E2EEZero-knowledge sync for your SSH credentials
SSH clientmacOS · Windows · Linux · iOS

SSH, without the usual friction.

termique keeps your hosts, credentials and SSH keys in sync across every machine you work from. Encrypted end to end, so we only ever see ciphertext.

prod-api-01connected
MonitoringCPU 23%RAM 67%
Vault syncedAES-GCM
↑↓select↵connect⇧↵details
Built on
  • Google Cloud
  • Cloudflare
  • Anthropic
  • Algolia
Platforms4Native on desktop and mobile
SyncEnd-to-endWe only ever store ciphertext
Pro$5/moA third of what Termius asks
Telemetry0On what happens in your sessions

Everything you reach for, in one window.

Sessions, files, tunnels, keys and an assistant that knows which host you are on. No separate tools to keep in sync.

FIG 0.1

Terminal sessions

PTY sessions with multi-tab support. Multiple servers, one window - no third-party terminal needed.

FIG 0.2

End-to-end encryption

Credentials encrypted locally with AES-GCM. The server never sees plaintext.

FIG 0.3

Host management

Every server at a glance. Groups and status - organized your way.

FIG 0.4

AI that knows which server you're on

Ask questions scoped to the active host. Commands appear for review before anything runs.

FIG 0.5

SSH key store

See algorithms, copy fingerprints, remove what you don't need - all in one place.

FIG 0.6

Command audit logs

Every command, every session, timestamped. Built for shared hosts and compliance.

Sync

Synced everywhere, never in plaintext.

Your workspace follows you between machines. Your secrets don't leave the one you're on.

FIG 2.1

Syncs across your devices

  • Host labels and addresseshostname · port · user
  • Host groups and foldersorganization only
  • Snippet librarycommands you saved
  • App preferencestheme · layout · AI
FIG 2.2

Stays on this device

  • SSH credentialspasswords, passphrases
  • SSH private keysOS keychain
  • Your master passwordnever transmitted
  • Decrypted key materiallocal memory only
Security

Your credentials never leave your device unencrypted.

Read the security breakdown
FIG 1.1

Credentials never leave your device in plaintext

SSH passwords and private keys are encrypted with AES-GCM before they touch the network. The encryption key is derived locally from your master password via PBKDF2 - it never reaches the server.

FIG 1.2

Your master password is yours alone

We never receive, store, or have any way to recover your master password. Key derivation is fully local - by design, there is no reset path.

FIG 1.3

Private keys go to the OS keychain

Private key material is stored in macOS Keychain, Windows Credential Manager, or libsecret on Linux - never in our database.

FIG 1.4

No telemetry on your SSH sessions

Session data, commands, and connection metadata live on your device and your servers only. We have no visibility into what you do inside a terminal.

Testimonials

What people said at launch.

See termique on Product Hunt
  • “I originally tried it just to help test, but ended up using it every day.”
    Rizky H.Software Engineer
  • “SSH, without the usual friction.”
  • “Tried it for testing ended up using it daily. Previously on Termius, now fully using Termique.”
    Gilang WahyudiEngineer
FAQ

Questions, answered.

Read the docs
Product
01What platforms does Termique run on?

macOS, Windows, and Linux for the native desktop app (built with Tauri, not Electron). iOS and Android companion apps are also available for mobile access.

02Is it cloud-first?

Yes. Hosts, groups, and snippets sync automatically to a cloud backend so your setup is always available across devices. Credentials are end-to-end encrypted with your master password - the server never sees plaintext.

03How is this different from iTerm2 + a password manager?

Termique integrates host management, encrypted credential storage, cloud sync, session multiplexing, and an AI assistant into one surface. No copy-pasting, no config files, no manual tab bookkeeping.

04Is there a free tier?

Yes. The free tier covers the core workflow - SSH sessions, host management, SSH keys, snippets, SFTP, port forwarding, and server monitoring. Pro removes limits and adds host sharing, command audit logs, and more AI prompts per day. See Pricing for current details.

Security
05How are credentials stored?

Encrypted with AES-GCM before they leave the app. The key is derived from your master password via PBKDF2 locally - it never leaves your device. Encrypted blobs are stored in the OS keychain and synced as ciphertext only.

06What if I forget my master password?

We cannot recover it for you - by design. The key is derived entirely on your device and never transmitted. If you lose it, your encrypted credentials are unrecoverable. Store it somewhere safe.

07Where is my data hosted?

The sync API runs on servers in the EU. Your SSH credentials never reach our servers - they are encrypted on your device before any network request is made.

08What happens to my data if Termique shuts down?

Your hosts, groups, and snippets are stored in a local SQLite database on your device. Export is available from Settings at any time. The master password and credentials are yours - no lock-in.

Open and extensible
09Can I bring my own AI endpoint?

Yes. There's a custom OpenAI-compatible endpoint mode. Point it at any provider. Your API key stays in the local key-value store and never appears in logs or error messages.

10Is the source code available?

The Termique desktop client is closed-source. Signed release binaries are published on GitHub so you can verify the installer before running it.

Still have a question?Check the docs, or reach the team through support.

Free to download.

Start with three hosts on the free plan. Upgrade when you need more.