What NexSSH actually is

Everything about getting onto a server lives here. Hosts are saved in a built-in session manager with groups, search and host cards, and every common way of logging in is supported — including the awkward ones.

• Password auth and SSH key auth, with passphrase support
• Interactive two-factor (keyboard-interactive) dialog when a server demands it
• SSH Agent support, plus a key manager that can generate keys and deploy them to a server
• Jump host / bastion routing and outbound HTTP, HTTPS, SOCKS4 and SOCKS5 proxies
• Wake-on-LAN, configurable keep-alive, and auto-reconnect with a smart back-off (up to 8 attempts)
• Trust-on-first-use host keys with fingerprint prompts and a loud warning if a key ever changes
• Import and export your existing ~/.ssh/config — nothing has to be retyped

NexSSH ships its own ANSI terminal emulator rather than embedding someone else's. It is tuned for real work: long output, many tabs, quick search and readable colors.

• Multi-tab sessions (Ctrl+T / Ctrl+W / Ctrl+Tab) and a split second shell on the same connection
• 3,000-line scrollback, alternate-screen apps, bracketed paste and live resizing
• Search one terminal with Ctrl+F — or every open terminal at once with Ctrl+Shift+F
• 8 built-in color themes, zen mode (F11) and per-tab font size controls
• Clickable URLs and file paths, session logging to file, asciinema recording & playback, PDF export
• Command history and a fuzzy Command Palette (Ctrl+K) for hosts, tabs, snippets and commands

Every session can switch between Terminal and SFTP views. The SFTP pane is a two-way file manager: your machine on one side, the server on the other.

• Dual-pane local ↔ remote browser with drag & drop from either side (and from Windows Explorer)
• Transfer queue with up to 3 parallel jobs — pause, resume, retry and cancel each one
• Classic ZMODEM rz/sz inside the terminal for quick single-file moves
• Compare & Sync diffs a local and a remote folder, then syncs in either direction
• Rename, delete, chmod, preview and a built-in editor that falls back to sudo when needed
• Recursive remote file search and per-server path bookmarks

Each connected server gets live CPU, memory and network gauges. The numbers are read straight from /proc over the SSH connection you already have — no agent, no extra daemon, nothing to install.

• CPU, memory and network gauges with sparklines, refreshed every 2 seconds
• Threshold alerts for CPU, RAM and disk with your own interval (15–3600 s) and per-host snooze
• Health dots on host cards so problems are visible before you even connect
• Measured connection latency shown per session
• A process manager to list remote processes and kill the ones that misbehave

This is where NexSSH stops being a terminal and becomes an operations kit: a row of focused tools that each do one job well.

• Broadcast one command to many servers at once, with per-server status
• Scheduler for recurring or daily commands, bound to any saved host
• Docker manager, systemd services browser and a visual crontab editor
• Live logs via journalctl or tail -F, with filters and highlighting
• Tunnel profiles with autostart and auto-restart, plus one-click Quick Tunnels for common ports
• Snippets, macros, connect/disconnect hooks and a disk-usage analyzer
• Encrypted one-file Backup & Restore (.s2bak) covering hosts, settings and snippets

Everything NexSSH knows about you stays in one folder on your PC. Secrets are never written to disk in plain text on Windows, and every sensitive action is recorded locally for your own review.

• Saved passwords sealed with Windows DPAPI (per-user), or Fernet with a protected key file
• Optional master-password vault: PBKDF2-HMAC-SHA256 with 600,000 iterations + Fernet
• HMAC-SHA256 integrity tags on 13 core data files, checked at startup
• Atomic writes everywhere and 0600 permission hardening on POSIX systems
• A local audit log of connections and actions — sanitized, with no passwords ever recorded