Reach

The free, open source SSH client.

SSH terminals, SFTP files, RDP and VNC desktops, tunnels and an encrypted vault in one app for Windows, macOS, Linux and Android. No account, no telemetry.

Download Reach

Read the docs

v0.8.7 · Free and open source · MIT licensed

Reachv0.8.7Live demo — type in it

web-01

demo@web-01:~$

Connecteddemo@web-01Vault unlockedUTF-8

What is inside

Everything the job needs, on one screen

SSH terminal

Tabs, split panes and jump hosts, with your ssh_config read in full.

SFTP file explorer

Browse, edit and move remote files over the same SSH login.

RDP and VNC desktops

Remote desktops open in a tab next to your SSH sessions. VNC can travel inside SSH.

Encrypted vault

Keys and passwords encrypted with XChaCha20-Poly1305 and Argon2id. Nothing stored in plaintext.

Sync and share

Optional end-to-end encrypted sync to your own database, and shared vaults for a team.

DevOps built in

Docker, Podman, Kubernetes, Ansible and OpenTofu, through the servers you already have saved.

Downloads

Get Reach

Latest release · v0.8.7All releases and changelog

Windows10 and 11, 64-bitInstaller (.exe)20.2 MB macOSApple siliconDisk image (.dmg)27.3 MB macOSIntelDisk image (.dmg)29.7 MB LinuxRuns anywhereAppImage102.6 MB Android64-bit ARM, nearly every phoneAPK29.7 MB

Other formats:Windows MSI Android, older 32-bit phones Debian / Ubuntu (.deb)Fedora / RHEL (.rpm)

What installing Reach does

What it is: Reach is a desktop and Android app: an SSH client with SFTP, remote desktop (RDP and VNC), tunnels and an encrypted vault. One app, nothing bundled with it.
Windows: The installer asks whether to install for you or for everyone. If Microsoft Edge WebView2 is missing (some Windows 10 PCs), it downloads it from Microsoft. Remove Reach from Settings → Apps.
macOS: Drag Reach into Applications. To remove it, move it to the Trash.
Linux: The AppImage runs without installing anything. The .deb and .rpm packages install through your package manager, with WebKitGTK and a tray-icon library as dependencies, and are removed the same way.
Android: The APK asks for one permission, Internet. Uninstall it like any other app.
On your computer: Reach does not start with your computer unless you turn that on in Settings. Updates are offered in the app and installed only when you agree, after their signature is checked.
Your data: No account and no telemetry. On its own, Reach only asks GitHub whether there is a new version; everything else connects because you asked. Every connection it makes.
Removing it fully: Uninstalling keeps your encrypted vault in a com.reach.app folder in your user data folder, so a reinstall finds your sessions. Delete that folder to remove everything.
Licence: Free and open source under the MIT licence. Read the licence and the code.

Questions, or just want to watch it being built?

The Discord is where bugs get triaged, features get argued about, and new releases land first. Everyone is welcome, including people who have never opened a terminal in anger.

6 online25 members

Join the Discord

Powerful terminalBuilt for real work

Many serversOrganised, not scattered

Secure by designEncrypted at rest

Team readyShare what you choose

Open sourceMIT, community driven