VERSION HISTORY

Release notes

Every security fix, improvement, and new feature, documented, release by release.

2.3.0 Current October 11, 2026 Breaking 2 Security 1 Improvements 5 Fixes 17
Release No More Surprise Bans, Keys Fixed on Phones and Terminal Repairs
Breaking 2
  • The checks of whether your hosts can be reached are now off until you turn them on (Settings > Check whether hosts are reachable). They connected to every saved host every 20 seconds and hung up without signing in, which a server logs, and which got people banned from their own servers by fail2ban. With them off the reachable dots on the Hosts page are gone; a host with an open session still shows as connected. Turning them on asks first, says what a server sees, and the interval you pick is now really used
  • Sign-in details are no longer sent over plain http to addresses on the public internet. WebDAV sync, a custom sync server and Prometheus with a login may use http only on your own network; use https for anything else
Security 1
  • Hardened the SSH handshake: a key exchange now takes exactly one answer from the server, and anything else ends the connection
Improvements 5
  • Android: a new switch, Settings > Terminal > Incognito keyboard. Turn it off if your keyboard (SwiftKey among them) does not work well in the terminal
  • Sync says plainly when it is off, behind or failing, in the status bar and on the account page, and clicking the version in the status bar checks for an update
  • PuTTY keys with a passphrase (PPK version 3) can be imported: the app asks for the passphrase. A key that cannot be imported says why, once, in your language
  • Server Monitor and the latency figure use the connection a session already has, and Server Monitor no longer dials again and again a host that refused its sign-in
  • A confirmation whose text does not fit a small window scrolls, and its buttons stay in reach
Fixes 17
  • Phones and tablets: a key from a physical keyboard was sent twice. Arrow up skipped the last command, and the cursor in vim and other editors moved two places. The same happened in a pop-out window on a computer
  • Android: the search on the Hosts tab found nothing. It now filters by name, address, user and group
  • Windows: opening SFTP froze the window for up to half a minute when a mapped network drive was not reachable
  • Terminal: selecting, searching and highlighting broke after a full-screen program such as vim or nano had scrolled, and colour schemes lost their background until a repaint
  • Terminal: after clear, a selection landed some rows below what was dragged over, and a right or middle click now pastes when the button is let go, which mends pasting over remote desktop tools
  • Terminal: after the scrollback had filled up, changing the width of a terminal scrambled the screen or stopped its output. This is the likely cause of the crash with many sessions in one group
  • Terminal: dialogs of Debian tools closed by themselves on a session whose TERM is linux, because the terminal answered codes that were no question
  • A snippet of several lines written on Windows ran double spaced: both characters of its line ends were typed as Enter
  • The three dots menu on snippet cards, trigger cards and History rows did nothing
  • A host with two sessions was shown as closed once the first of them ended
  • Sync: a device whose sync keys no longer matched the account showed Could not reach the sync server over and over. Sync now pauses and says what to do
  • Sync now in Settings did nothing but say Syncing. It syncs, and says what happened
  • Android: WebDAV sync over http to a server on your own network was refused
  • Server Monitor: the CPU figure of a Linux host was its load average, so an idle container could read 100%, and a host back within its limits stayed marked for several checks
  • The Hosts page did not scroll with a touchpad, or with mouse wheels that scroll smoothly
  • Renaming a file in SFTP on a computer selected the whole name instead of the part before the extension
  • A session dragged out of a group left the selection and the keyboard focus on another pane
2.2.1 September 24, 2026 Improvements 3 Fixes 6
Release Jump Host Sync Fix, Face ID Vault and a Folding Sidebar
Improvements 3
  • Desktop: an arrow at the top of the narrow sidebar folds it into a strip of icons and back, Ctrl+B does the same outside a terminal, and your choice stays after the app restarts
  • SFTP batch rows name what you dragged, like rag-corpus, pipeline +1 · 67 / 70 files, instead of only a count
  • Sign out everywhere now says plainly that it cannot erase what a lost device already stored, so change the passwords and keys it held too
Fixes 6
  • Sync stopped for good on a device that connected to a server through a jump host while your other device still had that server's key saved for a direct connection: every sync and Restore from cloud failed with a database error (UNIQUE constraint failed) until the app's data was cleared. Both copies are now kept, so both devices trust the server both ways, and a device that was stuck syncs again once it updates
  • A host key saved twice for the same server no longer breaks that server's host key check and every sync
  • The macOS app quit at launch ("ZestSSH quit unexpectedly") in every download since 2.0.0: its signature switched on a macOS check that the bundled frameworks could not pass. The 2.2.1 download opens
  • iPhone and iPad: with the vault bound to Face ID or Touch ID, enrolling a new face or finger locked the vault for good. The vault key now also accepts the device passcode and survives a new enrollment; it moves to the new setting at the first unlock after updating (one Face ID prompt). A vault already locked by an earlier change cannot be recovered this way: restore it from a backup or Cloud Sync
  • tmux session counts on your hosts stopped saving after the app locked and unlocked
  • On desktop, the sidebar stayed as icons when the Hosts panel was switched on but hidden on the Hosts page
2.2.0 September 23, 2026 Breaking 1 Security 4 Features 2 Improvements 4 Fixes 5
Release Two-Step Sign-in, Signed-in Devices and Sync Fixes
Breaking 1
  • Update ZestSSH on every device you sync. 2.2.0 adds your account's own keys to the synced data, so once one device updates and syncs, devices still on 2.1.1 stop syncing and ask to be updated. Update phones and tablets before you turn on two-step sign-in too: older versions there cannot ask for the code
Security 4
  • Two-step sign-in: signing in to your ZestSSH account can also ask for a six-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Bitwarden and others). Set it up in Profile > Security on phones and tablets, or at zestssh.com/account/security on Windows, macOS and Linux. Ten recovery codes, shown once, turn it off if you lose your phone, and your address gets an email when one is used. Firebase Authentication, the sign-in service ZestSSH uses, keeps the authenticator's secret and checks your codes; the secret is shown once on your device so you can add it to your authenticator app, and never reaches ZestSSH Cloud, which keeps only keyed hashes of your recovery codes. Free
  • Signed-in devices: Profile > Devices lists every device signed in to your account with its platform and sign-in date. Sign one out, or sign out everywhere (which also ends Google sign-ins), after a fresh sign-in, so a stolen device that is still signed in cannot sign you out. Nothing else about your devices is kept: no hostname, OS or app version, IP address or last-active time. Free
  • ZestSSH Cloud keeps no activity logs: no record of your syncs, sign-ins or account changes, and no IP addresses. The services around it (Firebase for sign-in, Cloudflare for the network, Stripe and the app stores for payments) work under their own policies, named in the privacy policy, and the app shows the updated policy once
  • Account keys: every account that syncs gets its own encryption and signing keys, made on your device and carried in your encrypted sync data, ready for sharing with a team in 3.0. Nothing changes in how you use the app
Features 2
  • SSH servers that ask for a one-time code (an authenticator or Duo through PAM, RSA SecurID, a YubiKey) now work: the server's question appears in a dialog that says it comes from the server, you answer it, and your saved password only ever goes to a real password prompt, once. Background connections (monitors, automation) still answer nothing
  • Delete account deletes at once: sign in again, enter your sync password when ZestSSH Cloud holds your data, and the account, its synced data and its sign-in are removed and checked gone before the app offers to wipe this device
Improvements 4
  • SFTP conflict prompts count every file in a folder upload before it starts: Conflict 1 of 4, and Do this for the remaining 3 conflicts. When a count cannot be known in advance it counts up instead of guessing, and Replace if newer appears only while more conflicts follow
  • On Windows the local SFTP pane shows the Windows attributes that are really set (R read-only, H hidden, S system) instead of a made-up drwxrwxrwx, and no longer offers a Permissions dialog that could change nothing there
  • The Activity panel stops a live transfer with a red stop square, while the grey x only removes a finished row from the list, and the pane footer says what its size covers once folders are selected
  • Rename tree takes effect everywhere, the Teams screens say they arrive in 3.0, and the tab menu's last copy entry is gone
Fixes 5
  • Profile > Sync now overwrote edits made on your other devices: it pushed this device's copy without merging. It now pulls, merges and pushes like the background sync, and says what stopped it instead of reporting success
  • Self-hosted sync (WebDAV, S3, Google Drive): after the sync password changed on one device, another device could break the store so no new device could join. Key material now travels only with the key it belongs to
  • Delete account failed for accounts made with older settings, or after the sync password was changed on another device
  • On desktop, Sign out from the Tree menu and Manage Tree said Signed out but stayed signed in
  • RSA certificate logins work on current OpenSSH servers (they announced the wrong algorithm), and certificates on hardware keys, and keys in a forwarded agent, can sign
2.1.1 September 22, 2026 Features 2 Improvements 4 Fixes 2
Release Host Icons, Smarter SFTP Replace and Transcript Fixes
Features 2
  • Host icons redrawn: 130 line icons in eight categories (hardware, network, cloud, services, security, places, tags) and 31 OS and platform marks, all in one white style and tinted with the host's own colour, so a red production box gets a red icon and a blue lab box a blue one. The picker has search and category sections, and every icon you already chose keeps its meaning
  • A tmux button beside Snippets in the session bar: one click opens tmux on that host, and once attached it shows the session name and opens the sessions menu (switch, new, resync, detach, kill)
Improvements 4
  • Transcripts made honest: Save transcript so far writes everything on screen, scrollback included, whether or not you were recording; Record transcript from now is its own choice; and Stop recording saves first (a cancelled save keeps recording). Every save asks where and whether to encrypt, then ends with the path, a Show in folder button and an entry in the notification bell
  • SFTP Replace changed files now compares content when a same-size file has a different modification time, so a rebuilt folder (new timestamps, same bytes) is no longer re-uploaded in full: both ends are checksummed, unchanged files are skipped, and the drop says how many it skipped, or that everything was already up to date
  • Tab menu: Copy SSH command is gone, and Close others / Close all only appear when there is another tab
  • Account emails (address confirmation, password reset) arrive branded and readable instead of the bare default, and the connection log records the negotiated key exchange, cipher and host key type
Fixes 2
  • The pop-out SFTP editor opened as a blank grey window: the window carried no translations, so the editor failed to build and showed only a grey error box. Pop-out windows now render in your language, and a build error in one is printed instead of hidden
  • Stopping a transcript recording used to throw the recording away, on desktop and on mobile; it is saved now, and the app says where
2.1.0 September 22, 2026 Security 2 Features 3 Improvements 2 Fixes 2
Release Post-Quantum SSH, Session Logs and Eternal Terminal
Security 2
  • Post-quantum key exchange: every SSH connection now offers mlkem768x25519-sha256 (the OpenSSH 9.9+ default) and sntrup761x25519-sha512 (the OpenSSH 9.0 to 9.8 default) first. Both pair a post-quantum KEM with X25519, so a recording of your session cannot be decrypted later by a quantum computer, and a server without them simply negotiates the classic exchange. ML-KEM-768 is checked against the NIST FIPS 203 vectors, both were verified against OpenSSH 10.2, and the session details show a Post-quantum badge when one was used
  • A cleartext key-exchange reply that happened to have a certain length was rejected with Invalid padding length when ChaCha20 or AES-GCM had been negotiated (seen with ecdh-sha2-nistp256 and an Ed25519 host key). Padding is now checked against the cipher actually in force
Features 3
  • Session log to file: log every session to a plain-text file as it happens, PuTTY and SecureCRT style, with the escape sequences stripped so it reads like the screen did, an optional timestamp on every line, one file per session that a reconnect appends to, and tmux panes marked inside it. Off by default and unencrypted on purpose (a session's secrets end up in the file); pick the folder on desktop, share or delete the files from Settings on mobile
  • Eternal Terminal (ET) as a connection protocol: sessions that survive network drops, sleep and roaming and come back with their scrollback intact. Runs the system et client like Mosh does (WSL on Windows, desktop only), with your SSH port and key handed to its handshake
  • Remote copy to clipboard (OSC 52): let tmux, Vim and Neovim on the remote host put text on this device's clipboard. Off by default because the host then decides what your next paste contains; reading your clipboard is refused whether it is on or off, and it works inside tmux panes too
Improvements 2
  • Workspaces reworked: neutral cards where red means only that a host is unreachable, an open now tag on the workspace that is open, a single-workspace editor with an Add host row, an honest Replace with current layout caption, a trash icon on pane rows, All workspaces as its own list screen, and a sheet that sizes to its content
  • curve25519-sha256 (the RFC name) is offered next to [email protected], and the encrypted-transport lock in the sidebar now shows for Mosh and ET too
Fixes 2
  • The pop-out SFTP editor and detached terminal windows take input again on Windows (the multi-window plugin registered a second channel that swallowed the first)
  • A Serial or Local Shell host no longer arrives on another device as an SSH connection to a nonsense address after sync
2.0.0 September 22, 2026 Features 10 Improvements 7 Fixes 7
Release Triggers, Command History, tmux and 12 Languages
Features 10
  • Triggers: watch terminal output for a pattern (regex, optional case sensitivity, one host or all) and get a notification, a sound, or a coloured highlight where it appears. Three ready-made examples for errors, warnings and finished builds, a live test line while you write the pattern, and a match count on every card. Free, and synced across your devices
  • Command history: every command you run is recorded on this device with where and when it ran, plus exit code, duration and working directory when your shell reports them (OSC 133 / OSC 7). Searchable, grouped by day, repeats collapsed, and one click turns a past command into a snippet. Recording is opt-in per device, password prompts are never captured, secrets typed into a command are dropped, and the history syncs end-to-end encrypted
  • tmux control mode: open a tmux session on any host from Ctrl+Shift+X, the command palette, the host menu, or by typing tmux -CC in the terminal, and its windows become tabs and its panes real panes inside the session tab. Copy and paste, split, zoom, rename, close and kill from a menu, a session picker that shows which sessions are idle or in use, session badges on host cards, and re-attach to anything you left running. Free
  • 12 languages: Spanish, French, German, Italian, Portuguese, Russian, Japanese, Korean, Chinese, Arabic and Hindi across every screen. System default follows your device and falls back to English
  • What's new in the app: this changelog opens from Help and from Settings > About, and Report a bug opens the in-app form with your build info attached
  • Setup guides: a ? button on Automation, Snippets and Server Monitor opens a guide for your OS in a side panel
  • Desktop onboarding: Import from SSH config reads ~/.ssh/config for you and shows the hosts to pick, and Scan the local network and Restore from sync are proper dialogs instead of pushed screens
  • Sign in with an email and password (with address confirmation), a copyable Account ID on your profile for support, and Redeem a code under Settings > Account
  • The SFTP text editor pops out into its own window, and a per-host startup command or snippet runs the moment a session opens
  • Host cards, your way: three sizes that share one height (just the icon, the icon and name, or the full card), a 50-icon catalog or your own uploaded image per host (synced), and a dashed New Connection tile at the end of the grid
Improvements 7
  • Settings rebuilt: one page with Appearance, Keyboard shortcuts (with a search box), Security (app lock, PIN, encrypt at rest, hardware-backed encryption, host keys) and Notifications as their own pages on desktop, a drill-down list on mobile, and an Account panel with one shape whether or not you are signed in
  • Recording mode lives on the REC button in the top bar with a Layout or Strict level. Strict hides Command history entirely, Layout shows stand-in commands, and trigger names, patterns and snippet commands are masked as well
  • The desktop rail is grouped into Manage and Utilities, Triggers and Command history are two-pane screens built on the same components as Snippets, and mobile has a Utilities tab
  • Reorder hosts by dragging a card straight where you want it in Sort: Manual (the separate Arrange mode is gone), and Open tmux sits in the host context menu
  • Regroup terminals by dragging: drop a pane onto another group's header to move it in, or onto empty header space to pop it out into its own group, and the panes you leave behind rebalance to fill the space
  • Keep Screen Awake and Cursor Blink do what they say, copy on select is on by default, and jump-host routing on the free tier is enforced where the connection is made, with a one-time notice
  • Wording aligned everywhere: Juiced is hosted ZestSSH Cloud storage, sync itself is free on every backend you run, and there are no subscriptions
Fixes 7
  • macOS: Ctrl+Cmd+F toggles full screen, the top bar no longer leaves a dead gap where the traffic lights sit while full screen, and the title bar reserves the traffic-light zone in every layout
  • Windows: the discrete-GPU forcing is off by default (the black-screen-on-resize workaround stays available), and the New Host dropdown opens the real editor
  • The server's login banner, the notice many hosts show before you sign in, appears in the terminal ahead of the first prompt
  • A hostile or broken host cannot make the tmux workspace allocate the app out of memory: pane sizes and reply blocks from the wire are bounded
  • At the free-tier session limit, closing a session and opening another no longer makes you wait out the close delay: the one you closed frees its slot right away, and a session that is staying open is never touched
  • Ctrl+W reaches the terminal again (nano's search, readline delete-word) instead of closing the tab; closing a tab moved to Ctrl+Shift+W
  • Double-encoded characters in translations, the health-checks and paste toggles now working, the Rate-app link pointing at the real store listing, scrollback help stating the real default, wrapped commands recorded as one history entry, and the SFTP conflict dialog keeping its four choices on one row with a default that follows the operation
1.9.8 September 10, 2026 Improvements 4 Fixes 2
Release SFTP Conflict Dialog
Improvements 4
  • The SFTP overwrite-conflict dialog is a cleaner fixed-width window: local and remote line up in one two-column compare so you can read them against each other, all four choices sit on one row with the full wording in their tooltips, and a long path wraps at its separators instead of truncating
  • Folder sync remembers your Verify by content choice for each folder pair, so a folder you rebuild and redeploy keeps content checking on without re-ticking it, while your other folders stay on the faster size and date comparison
  • Mobile: a Help button in the top bar on every tab opens Help and Support, so the Discord community, the FAQ, report a bug and email are all one tap away
  • The Help panel marks its rows in colour: the Discord community in Discord's blurple, Report a bug in red and Suggest a feature in amber
Fixes 2
  • When the remote file cannot be read, "Replace if newer" is turned off with the reason shown, since it cannot compare ages, and "Keep both" becomes the default so a single click never overwrites a file you cannot see
  • Folder sync now warns you before a run when a server does not keep the timestamps ZestSSH sets, so unchanged files are being compared by size alone, and points you to Verify by content
1.9.7 September 9, 2026 Features 5 Improvements 5 Fixes 7
Release Help Panel, Recording Mode and In-App Reports
Features 5
  • Help panel: the ? button opens a docked panel beside the app with the most common questions first, then Report a bug, Suggest a feature and Get help, with the version and service status in its footer, in place of the old shortcuts list
  • Report a bug and Suggest a feature from inside the app: a short form posts straight to the ZestSSH Discord forums, anonymous unless you type a Discord handle, with a preview of exactly what leaves your device. Only six facts ride along (app version, build, platform, OS version, language, plan), never logs, hosts or settings
  • Recording mode: one switch hides host names, addresses, usernames, key names, saved-password labels, group, workspace and network names, SSIDs and fingerprints across the whole app for screenshots and screen shares, with Layout and Strict levels, Ctrl+Shift+R, and a reveal guard on anything that would show a real value
  • Copy redacted screenshot puts a masked PNG of the whole window on the clipboard in one click, with a Save as PNG option, without turning recording mode on
  • SFTP remembers the last folder you had open per host and reopens there, and the host default follows you to other devices through Cloud Sync
Improvements 5
  • The command palette shows every action's current key binding on its row, and keyboard shortcuts now live in Settings where they can be changed
  • Get help points to a private Discord ticket or email; the address is shown with a copy button rather than a bare mail link
  • Tab and Shift+Tab now walk every form, multi-line fields included; the file editor keeps Tab for indenting
  • Screenshots attached to a bug report are redacted by default, and a report that cannot be sent waits inside the encrypted database until the next launch delivers it
  • Sending a report needs no account; a signed in account is used only for rate limiting and is never shown in Discord
Fixes 7
  • A local delete that the Recycle Bin or Trash cannot take (a network drive, a disabled bin, an oversized folder) now asks before deleting permanently instead of doing it silently
  • Restored tabs, saved workspaces and the folder-pin counters now live inside the encrypted database instead of plain preferences
  • Windows 11 clipboard history (Win+V) now pastes into the SFTP editor and every other text field; the flyout injects a keypress without a scan code, which the app now repairs before Flutter sees it
  • Row hover no longer paints the theme's text colour as a fill on Dracula, Monokai and similar themes
  • Testing a connection to an already trusted host no longer refuses its host key
  • Documentation links open docs.zestssh.com instead of a dead page on the main site
  • Reopening SFTP no longer falls back to the home directory when the remembered folder was deleted on the server: it walks up to the nearest parent that still exists and says so
1.9.6 September 9, 2026 Features 3 Improvements 4 Fixes 3
Release Sync Folder to Server
Features 3
  • New "Sync folder to server": pick a local folder and push only what changed. A preview shows exactly what will upload, what is new, what is skipped, and what exists only on the server, all before anything moves, and there are no per file prompts
  • "Verify by content" compares the actual file contents rather than the timestamp, so a file you edited locally and upload weeks later is still detected as changed and sent
  • "Preview only" dry run shows everything a sync would do without sending a single file
Improvements 4
  • Re-syncing an unchanged folder is now near instant: identical files are recognised from a local record of the last upload, and the server is listed one folder at a time instead of one file at a time
  • Deleting files that exist only on the server is opt in, listed by name, runs last after every upload succeeds, and honours the undo window
  • Servers that do not allow setting file timestamps are handled: the app tells you once and compares by size, instead of silently re-uploading the whole folder every time
  • Accented filenames are matched correctly across macOS and Linux, plus a "Force re-upload everything" option for when you suspect a bad earlier upload
Fixes 3
  • "Replace only when local is newer" no longer silently skips a file that changed but has an older timestamp: those files are counted and you can send them in one tap
  • The overwrite conflict counter now shows the real number of files that differ, so re-syncing a large folder with a few changes no longer reads like a huge conflict
  • Case colliding names on the server, like README.md and readme.md in one folder, are detected and skipped with a clear warning instead of overwriting one with the other
1.9.3 September 9, 2026 Features 2 Improvements 3 Fixes 2
Release Incremental SFTP Transfers
Features 2
  • Incremental SFTP transfers: files already identical on the other side (same size and time) are skipped, so re-sending a folder copies only the new or changed files instead of everything
  • New "Replace if newer" option when a file already exists, alongside Replace, Skip and Keep both
Improvements 3
  • Deleting files now shows a progress dialog while they move to the trash, instead of sitting on a blank pause
  • Recording mode masks more of the app now: host addresses, usernames and key fingerprints on host cards, the session bar and the keys screen
  • Recording mode is clearer about what it is: it hides identifiers in the app's own screens, it does not record the screen, and the terminal is never masked because its text comes from the server
Fixes 2
  • Fixed the overwrite counter that could show a wrong total such as "11 of 6" when a folder held nested conflicts, it now counts the real number as it finds them
  • The Hosts page now keeps the group you filtered by when you open a host and come back, instead of resetting to All every time
1.9.1 September 8, 2026 Features 4 Improvements 3 Fixes 4
Release Theme Designer and Recording Mode
Features 4
  • New Theme Designer: one place for your app chrome and your terminal colours, with a live preview that updates as you edit
  • Start from any built-in theme, tweak it, and save it as your own, then overwrite or delete your custom themes whenever you like
  • Import terminal colour schemes straight from iTerm2, Windows Terminal, or xrdb
  • Recording mode: swap real host addresses and usernames for stable fake values while screen sharing, with a REC badge across the top
Improvements 3
  • Match terminal to app theme: pick one theme and the whole app follows, or keep the two independent
  • The designer warns on low contrast or clashing colours and blocks a save that would hide a border
  • Auto lock is now configurable, 10 minutes on desktop and 1 minute on mobile by default, the desktop lock screen is wider, and settings search is bigger with a clear button
Fixes 4
  • Windows Hello now works on the desktop lock screen, it never opened before on PIN only Hello setups
  • Fixed a lockout where Windows Hello could wedge the desktop lock screen with no way back to the PIN
  • Fixed the file editor asking to save again after you only moved the cursor
  • Fixed workspace chips and settings accents not following the active theme
1.9.0 September 3, 2026 Security 2 Features 1 Improvements 3 Fixes 3
Release Smooth Transfers, Faster Uploads, Mobile Notifications
Security 2
  • A two factor prompt from a jump host or serial connection is no longer answered with your account password, which could have placed it in the server log
  • Fixed a mid session key renegotiation that could interrupt transfers larger than about 1 GB
Features 1
  • Mobile notifications: a home screen bell with a severity badge, a grouped history screen with swipe to dismiss, and a dedicated notifications settings screen
Improvements 3
  • Uploading a large folder no longer freezes the app, the transfer list and Activity panel stay responsive even with tens of thousands of files queued
  • Much faster transfers on a local network, uploads now run at full link speed instead of stalling to a crawl
  • A large upload no longer makes the rest of the app lag while it runs
Fixes 3
  • Fixed a UI freeze when uploading a folder with very many small files
  • Fixed slow transfer speed caused by the connection holding back small packets
  • Fixed the per connection log growing without bound during a long session
1.8.2 September 2, 2026 Improvements 3 Fixes 3
Release Faster SFTP and Multi-Host Host-Key Prompts
Improvements 3
  • Faster SFTP uploads, and the app stays responsive while a large transfer runs
  • The Database Error screen is redesigned as a clear card, with Reset marked as a last resort so it is not tapped by accident
  • The Windows installer now shows a license agreement and reads correctly in dark theme
Fixes 3
  • Connecting to several new hosts at once now asks you to verify each host key in turn, instead of only one prompting while the other sessions hang
  • An SFTP upload the server rejects now fails cleanly instead of hanging
  • Hardened SSH channel cleanup and flow control so an unexpected disconnect or a malformed server can no longer leak resources or spin the client
1.8.1 September 1, 2026 Fixes 4
Release Desktop Freeze Fix
Fixes 4
  • Fixed a desktop freeze where the app could stop responding to the mouse after a long idle, for example overnight: the cursor could stick and clicks did nothing while the app kept running. Moving a window no longer risks it, and Alt+Tab away and back recovers input if it ever happens
  • The command palette shortcut now closes the palette if it is already open, instead of stacking another copy and dimming the screen
  • Cloud Sync no longer hangs on a dead connection after a long idle: network requests now time out and the next sync retries cleanly
  • Mobile Server Monitor: hosts that are actually reporting no longer show Can't check, and the CPU, RAM, and Disk bars show their severity colors again
1.8.0 August 31, 2026 Features 6 Improvements 5 Fixes 7
Release Encrypt at Rest, Hardware Binding, and a Cleaner App
Features 6
  • Encrypt data at rest: your saved connections and keys are scrambled behind your PIN, so a lost or stolen device cannot read them. Opt in under Settings, Security
  • Hardware-backed encryption on mobile ties the key to your device secure hardware, so unlocking adds a device-authentication step and a copied data file is useless off the device
  • On Windows, hardware-backed encryption binds the key to the PC TPM, so the encrypted data is useless if the files are copied to another computer
  • A dedicated Security screen gathers app lock, PIN, data-at-rest encryption, hardware binding, and host-key trust in one place
  • Server Monitor moved to the Home tab and the Sessions bar, so it is one tap away instead of buried in Settings
  • Auto Backup now sets its schedule and its location together, including an optional WebDAV or Nextcloud copy
Improvements 5
  • Settings is reorganised: Import and Export are each a single chooser, backup lives with your account, and SFTP behavior has its own section
  • You can export a backup with no password after a clear confirmation, for a quick local copy
  • The PIN can be up to 32 digits, and changing or turning off the PIN now asks for your current one first
  • A WebDAV backup password is now stored in the device secure store, never in plain settings
  • Additional security hardening across the desktop encryption paths
Fixes 7
  • Connecting to the same server address through different jump hosts no longer warns that the host key changed
  • Your connection tags now sync across devices
  • Importing a PuTTY key from Settings now actually loads the key instead of opening a blank screen
  • The SFTP browser right-click menu now appears in an empty folder so you can create a file or folder
  • Turning a setting on or off no longer fails when the app is locked
  • A flapping host no longer sends the same critical alert over and over
  • Mute a noisy notification type straight from the notification panel
1.7.4 August 26, 2026 Features 5 Improvements 4 Fixes 2
Release Ligatures, Tray Health, and Settings Sync
Features 5
  • Programming ligatures in the terminal: FiraCode, Cascadia Code, and JetBrains Mono render coding symbols like arrows and comparison operators as their combined glyphs, switched on under Settings
  • The desktop tray shows your monitored hosts at a glance, tints its icon when one goes critical, and lets you connect to a specific host straight from its menu
  • Your terminal look and connection defaults now sync across your devices
  • A local shell tab on desktop opens PowerShell on Windows or your login shell on macOS and Linux
  • The server monitor raises an in-app alert when a monitored host turns critical, warning, or offline
Improvements 4
  • Find in the terminal now supports whole-word matching
  • Snippet variables can be masked so a secret stays hidden while you type it
  • Identity keys show a reminder when an attached certificate is expiring soon or has expired
  • The terminal scrollback size is now honored and can be set to unlimited
Fixes 2
  • The terminal bell now respects the enable and disable setting
  • An active local port forward gets an open-in-browser button on desktop
1.7.3 August 21, 2026 Features 3 Improvements 5 Fixes 4
Release Stability, Live Monitoring, and Theming
Features 3
  • Tap a monitored host on your phone to see its live CPU, memory, disk, and network graphs
  • Long-press a snippet folder on mobile to rename it or change its color
  • Crop, zoom, and rotate your profile photo when you set an avatar
Improvements 5
  • Themes now recolor the accent everywhere: pick a color and the buttons, highlights, and even the upgrade screen follow it
  • The identity editor now matches the connection editor, so every screen reads as one design
  • Save a terminal transcript as encrypted or plain text and choose exactly where it goes, with a Show in folder shortcut on desktop
  • The network editor no longer pops the keyboard open the moment you open it on mobile
  • The desktop snippet picker now colours each category, matching the mobile snippet list
Fixes 4
  • Fixed a launch crash that hit every earlier 1.7 build on Android, caused by a camera library version mismatch in the QR scanner
  • Opening a file to edit during an SFTP transfer no longer freezes the app, transfers now run on their own channel
  • The Linux build now opens its database on launch instead of coming up empty
  • WebDAV and Nextcloud cloud sync no longer gets stuck after the first sync, so your changes reach your other devices again
1.7.2 August 20, 2026 Features 3 Improvements 3 Fixes 4
Release Unlimited Connections & Host Sorting
Features 3
  • Unlimited saved connections on every tier: the free tier is no longer capped, so you can save as many hosts as you want
  • Right-click any host group header, including Ungrouped, to sort by name, status, or most recent
  • Drag the subtle dividers in the SFTP file header to resize the Name, Size, and Modified columns
Improvements 3
  • Open terminal here now reuses your active session and opens a tab at that folder, instead of popping out a new window
  • The choose a host list, shown when you open SFTP with no session running, now sorts and stays in sync with your home screen order
  • The update prompt is a desktop feature now, since mobile updates come from the app stores
Fixes 4
  • Cancel in the SFTP replace prompt now stops the whole transfer instead of asking again for the very next file
  • The apply to the rest of the conflicts option in that prompt is no longer greyed out when a folder has several clashes
  • Duplicate on the hosts screen now works on desktop, it was silently blocked before
  • The About page no longer runs off the edge of the screen on phones
1.7.1 August 20, 2026 Improvements 3 Fixes 4
Release macOS & Delete Polish
Improvements 3
  • The delete countdown is now off by default, so deletes are immediate unless you switch the safety delay on in settings
  • Save a connection straight from an active session in a filled-in editor, without leaving the terminal
  • Clearer keyboard navigation in the connection editor, with focus rings on menus and arrow-key protocol selection
Fixes 4
  • macOS launch and database fixes so the desktop app starts cleanly on Mac, with its proper app icon
  • macOS now uses the native window controls at the top-left, like every other Mac app
  • Deleting a large folder over SFTP is quicker and shows accurate progress
  • The title bar no longer maximizes on an accidental double-click
1.7.0 August 20, 2026 Security 2 Features 8 Improvements 7 Fixes 2
Release SFTP Redesign & Safe Delete Sync
Security 2
  • Hardened every path that handles data from a remote server, so a hostile or compromised server cannot crash the app, from a pre-release adversarial security review
  • The open-source SSH engine ships with SFTP reliability and elliptic-curve correctness fixes
Features 8
  • A redesigned SFTP file manager on desktop: two panes side by side, a bookmarks sidebar, drag between panes, and a live file filter
  • In-app image preview: double-click an image on a server to view it with zoom, no download needed
  • Tail a log file live over SFTP, straight in the app
  • Generate SSH certificates inside the app
  • Serial console support
  • Pin your favorite hosts to the top
  • Export and import your themes
  • The SSH engine behind ZestSSH is now open source (zest_ssh_core, MIT licensed)
Improvements 7
  • Cloud sync now removes deleted items everywhere: delete a host on one device and it is gone on the others, with newest change wins so an edit and a delete resolve correctly JUICED
  • A long-offline device reconciles with the cloud instead of bringing back things you deleted JUICED
  • Transfer selection: before a big upload or download, exclude heavy folders like node_modules and .git with one click
  • Delete safety: a remote file delete is held with a countdown and an Undo, so an accidental big-folder delete can be taken back before anything is sent
  • Same-host SFTP moves are instant, with a 10 second undo
  • Cleaner right-click menus for pins and bookmarks
  • Server latency now reads correctly for fast local servers (it used to show 0 ms)
Fixes 2
  • Fixed a slow resource buildup over very long sessions with monitored servers
  • A batch of field-test fixes across connecting, app lock, local shell, and sync
1.6.0-1.6.2 August 15, 2026 Security 1 Features 9 Improvements 6 Fixes 4
Release Server Monitor & Networks
Security 1
  • More security hardening behind the scenes
Features 9
  • Server Monitor, see your servers' health live: CPU, memory, disk, network and temperature, with alerts when something needs attention
  • Networks, ZestSSH now knows which network you're on and connects the right way automatically, whether you're home, at work, or on the go
  • Color-code your connections, groups, keys, snippets and networks
  • Make it yours, pick your own accent colors for the app and the terminal
  • Organize your snippets into color-coded categories
  • A cleaner Automation section with Workflows, Runs and Triggers
  • ZestSSH now warns you when two keys are really the same
  • Command palette and Workspaces improvements on desktop
  • A fresh, cleaner setup installer
Improvements 6
  • A warmer new look with better contrast across the whole app
  • Redesigned connection editor with a live preview as you type
  • New connection card sizes, plus pinning and notes
  • Custom colors and icons for your folders, with faster editing
  • Redesigned Profile & Sync that shows your real synced devices
  • Clearer, friendlier error messages when something goes wrong
Fixes 4
  • Fixed a desktop sign-in error
  • Fixed missing stats in Server Monitor
  • Fixed hosts sometimes showing as unreachable, plus assorted layout glitches
  • Polished colors and contrast across the app
1.5.41 August 5, 2026 Security 2 Features 1
Release Bring-your-own sync
Security 2
  • Sync key derivation strengthened to Argon2id with a 128 MB memory cost
  • Zero-knowledge end-to-end encryption (Argon2id + AES-256-GCM) applies to every backend JUICED
Features 1
  • Bring-your-own sync backends, Juiced sync now runs on your own WebDAV, S3, or Google Drive, not just hosted ZestSSH Cloud JUICED
1.5.36-1.5.40 July 27, 2026 Improvements 2 Fixes 2
Release Reliability
Improvements 2
  • Connection inspector redesigned
  • Reorder keys within an identity
Fixes 2
  • Fixed copying text out of the terminal
  • More reliable file transfers
1.5.35 July 23, 2026 Security 2
Release Security
Security 2
  • Security hardening pass across the app
  • Regression fixes surfaced by an adversarial security review
1.5.29-1.5.34 July 23, 2026 Security 1 Features 3 Improvements 2
Release Desktop
Security 1
  • Hardened SSH core crypto, host-key verification, and background services
Features 3
  • Docked connection inspector on the desktop
  • Frameless title bar on Windows
  • Branded dark installer wizard with an optional "Add to PATH" step
Improvements 2
  • Desktop UI polish, theme safety net and host-card hover states
  • Toast-style exit confirmation
1.5.24-1.5.26 July 7, 2026 Features 1 Improvements 1 Fixes 3
Release Cloud Sync
Features 1
  • End-to-end encrypted cloud sync now works end to end, automatic push/pull with a join-existing-vault flow JUICED
Improvements 1
  • Memory-safe SFTP for large file transfers
Fixes 3
  • Fixed vim arrow keys (DECCKM cursor-key mode)
  • Fixed trackpad scrolling
  • Cloud sync reliability fixes JUICED
1.5.17-1.5.23 June 23, 2026 Features 4 Improvements 5 Fixes 2
Release Terminal & Panes
Features 4
  • Split-pane terminal with independent focus and sizing
  • Broadcast, type once and mirror your keystrokes to a whole group of sessions
  • Workspaces, save a layout of terminal tabs and panes and reopen it later
  • Per-group colors and tier chips
Improvements 5
  • SFTP type-ahead in the file browser
  • Drag-select auto-scrolls into the scrollback
  • Wheel-scroll extends the current selection
  • A clean shell exit now closes its tab
  • Broadcast is scoped to the active group
Fixes 2
  • Normalized CRLF on terminal paste, fixes double-spaced pastes
  • Terminal hotkey gating so app shortcuts no longer leak into the shell
1.5.14-1.5.15 June 9, 2026 Security 1 Improvements 3 Fixes 1
Release Rollup
Security 1
  • Purchase identity protection, keeps lifetime purchases from being stranded on anonymous accounts
Improvements 3
  • SFTP file browser improvements
  • QR-code connection sharing
  • Entitlement handling improvements
Fixes 1
  • Stability and polish fixes across the app
1.5.0 May 16, 2026 Security 2 Features 12 Improvements 3
Release zest_ssh_core
Security 2
  • zest_ssh_core shipped after a 12-finding security audit, all fixed
  • A follow-up audit fixed 4 more findings
Features 12
  • New zest_ssh_core engine, a proprietary SSH stack that replaces the old library, with ChaCha20-Poly1305, Ed448, host-key verification, rekeying, and compression (later open-sourced as MIT in 1.7.0)
  • OpenSSH user certificates, import a certificate and attach it to an identity (including FIDO/sk certificate types)
  • Hardware tokens, authenticate with a YubiKey or FIDO2 security key through the system ssh-agent
  • Networks, context-aware connection profiles that rewrite a host's address, port, jump chain, identity, and port-forward rules based on the Wi-Fi, subnet, or cellular network you are on
  • Desktop V3 redesign, pill bar, sidebar, and a responsive host grid with three layout modes
  • Editable keyboard shortcuts, 23 rebindable actions with conflict detection
  • Theme designer with a full HSV color picker
  • IntelliJ-style notification center replaces snackbars on the desktop
  • Connection groups, tags, and pinned hosts
  • Host card customization, density, columns, and accent colors
  • Scheduler, backup destinations, and SSH agent forwarding
  • Network-aware port forwarding, per-network forward rules SQUEEZED
Improvements 3
  • Recursive jump-host chains, A → B → C now routes all the way through C
  • macOS builds are no longer sandboxed, so ZestSSH can read ~/.ssh
  • File-based logging removed entirely, nothing is written to disk
1.4.3 April 22, 2026 Features 3 Fixes 3
Release Hotfix
Features 3
  • In-app help dialogs for Port Forwarding and Jump Host screens
  • Launch on Windows startup option in the installer
  • Windows installer dark theme with ZestSSH branding
Fixes 3
  • macOS database error, SQLCipher library was not loading on Mac
  • zestssh:// URL scheme now registered on Windows for OAuth and automation
  • Removed unnecessary build artifacts from the installer
1.4.2 April 21, 2026 Fixes 1
Release Hotfix
Fixes 1
  • Desktop sign-in getting stuck, browser OAuth now works on Windows, Mac, and Linux
1.4.1 April 20, 2026 Improvements 1 Fixes 2
Release Hotfix
Improvements 1
  • Database upgraded to schema v8
Fixes 2
  • Automation history now persists, survives app restarts, stores up to 500 entries
  • Workflows now save to the database instead of temporary storage
1.4.0 April 19, 2026 Features 15
Release Automation & Workflows
Features 15
  • Automation Engine, control ZestSSH from Tasker, MacroDroid, iOS Shortcuts, and Siri SQUEEZED
  • Automation Wizard, step-by-step URL builder
  • Workflows, multi-step server automation chains SQUEEZED
  • API key authentication with multi-key management, expiration, and rate limiting
  • Batch execution across multiple servers
  • Snippet variables from external apps
  • Output filters (grep, head, tail)
  • Webhook callbacks
  • Clickable URLs in the terminal
  • Smooth scrolling with scroll-to-bottom button
  • Split terminal for tablets and foldables SQUEEZED
  • Cursor shape picker (block, underline, vertical bar)
  • Android foreground service, SSH stays alive when backgrounded
  • Auto-backup on change with a user-chosen password
  • Windows and macOS desktop support
1.0.0 March 2026 Features 16
Release Initial Release
Features 16
  • SSH, Telnet, Mosh, and local shell connections
  • Full xterm-compatible terminal emulator
  • SSH key generation: Ed25519, RSA, ECDSA
  • Import OpenSSH PEM and PuTTY .ppk key files
  • 49 built-in command snippets
  • 7 terminal themes (Dark, Light, AMOLED, Solarized, Monokai, Dracula, Nord)
  • PIN and biometric app lock
  • SFTP file browser
  • Local and remote port forwarding SQUEEZED
  • Jump host / bastion support SQUEEZED
  • Session transcripts SQUEEZED
  • Home screen widgets SQUEEZED
  • Speech-to-text input SQUEEZED
  • End-to-end encrypted sync JUICED
  • Vault across devices JUICED
  • Automatic encrypted backups JUICED

Want the newest build? Download ZestSSH →