Releases: goduni/unissh
Release list
v0.3.1
Downloads
| Platform | File |
|---|---|
| macOS (Apple Silicon and Intel) | UniSSH_0.3.1_universal.dmg |
| Windows (x86-64) | UniSSH_0.3.1_x64-setup.exe — or the .msi |
| Windows (ARM64) | UniSSH_0.3.1_arm64-setup.exe — or the .msi |
| Linux (x86-64) | UniSSH_0.3.1_amd64.AppImage · .deb · .rpm |
| Linux (ARM64) | UniSSH_0.3.1_aarch64.AppImage · arm64.deb · .rpm |
| Android (sideload) | UniSSH_0.3.1_universal.apk — works on any device |
| ↳ smaller, if you know your ABI | _arm64 · _armv7 · _x86_64 · _x86 .apk |
| iOS (sideload, unsigned) | UniSSH_0.3.1_ios-sideload.ipa |
Every platform above ships both architectures, Windows included — so if
your machine is ARM, take the ARM file rather than letting it emulate the
x86-64 one. Nothing here is 32-bit for desktop.
Does this break anything you already have? The changelog answers that
per release, including whether the vault format or server protocol moved:
CHANGELOG.md.
Your OS will block the first launch. These builds carry no Apple or
Windows code-signing certificate — obtaining one would attach a legal
identity to an anonymously maintained project. The way past the warning is
ten seconds per platform:
Installing unsigned builds.
Verify it before you trust it. SHA256SUMS, a minisign signature
over that file, and GitHub build provenance proving this repo's public CI
built these exact artifacts from this exact commit — which is a stronger
claim than a certificate:
Verifying release integrity.
Desktop keeps itself current. After the first install, UniSSH checks
this feed, verifies the download against a signing key compiled into the
app, and installs on your click — never silently. Turn it off in
Settings → About. Mobile sideloads are updated by hand.
v0.3.0
Downloads
| Platform | File |
|---|---|
| macOS (Apple Silicon and Intel) | UniSSH_0.3.0_universal.dmg |
| Windows (x86-64) | UniSSH_0.3.0_x64-setup.exe — or the .msi |
| Windows (ARM64) | UniSSH_0.3.0_arm64-setup.exe — or the .msi |
| Linux (x86-64) | UniSSH_0.3.0_amd64.AppImage · .deb · .rpm |
| Linux (ARM64) | UniSSH_0.3.0_aarch64.AppImage · arm64.deb · .rpm |
| Android (sideload) | UniSSH_0.3.0_universal.apk — works on any device |
| ↳ smaller, if you know your ABI | _arm64 · _armv7 · _x86_64 · _x86 .apk |
| iOS (sideload, unsigned) | UniSSH_0.3.0_ios-sideload.ipa |
Every platform above ships both architectures, Windows included — so if
your machine is ARM, take the ARM file rather than letting it emulate the
x86-64 one. Nothing here is 32-bit for desktop.
Does this break anything you already have? The changelog answers that
per release, including whether the vault format or server protocol moved:
CHANGELOG.md.
Your OS will block the first launch. These builds carry no Apple or
Windows code-signing certificate — obtaining one would attach a legal
identity to an anonymously maintained project. The way past the warning is
ten seconds per platform:
Installing unsigned builds.
Verify it before you trust it. SHA256SUMS, a minisign signature
over that file, and GitHub build provenance proving this repo's public CI
built these exact artifacts from this exact commit — which is a stronger
claim than a certificate:
Verifying release integrity.
Desktop keeps itself current. After the first install, UniSSH checks
this feed, verifies the download against a signing key compiled into the
app, and installs on your click — never silently. Turn it off in
Settings → About. Mobile sideloads are updated by hand.
v0.2.0
UniSSH 0.2.0 — the vault opens both ways, and the window is ours.
Highlights
Your data, portable. Export a whole vault — hosts, keys, snippets, recordings — to a single encrypted .unisshbak that opens with its passphrase alone: no account, no keyset, no server. Restore it into any instance, including one that isn't ours. Most clients compete on how much they can import; this release documents the way out.
Secrets keep their history. Every password and note retains its earlier values — a clock button lists them, newest first, and an old value reveals as deliberately as a live one.
Logins that used to be impossible. Two-factor keyboard-interactive prompts now reach you (one-time codes, push confirmations, forced password changes), and a host can authenticate through the system ssh-agent — FIDO/U2F tokens, smart cards, Secure Enclave, 1Password. Agent forwarding arrives deliberately narrow: one key, one confirmation per signature, and the prompt names where that signature would log in.
The terminal grew up. Session recording as encrypted asciicast v2 with replay and export; a synced snippet library with per-host startup commands; OSC 133 shell integration (jump between prompts, failed commands marked); opt-in GPU rendering; scrollback as a setting with no ceiling; an optional modern-only crypto policy — post-quantum KEX, Ed25519, AEAD only.
The window is ours. The native title bar is gone — the toolbar is the title bar, with window controls left of the logo on Windows and Linux. macOS keeps its real traffic lights, tiling menu included; the bar shapes itself to them and gives back their space in fullscreen.
Hosts feel finished. Right-click any host: connect, SFTP, group membership with one-click toggles. Selection is a frame, not a fill; sidebar numbers mean running now (terminals, active tunnels), not shelf stock; the auth picker explains every option in a sentence.
Wider builds. macOS universal (Apple Silicon + Intel), Linux ARM64, every Android ABI.
Breaking
The per-host tmux toggle is gone — it typed the attach into the PTY and raced the login. Replace it with a startup snippet on the same host: tmux new -A -s main. Existing profiles need no migration.
Vault format extended additively; server protocol unchanged. Upgrade the server first, as always. The full story, including what each change costs, is in CHANGELOG.md.
Downloads
| Platform | File |
|---|---|
| macOS (Apple Silicon and Intel) | UniSSH_0.2.0_universal.dmg |
| Windows (x86-64) | UniSSH_0.2.0_x64-setup.exe — or the .msi |
| Linux (x86-64) | UniSSH_0.2.0_amd64.AppImage · .deb · .rpm |
| Linux (ARM64) | UniSSH_0.2.0_aarch64.AppImage · arm64.deb · .rpm |
| Android (sideload) | UniSSH_0.2.0_universal.apk — works on any device |
| ↳ smaller, if you know your ABI | _arm64 · _armv7 · _x86_64 · _x86 .apk |
| iOS (sideload, unsigned) | UniSSH_0.2.0_ios-sideload.ipa |
Windows is x86-64 only — there is no ARM build for it. Every other
platform here covers both architectures.
Does this break anything you already have? The changelog answers that
per release, including whether the vault format or server protocol moved:
CHANGELOG.md.
Your OS will block the first launch. These builds carry no Apple or
Windows code-signing certificate — obtaining one would attach a legal
identity to an anonymously maintained project. The way past the warning is
ten seconds per platform:
Installing unsigned builds.
Verify it before you trust it. SHA256SUMS, a minisign signature
over that file, and GitHub build provenance proving this repo's public CI
built these exact artifacts from this exact commit — which is a stronger
claim than a certificate:
Verifying release integrity.
Desktop keeps itself current. After the first install, UniSSH checks
this feed, verifies the download against a signing key compiled into the
app, and installs on your click — never silently. Turn it off in
Settings → About. Mobile sideloads are updated by hand.
Full Changelog: v0.1.3...v0.2.0
v0.1.3
v0.1.2
v0.1.1
What's Changed
- Fix/i18n responsive overflow by @goduni in #3
- ci: mobile client builds (Android APK + iOS sideload IPA) by @goduni in #4
- totally rework of website
- and other fixes
Full Changelog: v0.1.0...v0.1.1
Contributors
Assets 12
v0.1.0
UniSSH v0.1.0 — First Public Release 🎉
Your keys, your hosts, your server. UniSSH is a cross-platform SSH client with end-to-end-encrypted vaults that sync through a server you host — no cloud account, no vendor lock-in, and a backend that can't read a single byte of your data.
This is the very first public build. The full stack — shared Rust core, Tauri clients, and the zero-knowledge sync server — is here and working.
✨ Highlights
🔐 Zero-knowledge vaults
All vault content is encrypted on your device before it leaves. The server stores ciphertext and a little routing metadata — it never holds the keys to decrypt anything. Backed by SQLCipher, per-item keys under a per-vault key, with version history and type-gated reveal (private keys can never be exported through the UI).
🖧 Real SSH, straight to your hosts
Key / password / certificate auth via a built-in in-memory agent, interactive PTY sessions with resize, streaming exec, auto-reconnect with backoff, and strict TOFU host-key pinning — a host-key mismatch is always surfaced, never trusted silently.
⚡ Fleet operations
Multi-host exec by group, tag, or hand-picked hosts, cluster-ssh-style broadcast, and fleet-push a file to many hosts over SFTP in one shot.
📁 SFTP & tunnels
Resumable, parallel transfers with live progress, plus local / remote / dynamic (SOCKS5) tunnels and ProxyJump chains.
🔄 Self-hosted sync (optional)
Stand up your own server with Docker in minutes. Device + team sync of encrypted blobs, cryptographic vault roles, membership, sharing, and revocation. Local-only mode is the default and needs no server at all.
🎨 Actually nice to look at
A unified light/dark Theme picker, the Nebula base with accent presets, the pink Candy Holo theme, and 9 linked terminal palettes. Self-hosted and zero-knowledge doesn't have to mean spartan.
📦 Downloads
| OS | Artifact |
|---|---|
| macOS | UniSSH-0.1.0.dmg — drag to Applications |
| Windows | UniSSH-0.1.0-setup.exe / .msi |
| Linux | UniSSH-0.1.0.AppImage (portable) or .deb |
⚠️ Unsigned builds. These release binaries ship without a paid developer certificate, so your OS will show a one-time warning on first launch. The 10-second "open anyway" steps per OS are in the README under Installing unsigned builds. Prefer to trust nothing but your own compiler? Build from source.
🚀 Getting started
- Grab the build for your OS above and launch it.
- Pick a Local vault — you're done, no server required.
- Want sync across devices or a team? Spin up a server with
docker compose up -d --buildand claim your instance.
Full quick-start, self-hosting guide, and threat model are in the
README.
🛠️ Built with
Rust core (crypto · vault · SSH · agent) · Tauri v2 + React clients · axum zero-knowledge server.
macOS · Windows · Linux · iOS · Android from one codebase.
📄 License
Dual-licensed under MIT OR Apache-2.0.
Feedback, issues, and PRs welcome. Security reports go privately to
uni@goduni.me.