The SSH client whose key can't be copied off your phone. bsns.SSH creates your key inside the Android Keystore — in StrongBox or the secure environment where your phone has one — and shows you exactly how it's protected. Free, open source, and private by design: no account, no ads, no analytics.
KEYS THAT STAY IN HARDWARE
• A device key generated in the Android Keystore that can never be exported.
• An optional second key that needs your fingerprint or face for every signature.
• FIDO2 security keys and PIV smart cards over NFC or USB-C — the private key never leaves the token, and the same token works on Android and iOS.
• Software Ed25519, ECDSA, and RSA keys when you need a portable key.
• Every login signs through a built-in SSH agent, so the network code never sees a private key.
• Log in with a password once, tap "Install my key", and switch to your hardware key for good.
BUILT FOR TABLETS TOO
On tablets, Chromebooks, and foldables, a sidebar keeps every session one tap away with live status, two servers sit side by side, and Ctrl+Shift keyboard shortcuts switch, split, close, and zoom sessions.
STAY CONNECTED
• Mosh keeps sessions alive as you move between Wi-Fi and mobile data.
• Multiple sessions in tabs, each with a live status dot.
• Reconnect in place when a connection drops — your scrollback stays.
• Jump hosts (ProxyJump) with verified host keys at every hop.
A REAL TERMINAL
Full color and mouse support for vim, htop, and tmux; a shortcut bar for Esc, Ctrl, Tab, and arrows; pinch to zoom; one-tap tmux and screen scrollback; find in output; snippets; and local command history that never leaves the device.
FILES AND TUNNELS
Browse, upload, and download files over SFTP, and forward local ports to services on your servers.
BRING YOUR SETUP
Import your ~/.ssh config, known_hosts, and keys. Sync hosts and keys across devices — including your iPhone and iPad — through a folder you choose with Android's file picker: Google Drive, Dropbox, Nextcloud, or a network share. Everything is encrypted on the device first; the storage only ever sees ciphertext. There is no bsns server and no account.
PRIVATE BY CONSTRUCTION
The app talks only to your servers and the storage you pick. No analytics, no tracking SDKs, no crash reports sent anywhere. Optional app lock and screenshot protection. Open source, so you can verify it yourself.
OPEN SOURCE, GPLv3
https://github.com/bsnscc/bsns-ssh
Made by bsns.cc. We build software for running a small business, and we use this client every day to run our own servers. It's free, with nothing to sign up for — if it earns your trust, the rest of our work is at bsns.cc.
SSH & mosh with keys locked in your phone's hardware. No account, no tracking.