CD Shell: SSH & SFTP Client

SchoolSpark

In-app purchases

About this app

Manage your cloud infrastructure, hide your open ports, and execute complex sysadmin automation from anywhere. CD Shell is the premier zero-trust Android SSH & SFTP client, engineered specifically for DevOps engineers, sysadmins, and IT security professionals who demand absolute cryptographical isolation and uncompromising productivity.

Stop leaving Port 22 exposed to brute-force bots and take complete, hardware-grade control of your server fleet.

🔑 HARDWARE-BACKED SECURITY KEYS (FIDO2 / Yubikey)
Physical Hardware Authentication: Fully supports sk-ssh-ed25519 security keys over NFC and USB-C via Android’s modern Jetpack Credential Manager.

Hardware Sealed Keys: Cryptographic signatures are calculated directly inside your physical security key (YubiKey, Titan, SoloKeys). Private keys never leave the hardware token.

🔥 ZERO-TRUST STEALTH (fwknop SPA Engine)
Closed Ports by Default: Built with a native C++ Single Packet Authorization (SPA) engine. Keep Port 22 and your firewall 100% closed to public port scanners.

Instant Port Knocking: When you tap connect, CD Shell fires an invisible, cryptographically signed UDP packet. The firewall opens dynamically for your IP, establishes the SSH connection, and instantly locks the port behind you—all in under a second.

🛡 UNCOMPROMISING ZERO-TELEMETRY VAULT
Hardware StrongBox TEE: Private keys, passwords, and SPA secrets are hardware-encrypted inside Android's Secure Element.

SQLCipher AES-256 Storage: Server profiles, identity vaults, and configurations are protected by full-database AES-256 encryption.

Biometric Shield & Inactivity Lock: Instant re-authentication via Fingerprint or Face ID whenever the app is backgrounded or left idle.

Local Crash Vault: Zero third-party telemetry, ads, or remote crash trackers. Diagnostic logs are stored 100% locally in an encrypted vault for user-controlled export.

Privacy Overlay: Automatically obscures app previews in Android's "Recent Apps" switcher to block shoulder surfing.

💻 DESKTOP-CLASS TERMINAL & TMUX ENGINE
Xterm.js Core: Full 256-color support with pixel-perfect rendering for Vim, Tmux, Neovim, and Htop. Bundled locally for air-gapped, offline networks.

Persistent Tmux Workspaces: Integrated auto-attach protocol (cdshell sessions) ensures your long-running processes remain active even if cell coverage drops.

Optimized Background Keep-Alive: Foreground service isolation prevents the Android OS from killing your active SSH sockets during multitasking.

Accessory Bar: Quick-access soft key row for Esc, Tab, Control, Alt, Arrow keys, and Pipe (|).

Dynamic PTY Sync: Real-time terminal dimension sync prevents broken text wrapping during screen rotation or keyboard toggles.

🌐 LOCAL PORT FORWARDING & SSH TUNNELING
Secure Port Forwarding: Tunnel local ports directly through your encrypted SSH connection. Securely access remote databases (PostgreSQL, MySQL, Redis) or web admin panels on localhost without exposing them publicly.

📂 SYSADMIN AUTOMATION & SFTP EXPLORER
Dynamic Playbooks & Snippet Search: Search and execute multi-line automation scripts with dynamic variable replacement ([variable]) on the fly.

Visual SFTP Explorer: Filter, navigate, and manage remote file systems through a native, high-speed dual-pane interface.

1-Click Remote DB Backups: Dump, compress (.zip), and download remote MariaDB/MySQL databases to local storage in a single tap.

Integrated Remote Text Editor: Live-edit remote configuration files with zero manual download/upload steps.

On-Device Key Generator: Generate standalone Ed25519 and RSA (up to 4096-bit) key pairs natively inside the device vault.

🎨 MODERN ANDROID UX
Built completely with Jetpack Compose for fluid performance.

Native support for Material You dynamic theming, Edge-to-Edge displays, Home Screen Quick Launch Widgets, and Predictive Back navigation (Android 13+).

Architected, Engineered, and Hardened by Chinmoy Das.

What’s new

Bug fixes and performance improvements