process agent forwarding, saved snippets with multi-host execution, ssh_config imports, environment-colored tab backdrops, and iCloud sync.
How does the pricing work?
We support flexible, subscription-free options. You can choose a low-cost annual subscription at 19,90 €/year to support active development, or buy a lifetime license at 99,00 € once to own it forever. Both options support Apple Family Sharing.
Are my SSH keys safe?
Absolutely. Upshell complies strictly with Apple's App Sandbox guidelines. All passwords, passphrases, and private keys reside securely inside your Mac's native system Keychain. Private keys never leave your device, and they are processed in-memory locally only when signing authentication requests.