SSH Manager — native SSH configs, keys & tunnels for macOS
Developer Preview · TestFlight<br>The SSH config editor<br>macOS deserves.<br>Manage every host, key, tunnel and agent — all from one beautiful native app. Free to start. Yours forever for $14.99.<br>Download free Buy Pro — $14.99<br>In-process tunnels 4 forward types ProxyJump App Sandbox
In-process<br>0 subprocesses, no Terminal
-L · -R · -D<br>every forward type
ProxyJump<br>multi-hop bastion chains
App Sandbox<br>Keychain-backed secrets
Everything in one place<br>The whole SSH workflow, without the terminal gymnastics.<br>Six tools that usually live across a dozen man pages, dotfiles, and shell aliases — rebuilt as one focused Mac app.
Lossless config editor<br>Edit ~/.ssh/config visually. Reorder hosts, tweak directives, manage Includes — comments and formatting are preserved byte-for-byte.
In-process tunnels<br>Run -L, -R, and -D forwards over a single SSH link. Multiple forwards per tunnel, live throughput, and auto-retry with backoff.
Key & agent manager<br>Inspect and use ed25519, ECDSA, and RSA keys. ssh-agent and external-signer auth are built in — passphrase keys decrypt natively.
known_hosts, handled<br>Search, review, and prune known_hosts. New hosts get a TOFU prompt with full fingerprint verification before you ever connect.
Version history<br>A git-style time machine for your config. Every edit is a content-addressed commit you can diff, branch, and restore in one click.
Multi-hop ProxyJump<br>Chain bastions with ProxyJump and SSH Manager builds the entire path in-process — no nested ssh subprocess, no shell required.
Config editor<br>Edit ssh_config without breaking it.<br>A lossless parser reads and rewrites your config so the bytes you didn’t touch stay exactly as they were. Hand-edit in a real editor, or let the UI do it.<br>Comments, blank lines, and indentation survive every save<br>Include directives are parsed and followed, never flattened<br>App-only data (tunnels, tags, favorites) never touches your config
~/.ssh/config<br># Work bastion — jump host<br>Host bastion<br>HostName bastion.acme.io<br>User deploy<br>IdentityFile ~/.ssh/id_ed25519<br>ForwardAgent yes
# Reached through the bastion above<br>Host prod-db<br>HostName 10.0.4.12<br>ProxyJump bastion<br>LocalForward 5432 localhost:5432
Active forwards one SSH link<br>-L localhost:5432 → 10.0.4.12:5432<br>Local forward
-R bastion:8080 → localhost:3000<br>Remote forward
-D SOCKS5 proxy on :1080<br>Dynamic / SOCKS
prod-db · via bastion ↑ 12.4 · ↓ 3.1 MB/s
Tunnels<br>Tunnels that run inside the app.<br>Because the sandbox can’t cleanly launch Terminal, SSH Manager speaks SSH itself — over swift-nio-ssh. Start a tunnel and it’s supervised: health-checked, retried with backoff, and metered live.<br>Many forwards, one link<br>Bundle -L/-R/-D per tunnel
Live throughput<br>Per-tunnel up/down metering
Security model<br>Built for the sandbox, not around it.<br>SSH Manager treats your keys and network access as privileges, not assumptions. The architecture is the security story.
Runs in the App Sandbox<br>Full com.apple.security.app-sandbox entitlement. ~/.ssh access is a user-granted, security-scoped bookmark — nothing else is touched.
Tunnels never shell out<br>The engine speaks SSH in-process over swift-nio-ssh. No ssh subprocess, no Terminal, no quarantine stripping.
Secrets stay in Keychain<br>Private keys and passphrases are protected by the system Keychain and verified against known_hosts on every connect.
🧪<br>Join the Developer Preview<br>Get early access to upcoming features before they ship to the App Store. Beta testers get every Pro feature unlocked during the preview period.<br>Apply for Beta Access
$14.99 — own it forever. One payment, no subscription, free updates for 1.x.<br>Buy Pro now
$14.99, once. Yours forever.<br>A one-time purchase — no subscription, no account. Universal binary, signed and notarized, with free updates across the entire 1.x line.<br>Buy & download Compare what’s included
ennldeel