A minimalist SSH client for iPhone.

A key rail on the screen edge, and gestures for history and scrolling.

The key rail sits on the edge of the screen you choose: arrows, esc, tab, interrupts, and a ctrl that latches for the next key. Which keys, and which edge, are configurable.

Dragging the terminal steps through your command history. A toggle switches the same drag to scrolling the buffer, and switching back returns you to the live line.

Private keys are generated in the Secure Enclave and cannot be exported.

The default key is a P-256 key created inside the Secure Enclave. There is no API to export it, and every use of it requires Face ID.

Servers that only accept ed25519 get a software key instead; it is encrypted at rest with a Secure Enclave key and also requires Face ID. The app has no accounts, no telemetry, and connects to no servers other than the ones you configure.

Every host is verified on first connect. You approve its SHA-256 fingerprint, and the handshake is blocked if a known host's key ever changes. A Trusted host keys screen shows every pinned fingerprint, so you can copy one to check it, forget one to re-verify, or forget them all.

And when you want a clean break, Erase everything wipes all local data behind a typed confirmation — hosts, saved passwords, host-key pins, Secure Enclave identity keys, and stored API keys. Nothing recoverable is left on the device. Your one-time purchase is the only thing kept, because it lives with your Apple ID rather than the device — Restore Purchase brings it back.

// Face ID required for every use of the key.
let access = SecAccessControlCreateWithFlags(
    kCFAllocatorDefault,
    kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
    [.privateKeyUsage, .biometryCurrentSet],
    &cfError
)

// Generated inside the Secure Enclave. There is no export API.
try SecureEnclave.P256.Signing.PrivateKey(
    accessControl: access
)

Sessions reconnect on their own.

When the app is backgrounded or the network drops, Outrigger reconnects as soon as it can, with scrollback intact. You can give a host a startup command so tmux reattaches on every connect, which keeps the server-side session alive between connections.

The ✦ assist runs on device by default. It reads your scrollback to summarize what happened while you were away, and that text never leaves the phone. You can instead add your own Anthropic or OpenAI API key, in which case requests go directly from the phone to that provider.

The free version does not expire.

• 1 host
• 5 snippets
• On-device ✦ assist (iPhone 15 Pro or later)
• All four house themes

One purchase covers all features and future updates.

• Unlimited hosts and snippets
• Cloud ✦ assist with your own Anthropic or OpenAI key
• Additional themes
• Family Sharing

• No subscription
• No accounts
• No analytics SDKs
• No ads
• No cloud sync of keys; they stay on this phone and never enter a backup