DevToolkit vs ShellDiver

A developer's toolkit in your pocket. SSH, SFTP, FTP/FTPS, DNS, Ping, Traceroute, HTTP, WebSocket, SSL and more — all in one app, no accounts, no data sent to the cloud. A single password encrypts everything and keeps it on your device. 13 professional tools, one interface. Native iOS 17 app; no ads, no tracking, no backend. NETWORK DIAGNOSTIC TOOLS • DNS Lookup — A, AAAA, MX, NS, TXT, CNAME records; multiple types in one query • Ping — live latency chart, avg/min/max and packet loss statistics • Traceroute — UDP-based, per-hop latency with reverse DNS • Redirect Checker — follows the HTTP redirect chain step by step; loop detection • SSL Checker — TLS certificate, chain, expiration, cipher suite, SAN list FILE TRANSFER (FTP/SFTP) • FTP, FTPS and SFTP protocol support • Folder upload and download (recursive, including subdirectories) • File permissions (chmod) — numeric mode with preview • Rename, move, copy, bulk delete • Tappable breadcrumb for fast directory navigation • Home icon jumps to the root directory in one tap • Connection details and passwords stored encrypted REMOTE SHELL (SSH) • xterm-256color emulation — top, htop, vim and other screen apps work smoothly • Password, OpenSSH Ed25519 private key, and Secure Enclave-backed P-256 key auth • TOFU host key verification; warns against MITM attacks • Customizable keyboard shortcuts: Ctrl, Esc, Tab, arrow keys, pipe, tilde, slash • Reorder shortcuts by drag and drop • Active SSH sessions stay alive in the background WEB DEVELOPMENT • Built-in browser — WKWebView with Console, Network, and Storage panels • HTTP client — GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS; header editor, JSON/Form/Raw body • WebSocket — connect, send/receive text and binary frames, live log, 500-frame buffer • History for previous requests (HTTP and WebSocket) FILE MANAGER • Local file browser with tappable breadcrumb • Syntax-highlighted code editor: JSON, YAML, Markdown, JavaScript, TypeScript, Python, Bash, HTML, CSS • Image viewer and editor — crop, resize, convert to PNG/JPG/WEBP/HEIC/GIF/ICO, quality control • PDF reader • Media player: MP4, M4V, MOV, MP3, AAC, WAV, MKV, WEBM, AVI, FLV, TS, OGG • Archives: ZIP, TAR, GZIP, BZip2, XZ, 7Z, RAR extraction; ZIP compression • Hardened against archive attacks like zip-slip MEDIA PLAYER (from URL) • MP4, MOV, MP3, M4A, AAC, WAV • HLS live streams (.m3u8) • Custom headers like Authorization and Cookie (HTTPS only) • History of loaded streams NOTES • End-to-end encrypted notes — protected by your app password • Attach photos and files • Attachments open directly in the in-app viewers SECURITY • On-device PBKDF2 (200,000 iterations, SHA-256) and AES-GCM encryption • All connections, passwords, SSH keys, notes, and history stored encrypted • Atomic password change with automatic rollback on failure • Auto-lock — immediate, 1 min, 5 min, 10 min, 30 min, 1 hour • Auto-wipe after too many wrong password attempts (optional; 3, 5, 10, 15, 20) • SSH private keys can be generated inside the Secure Enclave; the key never leaves the device • No data is sent to any cloud. No backend. No account required. WHO IS IT FOR? System administrators, backend and web developers, DevOps and network engineers, and anyone who tinkers with servers and networks. One app, one password, fully local — a professional workstation in your pocket. WHAT CAN YOU DO? • Connect to a remote server via SSH, run commands, tail logs • Transfer files and folders over SFTP, change permissions remotely • Verify DNS, SSL, and redirect chains when launching a new domain • Diagnose network issues with ping, traceroute, public/local IP • Test a REST API, try a WebSocket endpoint • Watch live console output and network traffic in the built-in browser • Download a ZIP archive, extract it, edit the code inside with syntax highlighting

With software, free is usually a question rather than an answer. Here it is arithmetic: no server of ours, no accounts, no analytics — nothing for a subscription to pay for. Sync, startup commands, port forwarding: all of it is in the app. WHERE YOUR KEYS LIVE In your device's keychain. ShellDiver has no account and no sign-in — there is simply nowhere on our side for anything of yours to sit. An Ed25519 key either travels with you through iCloud Keychain, end-to-end encrypted, or stays on this device behind Face ID. A Secure Enclave key is created inside the security chip. It cannot be read out — not even by ShellDiver — never leaves the device, and will ask for Face ID on every sign-in if you want it to. THE VAULT Instead of iCloud you can take syncing into your own hands: an encrypted file in a place you choose. A USB stick, a cloud folder, or your own WebDAV server, so Nextcloud, ownCloud, a Synology, an Apache with mod_dav. It works across different Apple IDs and carries the secrets with it: saved server passwords and private keys. Only your devices encrypt and decrypt. Whoever runs the storage location sees nothing but unreadable files. You add a second device with a QR code, without typing your passphrase there. THE TERMINAL It does not hang up because you looked somewhere else for a minute: the connection belongs to the session, not to the screen. The running build and the half-typed line are still there when you come back. Up to 20 sessions as tabs, terminals and files mixed. Real xterm emulation: colour, UTF-8, resizing that works — htop, vim and colourful logs look the way you expect. Plus search through the scrollback, your choice of monospaced font including Nerd Fonts, and five colour schemes. On iPhone there is a row above the keyboard with esc, ctrl, tab, arrows and a paste key, because a phone has no ⌘V. When the link drops, ShellDiver notices through keepalives and rebuilds it by itself. This is SSH, not Mosh: the new shell starts fresh. SIGNING IN WITHOUT GUESSING ShellDiver asks the server which methods it offers and works through whatever it holds credentials for. That covers publickey followed by keyboard-interactive — 2FA after the key — and equally a server that only offers keyboard-interactive while the host is saved as "password". One-time codes are never pre-filled and never stored. You confirm a host key once, by its fingerprint. Every connection after that checks it, and a key that has changed is refused rather than waved through. THROUGH A JUMP HOST When a server is only open on the inside, you give it a jump host — OpenSSH's ProxyJump. The jump host then forwards nothing but encrypted bytes and cannot read along; both sign-ins are signed on this device. So your key does not have to sit on the machine in between, and a Secure Enclave key works here too. FILES AND TUNNELS The SFTP browser downloads and uploads, whole folders included, renames, and deletes recursively. Local port forwarding brings a database or an admin interface onto this device. It listens on 127.0.0.1 only and cannot be reached from outside; each rule holds its own connection, so a tunnel does not fall with a terminal. WHAT YOU ALREADY HAVE Your ~/.ssh/config is imported, with each IdentityFile matched against the keys you have and any ProxyJump resolved; so is known_hosts, hashed entries as far as they can be matched. Keys come in as Ed25519, RSA or ECDSA — from the OpenSSH container, from PuTTY's .ppk (v2 and v3), and from the PEM family. A passphrase on the file is used once during import and not kept. Snippets are also the buttons above the keyboard — global or bound to one host, with a confirmation step if you want one. One per host runs by itself as soon as the shell is open. The backup is a JSON file you can read — secrets sit inside an encrypted block under a passphrase you choose. Without it nobody gets at them, us included.