OSH vs Bolt SSH

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.

Bolt SSH — the SSH terminal made for your phone Everything you need to manage servers from your phone, without the friction. Bolt SSH keeps your hosts and keys organized, locks tight behind biometrics, and gets you reconnected fast when mobile networks drop. Works with Linux/Unix servers and Windows PowerShell (sshd) out of the box. Reconnect without the hassle • Automatic reconnect, plus one-tap manual reconnect from the status bar • Returns you to your remote working directory after reconnecting — no re-cd-ing • Real terminal rendering (xterm.js) with an aux key bar (Esc / Tab / arrows / Ctrl) Security first • App Lock with Face ID / fingerprint — locks the instant you background the app • Trust-on-first-use + known_hosts verification; instant alert on host key change to help stop man-in-the-middle attacks • Private keys and passwords stored in the device secure enclave (Keychain / Keystore), never in plaintext Effortless management • Multi-host manager with color labels, recent-first ordering, and duplicate / edit / delete • Multiple keys — import or paste private keys (OpenSSH / RSA PEM) with passphrase support • English & Chinese Free to download — core features work out of the box. Everything runs locally; nothing routes through our servers.