Your servers, from your phone, without handing over your keys
SSH Manager Pro is a terminal client for Android built around a single idea: a private key on a phone is a liability, so the app is designed to hold as few of them as possible.
Most mobile SSH clients ask you to paste a private key and then promise to look after it. This one gives you three ways to avoid that entirely — generate a key inside the phone's security chip where nothing can read it out, keep it on a YubiKey you tap, or connect to AWS, Google Cloud and Cloudflare hosts using credentials that live for a minute and are then discarded.
Android 8.0 or later. This is an Android app — there is no iPhone or iPad version, and none is planned.
See what it does How it protects credentials
What makes it different
- Keys that cannot be copiedGenerated inside the Android Keystore, non-exportable by design — not even by this app.
- YubiKey over NFCHold your token to the phone to sign in. The key stays on the token, so it works on any phone.
- AWS without SSH keysEC2 Instance Connect mints a key per session that AWS discards after a minute.
- Google Cloud VMs with no public IPIdentity-Aware Proxy reaches instances that have no internet-facing address at all.
- Cloudflare AccessReach hosts published behind an Access application with no open SSH port.
- Tailscale, built inAn embedded node reaches machines behind NAT without a second VPN app.
The ordinary things, done properly
A client you avoid using is not a secure client, so the everyday parts matter as much as the cryptography.
- A real terminal — xterm-256color, selectable output, several sessions at once, and scrollback that survives a reconnect.
- 72 built-in commands grouped by what you are diagnosing, with the ones you actually use rising to the top.
- An AI copilot that works offline with no account, and flags destructive commands before they run.
- End-to-end encrypted backup — encrypted on the phone with a passphrase only you know.
- Dense, one-handed layout: about a dozen hosts on screen rather than four.
Host key verification you can trust
The app pins a server's fingerprint the first time you connect and refuses to continue if it ever changes, which is the difference between encrypted traffic and traffic encrypted to whoever happens to be in the middle. Read how the security model works.
Currently in testing. The app is on Google Play's internal testing track while the newer cloud integrations are proven against real infrastructure. If you would like to try it, get in touch.
Free, with an optional subscription
The terminal, the encrypted vault, hardware-backed keys, Tailscale, snippets, the offline copilot and AWS Instance Connect are all free. Pro adds jump hosts, cloud backup, live AI models and the deeper cloud integrations.