termique vs Electerm
On-device derived encryption vs a documented encryption weakness
The short version.
- Free and open source
- SSH, SFTP, Telnet, serial, RDP and VNC
- Bring-your-own-key AI and flexible sync
- A published advisory: fixed IV, no authentication tag
- Electron runtime
- AI needs your own API key
- AES-GCM with a key derived on your device
- Native Tauri runtime
- Session-aware AI with no key to manage
Credential security first? termique. One free tool for every protocol? Electerm.
Every row, side by side.
Where the two part ways.
01Encryption
- termique
- A fresh key from your master password.
- Electerm
- Fixed IV, constant salt, no auth tag.
Read the detail
A documented encryption weakness. Electerm's own security advisory (GHSA-g29v-q6h7-76wh, CVSS 6.0) describes its encryption as using a fixed, zero initialization vector and a constant key-derivation salt with no message authentication - meaning synced bookmarks and profiles can, in principle, be cracked offline or tampered with undetected. Termique derives a fresh encryption key on-device from your master password via PBKDF2 for every credential, with no static or hardcoded component.
02AI assistant
- termique
- Included, scoped to your session.
- Electerm
- Bring your own API key.
Read the detail
Bring-your-own AI vs a purpose-built assistant. Electerm's AI integration is a real feature - point it at any OpenAI-compatible endpoint and it can help write commands. It also means managing your own API key and provider relationship. Termique's assistant is scoped specifically to the active SSH session context and included on the free tier with no separate key to configure.
03Runtime
- termique
- Tauri, native.
- Electerm
- Electron.
Read the detail
Native Tauri vs Electron. Electerm is Electron-based, bundling a full Chromium runtime to render a terminal. Termique uses Tauri - a Rust-based native runtime with a fraction of the memory footprint and a smaller attack surface for an app that handles SSH credentials.
On every device you use.
Both cover macOS, Windows and Linux. Electerm is Electron-based; Termique is Tauri on a Rust backend using the OS webview.
Electerm is desktop-only. Termique's iOS and Android apps share the same end-to-end encrypted host list.
Moving over from Electerm.
- 01Export your data
Electerm has a built-in export that writes your bookmarks and settings to a JSON file. Use it before uninstalling - it is the cleanest record of what you had.
- 02Review where your passwords were
Electerm's local credential storage has historically been reversible rather than derived from a user secret. Treat any password that lived there as one worth rotating, not just moving.
- 03Add hosts in Termique
Recreate the SSH hosts from the export. Credentials are encrypted with AES-GCM under a PBKDF2 key derived from your master password, which is never stored anywhere.
Why does the encryption difference matter?
If a credential store is encrypted with a key shipped inside the application, anyone with the file and the application can read it. A key derived from a password you know and never store means the file alone is not enough.
Does Termique support RDP or VNC?
No. Electerm does. Termique is SSH and SFTP only.
Is Termique free?
Free to download, with unlimited hosts, unlimited sessions and SFTP on the free tier. Pro is $5/mo. Electerm is free entirely.
Can I import Electerm bookmarks?
Not as a file format. Export to JSON from Electerm, then add the SSH hosts in Termique or move them into ~/.ssh/config.
Is Termique also Electron-based?
No, it is built with Tauri on a Rust backend and uses the OS webview rather than bundling Chromium.