Vaulterm
SSH and Telnet in tabs and split panes, SFTP, FTP and S3 file connections, tunnels, and an encrypted vault for your hosts, keys and passwords.
Every Vaulterm featureNew in beta: Claude in Vaulterm Code (Pro) The SSH client for
[ Free ] Windows · macOS · Linux · v0.2.3
The SSH client for
people who run servers
Vaulterm keeps your hosts, keys and passwords in an encrypted vault. Vaulterm Code, in the same app, edits files on those servers (Pro). Split a tab into panes, type into all of them at once, and sync end to end when you want.
Switching from PuTTY or Termius? How to switch
Production 3Staging+Broadcast · off
deploy@web-01Productionidle
Last login: Sat Oct 10 08:51 2026 from 10.0.0.5
deploy@web-01:~$ df -h --output=pcent,avail /
Use% Avail
41% 46G
deploy@web-01:~$ deploy@web-02Productionidle
Last login: Sat Oct 10 08:51 2026 from 10.0.0.5
deploy@web-02:~$ df -h --output=pcent,avail /
Use% Avail
38% 49G
deploy@web-02:~$ deploy@db-primaryvia bastionidle
Last login: Sat Oct 10 08:51 2026 from 10.0.0.5
deploy@db-primary:~$ df -h --output=pcent,avail /
Use% Avail
67% 104G
deploy@db-primary:~$ psql shop -c "select count(*) from orders where created_at > now() - interval '1 hour'"
count
-------
1284
(1 row)
deploy@db-primary:~$ Drag a tab, pane or host onto a pane to split itBroadcast types into every pane in the tab
one downloadFree and Pro
Two products, one download.
Your servers, your keys and your code in one app, with the secrets in an encrypted vault.
Vaulterm Code
A remote IDE over SSH, opened from the same install. Edit folders on this computer (Free) or on a saved server (Pro).
Beta In the Beta channel: Claude (Pro), an extension store and a reworked Source Control.
About Vaulterm Codevault.dbEvery plan
What you see, and
what's on the disk.
Many SSH clients encrypt passwords and keys and leave hostnames in plain text. Vaulterm seals every record before it's written, so a copy of the vault file doesn't reveal a single server.
Read the security designIn VaultermHosts · keys · identities
web-01[email protected]
web-02[email protected]
db-primary10.0.4.12 via bastion
deploy-keyed25519 key
postgres@db-primarypassword, saved
vault.db · on disk0 readable hostnames
a91fhostv12Sealed
3c07hostv9Sealed
e5b2hostv31Sealed
77d0keyv3Sealed
0b4eidentityv5Sealed
XChaCha20-Poly1305Argon2idRecovery KeyLocks on sleep and screen lock
acme-api/.env → vaultPro · Vaulterm Code
Your .env, out of the file
and into the vault.
Keep a project's variables in the vault, secret ones masked in its terminals' output. Its terminals, tasks and debug sessions get them, here or on a server, with no .env file on disk and nothing in a command line. Agents get them only when you say so.
How Environments workacme-api/.envdeleted
1DATABASE_URL=postgres://app:[email protected]/shop
2SESSION_SECRET=9f3a1c7e04bd77e2a913
3API_TOKEN=ak_4Rz8Q1pLm2Vw7Ty
4PORT=3000
5NODE_ENV=production
6LOG_LEVEL=info
No .env on disk.
Add .env to .gitignoreDelete the .env file
Environment · productionIn the vault
No variables yet.
DATABASE_URL••••••SecretReplace
SESSION_SECRET••••••SecretReplace
API_TOKEN••••••SecretReplace
PORT3000
NODE_ENVproduction
LOG_LEVELinfo
Agents get these too
Off, coding agents started in a project get none of these variables.
Move .env into the vaultCancelMove
DATABASE_URLSecret
SESSION_SECRETSecret
API_TOKENSecret
PORTSecret
NODE_ENVSecret
LOG_LEVELSecret
deploy@web-01acme-apiidle
deploy@web-01:~/acme-api$ echo $DATABASE_URL
••••••
deploy@web-01:~/acme-api$ echo $PORT
3000
deploy@web-01:~/acme-api$ npm run dev
> [email protected] dev
listening on :3000
deploy@web-01:~/acme-api$ No .env on diskNothing on a command lineSecrets masked in outputAgents opt inHere or over SSH
Masking stops a secret being shown by accident. It isn't a barrier: a program that changes a value before printing it isn't caught. Only values of 6 characters or more are masked. On a server, the values are in your programs' environment, which you and root can read.
hosts/productionEvery plan
Set it on the group.
Every host follows.
Give a group an identity, port, jump host or terminal theme, and its hosts inherit it. Any host can override a setting. Jump hosts chain, hop by hop, and a jump host never routes through itself.
ProductionGroup
Identitydeploy · ed25519
Try the group's port, jump host or theme.
HostPortJump hostTheme
web-01Port22from groupJump hostbastionfrom groupThemeAaProductionfrom group
web-02Port22from groupJump hostbastionfrom groupThemeAaProductionfrom group
db-primaryPort2222its ownJump hostbastionfrom groupThemeAaProductionfrom group
bastionPort22from groupJump hostskips itselfnever itselfThemeAaProductionfrom group
web-01 → staging-apiPro
Drop files on another server.
They never touch your disk.
Select files in one server's Files tray and drop them on another server's pane. Vaulterm shows where they'll land first, then streams them across a piece at a time, with pause, cancel and retry in both servers' Transfers.
2 files
deploy@web-01FilesSFTP
/var/backups
shop-2026-10-10.sql.gz1.4 GB
uploads-2026-10-10.tar.zst86 MB
shop-2026-10-09.sql.gz1.4 GB
uploads-2026-10-09.tar.zst85 MB
To staging-api · 2 filesCopied
deploy@staging-apiStagingidle
deploy@staging-api:~$ ls -1sh ~/backups
total 1.5G
1.4G shop-2026-10-10.sql.gz
86M uploads-2026-10-10.tar.zst
deploy@staging-api:~$ gunzip -c ~/backups/shop-2026-10-10.sql.gz | psql -q shop_staging
deploy@staging-api:~$ psql -tAc "select count(*) from coupons" shop_staging
214
deploy@staging-api:~$ Copy 2 files to staging-api?/home/deploy/backupsChoose anotherCopy
From web-01 · 2 filesCopied
Never touches this computer's diskReplace, keep both or skipSFTP, FTP, FTPS and S3
shop-apiFree · Pro
Edit code
on your servers.
Vaulterm Code opens in its own window from the same install. Open a folder on this computer, or on a saved server, and edit it in place, with terminals, tasks and Git in the project.
- Claude runs on the server with your own Anthropic API key and asks before it acts (in the Beta channel, Pro).
- VS Code themes, grammars and snippets from Open VSX (in the Beta channel).
- Git with a secret check before each commit.
Claude is a trademark of Anthropic. Vaulterm is not affiliated with or endorsed by Anthropic.
syncEvery plan
Every computer you use.
One vault, end to end.
Sign in, turn on sync, and your hosts, keys, snippets and tunnels follow you to every Mac, PC and Linux machine. A new computer joins when both show the same five words.
framework-13New · Linux
Asking to join. Check that your other computer shows these words.
orbitvelvetcanyonlemondrift
Same five words
MacBook ProSyncing · macOS
framework-13 wants to join your synced vault.
orbitvelvetcanyonlemondrift
What our server sees, for one itemExample
Id7c1e94b0
Version42
Size1,184 B
ChangedOct 10, 09:14
KindCan't tell
Contentsc4e19a07b3f25d816e0a7b9c2d41…
Every plan syncs
5, 250 or 10,000 items. Free syncs 5, Pro 250 and Ultra 10,000, with 90 days of history.
Your choice
Pick what syncs. Hosts and groups, identities, keys, snippets, tunnels, connections, layouts, known hosts, Code projects and Environments each have a switch.
Account
Passkey, or password and code. Your account password is separate from your vault password, which never leaves your computers.
⌘KEvery plan
One search.
Everything in it.
Hosts, sessions, snippets, keys, layouts and actions in one list, ranked by what you use most. Type an address to connect without saving it.
@prod⌘K
Hosts
web-01Production Connect
web-02Production
db-primaryProduction · via bastion
>Actions@Hosts#Snippets%Keys~Files:SettingsagentsPro
Every coding agent.
Waiting ones first.
Run an agent in a local shell or over SSH and it shows up here, with nothing to install on the server. A badge and a notification tell you when one needs you.
Claude Code
web-01 · ProductionNeeds you
web-01 · ProductionNeeds you
Codex
Local shellWorking
Local shellWorking
Gemini CLI
staging-api · StagingIdle
staging-api · StagingIdle
Your own CLIs and accounts
pricingUSD
Free, with no time limit.
Compare every planFree$0Syncs 5 items
Everything you need on one computer. No account.
Vaulterm Code on folders on this computer
Pro$49 for 12 monthsSyncs 250 items
Every feature that runs on your computer.
Vaulterm Code on your servers, and Claude in Code (beta)
or $5 a monthUltra$70 for 12 monthsSyncs 10,000 items
Pro, plus your whole vault on every device: sync for up to 10,000 items.
Lifetime $499Teams$12 per seat a monthOrg-wide sync
Your servers and connections, synced across your whole organization.
Coming later[ Vaulterm ] A WarPulse product
One download.
Vaulterm and Vaulterm Code.
Windows, macOS and Linux. No account until you turn on sync.
The Vaulterm mark