
About
What's New in TunnelSHH
1.1
September 17, 2026
A real terminal, and your servers' identities checked every time. Saved hosts, keys and snippets carry straight over. • Try it without a server. There is now a demo server built into the app: a working shell, a file browser and port forwards, all running on the device with nothing sent to a network. Turn it off in Settings once you have added your own machines. • A real terminal. vim, htop, tmux, less and full colour, with cursor keys and shell history that just work. Search the scrollback, copy any of it, share a session log. • Host keys are pinned. The first connection records each server's key; if it ever changes, Tunnel stops and shows you both fingerprints before you decide. Review or forget them under Trusted Hosts. • Passphrase-protected keys, plus P-384 and P-521. Import a key file, or generate an Ed25519 key on the phone and paste the public half into authorized_keys. Test Connection checks a host before you save it. • Port forwards per host, all three kinds: local (-L), remote (-R) and a SOCKS proxy (-D). Mark them to start on connect. • SFTP grew up: files of any size with progress, rename, delete, new folders, upload from Files or Photos, and Save to Files. • Encrypted backup. Export hosts, credentials, snippets and trusted keys to a passphrase-protected file, and restore on a new phone. Nothing goes to a cloud. • Siri and Shortcuts: "SSH into my server with Tunnel". Long-press the icon for your recent hosts. Every one of these waits behind Face ID. • Snippets with {{placeholders}} that ask for values when you send them. • Search your host list; swipe to connect, edit, duplicate or delete. • Cursor styles, themes that colour ls and git too, and a Reduce Motion-friendly splash. • Your hosts and credentials now live in the iOS Keychain. Fixed • Quick Connect no longer throws you out when a connection drops; it keeps the terminal and offers Reconnect. • SFTP used to cut files off at 1 MB and could write the cut copy back. It doesn't any more. • Some OpenSSH private keys were rejected because of a one-byte parsing slip. If Tunnel is earning its keep, it may ask you once for a rating, never while you are in a session. "Don't ask again" means it. Not in this version: RSA keys and keyboard-interactive login. The SSH library Tunnel uses doesn't offer them; Ed25519 keys are the recommended alternative.
More


