LuTerm
SSH
Real shells over russh. Several terminals per server, reconnect that keeps scrollback.
The whole server in one window
SSH, SFTP, live metrics, services, and deploys — in one client. Local-first for people who care about convenience and the fact that secrets never leave the device.
LuTerm is a desktop app. Pick macOS, Windows, or Linux below.
macOS · Windows · Linux — one desktop app on every platform
Direct SSH, no proxy
AES-256-GCM vault
Works fully offline
Workspace
One client instead of five
Terminal, files, services, deploys, and AI live in one application — one inventory, one vault, one window.
Terminal and files
Parallel sessions in tabs and file transfer on the same host — no second client.
Details
Terminal and files
Parallel sessions in tabs and file transfer on the same host — no second client.
SFTP
Graphical file manager on the same connection: edit, search, compare, queue trees.
Editor
CodeMirror overlay for configs. Saves truncate remotely so an old tail cannot linger.
Services and deploys
systemd, Nginx, and Docker on the connected box. Push a folder when the hash changed.
Details
Services and deploys
systemd, Nginx, and Docker on the connected box. Push a folder when the hash changed.
Services
Unit list including files that were never started. Pins, logs, and name filter locally.
Deploy
Compare the local tree first, then hash only those paths. Preview the diff, then ship.
License
Services and deploys unlock on Pro. Free still has SSH, SFTP, telemetry, and the vault.
LuTerm AI
A universal operator of the connected SSH server — files, processes, nginx, git, whatever you named.
Details
LuTerm AI
A universal operator of the connected SSH server — files, processes, nginx, git, whatever you named.
Remote-first
Bare Unix paths go to the server. Cloud only proxies tokens against your plan quota.
Session allow
“Always this session” for non-destructive exec and writes. Deletes still ask.
Quota
Free 100k / Pro 2M / Team 10M tokens per month. Team is one shared pool.
Vault and sync
Credentials sealed on the device. Optional Cloud syncs inventory — never the SSH stream.
Details
Vault and sync
Credentials sealed on the device. Optional Cloud syncs inventory — never the SSH stream.
Vault
Passwords and keys under a device key. Optional master password. We cannot recover secrets.
Sync
Delta inventory across desktop and mobile. Fully usable offline from the local cache.
Import
Bring hosts from OpenSSH config, PuTTY, and MobaXterm instead of retyping them.
Replaces the usual set
One app instead of a pile of foreign tools
Import profiles from PuTTY, MobaXterm, and OpenSSH config — then keep working in one window.
- PuTTY
- WinSCP
- MobaXterm
- Termius
- OpenSSH + midnight commander
Built-in tools
12 tools that save a second window
Diagnostics, editing, deploys, and an AI operator sit inside the client. You do not need a separate file manager, metrics page, and chat tab in the browser.
Terminal
xterm.js shells, several per host, reconnect that keeps the scrollback.
File manager
SFTP tree, search by name then contents, compare, overwrite uploads.
Code editor
CodeMirror for remote configs. Dark chrome, truncate-on-save.
Live telemetry
CPU, RAM, disks, network, NVIDIA GPUs — polled on the same SSH session.
Snippets
Commands you run every day, one click from the session.
Port forwards
Local and remote forwards on the connection you already have.
Session import
OpenSSH config, PuTTY, MobaXterm — hosts land in the inventory.
Zero-knowledge vault
AES-256-GCM under a key that never leaves the device.
Deploy
Hash-compared uploads, preview, systemd/nginx bindings. Pro.
systemd
Units and unit files, logs, pins. Disabled services still show. Pro.
Nginx
Sites, certbot --nginx, pin a vhost to the top of the list. Pro.
LuTerm AI
Universal SSH operator. Chats stay on the device; Cloud proxies tokens.
Session data stays on your machine. Cloud never sits on the SSH path.
How teams use it
Three ways LuTerm lands in a stack
Not a PAM, not an RDP suite — a daily SSH/SFTP workspace that replaces the pile of clients on an admin machine.
Problem
Day-to-day work is split across PuTTY or Terminal, WinSCP or rsync, htop in another pane, and a browser tab for the panel.
- Two apps for the same host: shell and files
- Metrics live in a third place
- Deploys are ad-hoc scp and a prayer
- Snippets live in a notes app
Solution
LuTerm becomes the standard window onto the server.
- SSH and SFTP on one connection
- Telemetry along the same session
- Snippets, forwards, and an editor in-place
- Pro: systemd, Nginx, Docker, hash-based deploys
Result
- Fewer windows for the same job
- Hosts imported from the tools you already had
- Secrets stay in a local vault
- Cloud is optional and never on the SSH path
LuTerm replaces a bundle of admin utilities with one workspace for shells, files, metrics, and the chores you run on Ubuntu.
Problem
Profiles live in PuTTY and MobaXterm. Passwords sit in chat. A new machine means retyping hosts.
- Import from the old clients, not a greenfield list
- Work without a vendor proxy
- Offline still has to connect
- macOS, Windows, and Linux on one product
Solution
Install LuTerm, import, keep the same jump-and-type muscle memory.
- Import OpenSSH config, PuTTY, MobaXterm
- Vault on the device, optional master password
- Optional Cloud sync of ciphertext inventory
- Same desktop app on macOS, Windows, Linux
Result
- Old connection lists survive the move
- No cloud in the SSH tunnel
- A new laptop pulls inventory after sign-in
- Offline cache still opens saved servers
You can leave PuTTY, WinSCP, and MobaXterm without inventing a new way to log in. The session is still yours, still direct.
Problem
PAM or a jump host decides who may connect. People still need a decent SSH/SFTP client on the desk, and they still share host lists in a spreadsheet.
- SSH and SFTP clients per person
- Host lists that drift
- No shared workspace without another SaaS
- AI and deploys that should follow the team plan
Solution
LuTerm is the client. Your bastion/PAM stays the control plane.
- Team workspaces and shared folders
- Members inherit Pro features from the Team buyer
- SSH still goes device → server (or your jump host)
- AI quota is one pool on the Team owner
Result
- One client on the admin workstation
- Inventory shared without plaintext passwords in chat
- Existing access control stays in place
- Cloud still never sees the SSH stream
LuTerm does not replace PAM. It is the workspace you actually type in — including next to a jump host you already trust.
Best SSH client?
LuTerm versus the usual SSH/SFTP toolkit
What LuTerm covers, and what you still buy extra with the usual set. Honest about the gaps: we are an SSH/SFTP workspace, not an RDP/VNC/DB suite.
The table scrolls sideways
| LuTerm | PuTTY | WinSCP | MobaXterm | Termius | |
|---|---|---|---|---|---|
| Product | |||||
| Class | ✓ SSH/SFTP workspace + ops | ~ compact SSH/Telnet/Serial | ~ file manager + basic SSH | ✓ toolbox, X server, Unix tools | ✓ cross-platform SSH client |
| Protocols | |||||
| SSH terminal | ✓ | ✓ | ~ built-in terminal | ✓ | ✓ |
| Graphical SFTP | ✓ | ~ PSFTP console | ✓ | ✓ | ✓ |
| RDP / VNC / Serial | — not the product | ~ Serial / Telnet | — | ✓ | — |
| Built-in | |||||
| Live host telemetry | ✓ | — | — | ~ separate tools | — |
| systemd / Nginx / Docker | ✓ Pro | — | — | ~ you run the commands | — |
| Hash-based deploy | ✓ Pro | — | ~ sync folder | — | — |
| AI operator on the box | ✓ | — | — | — | — |
| Import PuTTY / Moba / ssh_config | ✓ | — | ~ ini / registry | ~ own format | ~ own format |
| Trust | |||||
| SSH via vendor cloud | — never | — | — | — | ~ optional agent / sync |
| Zero-knowledge vault | ✓ AES-256-GCM | — | — | — | ~ cloud vault |
| macOS / Windows / Linux | ✓ | ~ Windows | ~ Windows | ~ Windows | ✓ |
| Free to start | ✓ SSH, SFTP, vault, 100k AI | ✓ | ✓ | ~ Home limits | ~ free tier |
✓ yes ~ partial or a separate product — no
LuTerm is the one in this group that keeps terminal, graphical SFTP, live telemetry, a zero-knowledge vault, and an AI operator in a single desktop. The others are strong in a niche and need a second window for the rest.
Security
Not a proxy in the middle
LuTerm encrypts credentials on the device and leaves SSH as a direct connection. Optional Cloud stores ciphertext inventory — not your sessions.
Master password is optional, and local
Argon2id on the device. Without the vault key, connection secrets do not open.
AES-256-GCM on secrets
Passwords and keys are sealed under a random 32-byte key. AAD is the record UUID.
Local inventory first
Hosts, keys, and history live on the machine. Offline still connects from cache.
Zero knowledge of your vault
We do not have the device key. Lose the master password and the recovery kit and the secrets are gone — by design.
Trust on first use
Host fingerprints pin on the device. A changed key stops the connection with a warning.
Under the hood
What the client is made of
- Protocols
- SSH, SFTP
- Encryption
- AES-256-GCM vault · Argon2id · Ed25519 / RSA / ECDSA
- Terminals
- xterm.js, 256-color, several shells per host
- Editor
- CodeMirror, remote save with truncate
- Ops
- systemd, Nginx, Docker, hash-based deploy (Pro)
- Tunneling
- Local and remote port forwards
- Operating systems
- Windows, macOS, Linux — one desktop product
- Stack
- Rust and React, Tauri 2
- Import
- OpenSSH config, PuTTY, MobaXterm
- Licensing
- Free app · Pro / Team via Gumroad membership
Pricing
Start free
No time limit on Free. Upgrade when you need services, deploys, or a shared workspace.
Personal
Free
No time limit
$0/ month
- Desktop app for macOS, Windows, Linux
- SSH, SFTP, telemetry, snippets
- Zero-knowledge vault and local-first inventory
- Optional cloud sync
- AI: 100k tokens / month, core tools + 2 packs
Professional
Most used
Pro
1 month · 1 seat
$12/ month
or $120 / year
- Everything in Free
- Service control: Docker, Nginx, systemd
- Deploys
- AI: 2M tokens / month
- All AI tool packs, longer replies
Organizations
Team
1 month · team inventory
$29/ month
or $290 / year
One Team subscription. Invited members get Pro features and the Team AI quota — they do not buy a seat.
- Everything in Pro, for you and invited members
- Shared workspaces
- AI: 10M tokens / month, one pool on the Team owner
Download, then decide
The app is free. Sign in only when you want sync, AI, or a paid plan.
Gumroad receipts
Link and membership land in your email. Manage the subscription in the Gumroad library.
Team is not per-seat
One Team buyer. Invited members inherit Pro features and the shared AI pool.
Sign in first so the purchase is attached to your LuTerm account. Checkout opens with your email and the period you picked.
Questions
Is the desktop app free?
Yes. Download and use SSH, SFTP, and the vault without an account. Pro adds services, deploys, and more AI. Team adds shared workspaces; invited members inherit Team features.
Do you see my passwords?
No. Credentials are encrypted on the device. LuTerm Cloud stores ciphertext only, and SSH never goes through our servers.
Is there an iOS or Android app on this site?
Not here. This site only distributes the desktop builds for macOS, Windows, and Linux.
How does payment work?
Sign in on this site, then pick monthly or yearly. Checkout is Gumroad; we receive your account id and email so the plan lands on the same user. You can also paste a license key in the desktop app.
How do I change or cancel?
Open Manage subscription on the pricing page (your Gumroad library). Cancel there to stop future charges. If you buy Team while Pro is still active, we ask Gumroad to drop Pro; if two memberships remain, cancel the extra one in the library.
Do teammates need their own subscription?
No. The Team buyer creates workspaces and invites people. Members keep a Free billing plan but inherit Team features (services, deploys, Team AI quota) while they belong to that workspace. Only the buyer can create additional workspaces.
Can I use it offline?
Yes. The inventory is local-first. If Cloud is unreachable, saved servers still connect from the cache.
I have hundreds of hosts in MobaXterm. Do I retype them?
No. LuTerm imports from OpenSSH config, PuTTY, and MobaXterm. Hosts land in the inventory with their connection parameters.