SSH · Telnet · Serial · Raw socket

Every connection you manage, in one fast place.

TermZ is a cross-platform terminal and connection manager with an encrypted credential vault, full-text search, and per-session logging — a modern, open alternative to SecureCRT. Native, not Electron.

macOS · Windows · Linux — open source, MIT licensed

Workspace FoldersBy type
TermZ ⌘KSearch sessions, folders, tags, types… Sync
Filter by name, host, user, tag…
Datacenter / East412
core-rtr-01ssh
dist-sw-04ssh
edge-fw-02ssh
Lab / Serial38
Cloud / VPC211
bastion-use1ssh
1335 sessions ▾ VIEWS Home View
View 1 ×
core-rtr-01
termz ❯ ssh core-rtr-01
→ resolving core-rtr-01 [ssh · 10.0.4.1:22]
✓ host key pinned (TOFU) ed25519 SHA256:Kx9…7fQ
✓ vault unlocked Argon2id · ChaCha20-Poly1305
✓ connected logging → ~/Logs/termz/core-rtr-01.log
 
core-rtr-01# show ip int brief
Interface IP-Address Status
Gi0/0 10.0.4.1 up
Gi0/1 10.0.8.1 up
Lo0 10.255.0.1 up
 
termz ❯
View 1 SFTP
5
Protocols in one app
0
OS keychain dependencies
24-bit
True-color WebGL terminal
MIT
Open source license
Built for a large fleet

Everything you need to manage connections

From a single SSH session to thousands of devices across folders, tags, and types — TermZ keeps it fast and organized.

Connect to anything

SSH (password, key, agent), Telnet with full IAC negotiation, raw TCP sockets, serial, and a local shell — all as tabs in one window.

Encrypted vault

Argon2id + ChaCha20-Poly1305 over SQLCipher. A single portable, file-backed vault with no OS keychain dependency.

Full-text search

Search every session by metadata with a filter syntax — user:, port:, tag:, type: — and a ⌘K quick switcher.

Session logging

Clean, escape-stripped transcripts with path templates, per-line timestamps, regex output masking, and gzip-on-close rotation.

Trusted by design

First-use host-key pinning (TOFU) with a hard block on fingerprint mismatch and an append-only audit log of trust decisions.

SFTP file transfer

Browse, upload, and download over the same authenticated SSH connection, with native file dialogs.

Organize

A folder tree built for thousands of devices

Drag-and-drop folders, a by-type view, tags, free-form notes, and equipment types with built-in icons for servers, switches, routers, firewalls and more.

  • Bulk-import sessions from JSON
  • Live per-connection status dots across tabs
  • Custom, sanitized SVG icons for your own gear
Datacenter / East— 412 sessions
core-rtr-01ssh · router
dist-sw-04ssh · switch
edge-fw-02ssh · firewall
Lab / Serial— 38 sessions
console-aggrserial · 9600 8N1
Secure

Secrets that never leave the backend

Credentials stay inside the Rust core end-to-end, zeroized in memory, and are never serialized to the UI or the search index. Optional app-lock rekeys the whole database to a master password.

  • Named credential library, reusable across sessions
  • Transactional bulk credential rotation
  • Per-session & global key-exchange control
vault.dbSQLCipher · sealed
kdfArgon2id
aeadChaCha20-Poly1305
memoryzeroized on drop
ui exposurenever
app-lockrekey: storage-key transition
Native

A real terminal, in a small native app

xterm.js with the WebGL renderer, true 24-bit color, and proper resize handling — shipped with Tauri 2 and Rust as a small native binary for macOS, Windows, and Linux. No Electron bundle.

  • Light/dark themes + a custom theme editor
  • Keyword highlighting that retints with each theme
  • Whole-app UI scaling + independent terminal zoom
app shellTauri 2 · native webview
backendRust + tokio
frontendSvelte 5 + TypeScript
terminalxterm.js + WebGL
searchtantivy full-text
~12 MB installernot 200 MB
Security first

Trust, but verify — and audit

TermZ treats connection security as a feature, not an afterthought.

TOFU host-key pinning

First-use pinning with a hard block on fingerprint mismatch, plus an append-only audit log of every trust decision you make.

Modern key exchange

Curve25519, ECDH P-256/384/521, and DH group14/16, with legacy fallbacks for older gear — controllable per session.

Honest about plaintext

Telnet and raw sockets have no encryption or server identity — TermZ surfaces that clearly in the connect UI so you choose with eyes open.

Security issues? Please report them privately via the project's SECURITY policy — never through public issues.
Free & open source

Get TermZ on your machine

Download the native installer for your platform, or build from source. No account required.