MorphGate SSH

Vallic

About this app

MorphGate is an SSH client that puts every host behind its own gate: its own VPN tunnel, its own jump hosts, its own pinned host key. Your hosts and keys live in an encrypted vault on your device and, if you like, sync across your devices end-to-end encrypted.

A VPN PER HOST, INSIDE THE APP
Attach a WireGuard or OpenVPN profile to a host, and MorphGate brings the tunnel up when you connect. Each tunnel runs inside the app with its own network stack: nothing in your device's network settings changes, and two clients that both use 10.0.0.0/24 can be connected at the same time.

A REAL TERMINAL
• SSH with passwords, keys and two-step sign-in (keyboard-interactive)
• An extra key row with Esc, Tab, Ctrl, the arrows and the symbols a phone keyboard hides
• Jump hosts, each hop checked against its own pinned host key
• Sessions that keep running on the server in tmux, so a dropped connection picks up where it left off
• Snippets: the commands you keep retyping, one tap away
• Terminal schemes, from the dark Console to the light Greenbar

FILES, TUNNELS AND RECORDINGS
• Browse, download and upload files over SFTP
• Local, remote and dynamic (SOCKS) port forwards, saved with your hosts
• Record a session into your vault and play it back later

YOUR VAULT, ENCRYPTED
Hosts, keys, passwords and snippets are encrypted on your device with a key derived from your master password. Generate Ed25519 keys in the app or import your own. You get a recovery key when you create the vault; nobody can reset your master password for you, including us. The vault locks itself when you step away, and opens with your fingerprint or face.

SYNC THAT NEVER SEES YOUR KEYS
Turn on sync to have the same hosts on your phone, tablet and computer. Everything is encrypted before it leaves your device, and the server stores only ciphertext. Sync through MorphGate's hosted service with an account, or run the open-source vault-sync server yourself. MorphGate works fully without an account.

TEAMS
Share vaults with your team. Each member gets their own sealed copy of the vault key and can view, edit or manage it, and new members are confirmed by comparing fingerprints.

OPEN SOURCE
MorphGate is free software under the Mozilla Public License 2.0. The sync protocol is open, and its reference server is free to run.

MorphGate is also on Linux, macOS and Windows: morphgate.com

What’s new

• Invited to a team? Paste the invite on the first screen.
• MorphGate can suggest a strong master password: five random words.
• Team pages start with what needs you, then tabs.
• A team that requires two-step verification now says so.
• Hosts and snippets from your team's feed sync to your phone.
• Hosts, keys and snippets are lists you can search and filter.