Termora SSH vs OSH

Termora — a fast, native SSH client built for iPhone. Connect to your servers, run a full interactive terminal, and manage your SSH keys — all in a clean, native iOS app designed for speed and security. FEATURES • Full interactive terminal — ANSI/VT with support for full-screen TUIs (htop, vim, tmux, and more) • Save hosts with password or SSH-key authentication • On-screen key bar: esc, tab, ctrl, alt, arrows, and common symbols • Generate Ed25519 keys on device, or import your existing OpenSSH keys • Quick Connect for one-off sessions — nothing is saved • Multiple simultaneous sessions with a fast switcher • Terminal themes: Dracula, Nord, Solarized, Gruvbox • Bell and cursor options SECURITY FIRST • Private keys and passwords are stored only in the iOS Keychain — never in plain files or logs • Optional Face ID / passcode app lock • Strict host-key verification (TOFU): you approve a server's fingerprint on first connect, and a changed key hard-fails to protect you from man-in-the-middle attacks Termora is local-first and single-user. No accounts, no tracking, and no servers of ours in between — your connections go straight from your device to your hosts. Supports Ed25519 and RSA keys.

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.