ArcShell — SSH & Terminal

Arcan Consulting

About this app

ArcShell is a modern SSH terminal client for system administrators,
developers and on-call engineers. Everything runs on-device — no
account, no cloud, no telemetry. One-time purchase, no subscription,
no ads.

━━━ WHY ArcSHELL ━━━
You probably already have an SSH app. So why a new one? Because no
single Android terminal combines all of this:

• Own SSH-2 library (open source, Apache 2.0) — auditable crypto stack
• Post-quantum key exchange (ML-KEM-768 hybrid with X25519) — today,
not "coming soon"
• Manage Proxmox VE clusters and OPNsense firewalls from your phone —
over the native API, even behind a jumphost
• Presentation mode that streams your terminal to any browser with
server-side secret masking
• Zero telemetry, zero ad SDKs — and a one-time €7.99 price, no
subscription, no in-app purchases, no "pro edition" paywall

ArcShell bundles in one app what usually requires three.

━━━ PROXMOX & OPNSENSE ━━━
• Proxmox VE and OPNsense are first-class connection types — open a
host and get a full management UI, not just a shell
• Cluster dashboard: nodes, VMs and containers with live status, CPU,
RAM and disk
• Full control over the native PVE REST API: start/stop/reboot/hard-
reset, snapshots, clone, migrate, backup
• Live metrics and CPU/RAM resource-history graphs; firewall,
users/roles, node details, task log, resource pools
• Guest consoles: noVNC (VeNCrypt) and a real serial console as a
terminal tab
• Proxmox Backup Server (PBS) and the OPNsense firewall over the API

━━━ CONNECTIONS ━━━
• SSH-2 with password, public key, and FIDO2 authentication
• Post-quantum key exchange (ML-KEM-768 hybrid with X25519)
• Telnet and USB-serial (OTG adapter)
• Port-forwarding, TOFU (Trust-On-First-Use) host-key verification
• Quick-connect via ssh:// URIs and a one-tap home-screen widget

━━━ TERMINAL ━━━
• Built-in xterm-256color emulator — full 24-bit truecolor support
• No shell-out, no proprietary Linux runtime, no root required
• Multiple themes (Dracula, Monokai, Solarized, Nord, …) + plugin
system for custom palettes
• Volume-key font zoom, customisable cursor, optional haptic feedback

━━━ FILE COMMANDER ━━━
• Dual-pane file browser inspired by Total Commander / Midnight
Commander
• Sources: local storage, SFTP, USB-OTG (SAF), and Nextcloud via
Login Flow v2 (no raw WebDAV passwords, multi-account)
• Drag-and-drop upload / download, swipe-to-edit text files
• Bookmarks, sort by name/size/date, bulk select, multi-delete, chmod

━━━ tmux INTEGRATION ━━━
• Auto-attach on login with session picker for multi-session servers
• Reclaim banner: one tap takes a tmux session back from another
client
• Auto-rename tab to tmux session name; exclusive-attach mode

━━━ PRESENTATION MODE ━━━
• Live-stream your terminal over your local network to any browser
• One-time password protection; stream filters mask secrets (emails,
IPs, tokens, bearer tokens) before they leave the device

━━━ BACKUP & SYNC ━━━
• Encrypted backup to local storage or share-sheet destination
• Import SSH config from OpenSSH ~/.ssh/config files

━━━ PRIVACY & AUDITABILITY ━━━
• Zero telemetry — no analytics, no crash reporting, no tracker SDKs
• All hosts, keys and history encrypted at rest (SQLCipher, AES-256)
• App Lock via biometric or PIN
• SSH library open source (Apache 2.0) — full crypto stack auditable

━━━ ONE-TIME PURCHASE ━━━
ArcShell is €7.99 once — no subscription, no in-app purchases, no
"pro edition", and no ads anywhere. Bought once through Google Play;
ad-free from the very first start.

━━━ LOCALIZATION ━━━
Translated into English, German, Spanish, French, Italian, Japanese,
Dutch, Portuguese, Simplified and Traditional Chinese.

━━━ FOR WHO ━━━
Sysadmins managing Linux fleets and Proxmox clusters, DevOps
engineers on call, embedded developers flashing USB-serial devices,
and power users who want a proper terminal on their tablet.

Feedback and bug reports: via Play Store or by email to
[e-mail].

What’s new

ArcShell 2.0.35

• Security: all server commands consistently hardened against shell injection
• Proxmox without SSH: log in via API token or username/password, smart transport with cert pinning
• Node tools: root shell, services (start/stop), APT updates, community-repo switch
• Backup jobs (Datacenter), "Back up now", find guests without a job
• QEMU guest agent: OS/IPs/filesystems, run command, set password
• Groupable tabs, named tmux sessions, Korean, many console fixes