Pricing and Pro
What's free, and what does Pro add?
SSHoo is free for SSH and the terminal, tmux session management, SFTP browsing, editing and single-file transfers, local, remote and dynamic (SOCKS) tunnels, jump hosts, Tailscale discovery, and host and tunnel import and export. There are no ads and no connection caps.
Pro adds Claude Code and Codex chat, voice mode, and SFTP power tools: multi-file transfers, folder upload and download, a host-to-host dual pane with folder sync, and archives.
How much is Pro?
US$9.99, paid once. It is not a subscription. The app shows it as the launch price. Google Play charges in your local currency, and some countries have their own local price, so what you see may differ from a straight conversion of US$9.99.
Is there a free trial?
Yes. Pro can be tried free for 7 days, once per device, with no payment details. Every Pro feature is unlocked during the trial. You can buy at any time, and the purchase keeps Pro unlocked after the trial ends. If you don't buy, the Pro features lock again when the 7 days are up.
What is a Founding supporter?
Anyone who buys Pro before 1 March 2027, that is strictly before 2027-03-01T00:00:00Z (UTC), gets a Founding supporter badge in Settings, for good. It goes by the purchase time Google Play records, not your phone's clock, and it comes back with the purchase if you reinstall. A free trial alone doesn't earn the badge; the purchase has to be made before the cutoff.
What happens to Pro if your server goes away?
Pro keeps working. When you buy, SSHoo stores the purchase on your device, encrypted, and unlocks Pro from that record, so it works offline and when our server is unreachable. If you reinstall, Google Play returns the purchase and the app checks Google Play's signature on the device itself, which doesn't need our server. One-time means one-time.
How do refunds work?
Pro is sold through Google Play, so refunds go through Google Play under its refund policy. Once a refund has gone through, Pro is removed the next time SSHoo checks the purchase online.
Claude Code and Codex
How does the Claude Code and Codex chat work?
A chat tab runs the real Claude Code or Codex CLI on your server, over your SSH connection, and streams its replies into the app. There is no relay: your messages go straight to the host over SSH, and the CLI there talks to its provider (Anthropic or OpenAI) the same way it does when you run it yourself. You can resume a conversation later, and SSHoo notifies you when the agent finishes. The chat is part of Pro.
Is it safe to run the agent from my phone?
Treat it like handing the agent a shell. SSHoo runs the agent with its permission prompts
skipped: Claude Code with --dangerously-skip-permissions and Codex with
--dangerously-bypass-approvals-and-sandbox. It can run commands and change or
delete files as the user you connect as, without asking first. Only use it on hosts and
accounts where you would be comfortable giving the agent a shell.
What does my server need?
SSH access and the agent's CLI, installed for the user you connect as: Claude Code at
~/.local/bin/claude, or the codex command on the path. Nothing else
needs to be installed on the host. The CLI can use its own sign-in on the server, or you can
add an Anthropic or OpenAI API key in SSHoo's settings, or sign in to Claude from the app.
Privacy and security
Does SSHoo collect analytics?
Yes, unless you turn it off. SSHoo uses Firebase Analytics, Firebase Performance Monitoring and Firebase Crashlytics, and all three are on by default. Each has its own switch in Settings under Reporting, and turning one off stops further data going to that service. They don't collect your terminal output, the files you transfer, your credentials or data from your servers. The privacy policy has the details.
Where is my data stored, and how are credentials protected?
On your phone. Hosts, keys, tunnels, sessions and settings live in SSHoo's private app storage. SSHoo has no cloud service of its own for them. Passwords, private keys, passphrases and API keys are encrypted with Google Tink (AES-256-GCM), using a key held in the Android Keystore, hardware-backed where the device supports it. Saved terminal scrollback and chat history are encrypted too. Stored credentials are left out of Android cloud backups and device transfers. The privacy policy lists everything that leaves the device.
Can I lock the app?
Yes. Turn on the app lock in Settings and SSHoo asks for your fingerprint, face or device PIN each time you open it. It needs a screen lock set up on the device. It is a screen lock only: it doesn't add another layer of encryption to your saved passwords and keys, which the app can still use so background reconnects keep working while it is locked.
Why does Tailscale discovery need an API key?
Because of Android restrictions, SSHoo finds the machines on your tailnet through the Tailscale API, using an API key you add once. The key is encrypted on your device and sent only to Tailscale's API, never to our servers. You can revoke it at any time from your Tailscale admin console.
Devices and support
Which Android versions are supported?
Android 13 or later.
Is there an iOS version?
An iOS version is planned. There's no release date yet.
Does SSHoo sync between devices?
Not today. Everything stays on the device you set it up on. You can export your hosts and tunnels to a file in Settings and import them on another device.
How do I get help?
Report bugs and request features on GitHub at github.com/abnegate/sshoo-feedback. Issues there are public, so leave out hostnames, keys and logs. Report security problems privately to [email protected], and email [email protected] for anything else. For privacy questions, email [email protected], or see how to delete your data.