Termalin — Account

Master password

Recordings are end-to-end encrypted. Decryption happens in your browser — the password is never sent anywhere.

🔒

Locked

Locked after inactivity — enter your master password to continue.

Open a new session

New snippet

Variables — use {{name}} for values you fill in before each run.
• {{size}} simple · {{size:2G}} with default · {{size:2G:Swap size}} with label
Multi-line commands are joined with && and run in sequence.

Append newline (run immediately)

Recent commands

Connect

Password Private key

Remember password (encrypted in your vault)

The server never sees it — kept only for this session unless you tick Remember.

Connect

This server logs in with a short-lived certificate — no password or key needed.

Add a private server

Run this on the server you want to reach. It works behind a firewall — no inbound port, no SSH key. The token is single-use and expires in an hour.

Add

Passwords aren’t stored — you’ll enter them on connect. Saved to your encrypted vault and synced to the app.

Import hosts

Paste your ~/.ssh/config, a CSV, a Termius-export file, or a PuTTY .reg export — or upload one below. Hosts are added to your vault; passwords aren’t imported (you’ll enter them on connect).

Coming from PuTTY?

Export your saved sessions to a file, then upload it here:
reg export "HKCU\Software\SimonTatham\PuTTY\Sessions" putty.reg
(Or on the Termalin desktop app, use “Import from PuTTY” to read them directly.)

Coming from Termius?

Termius (free) encrypts your hosts locally and doesn’t sync or export them, so they can’t be read directly. Safe ways to get them out:
• Re-add them by hand — most reliable; you can see each host in Termius and add it here.
• Try Termius’s own CLI (termius-cli, export-ssh-config) — official, though it may be out of date.
Unofficial “extractors” exist as third-party tools, but they’re unvetted code that touches your keys and keychain — read the source yourself before trusting one. Then upload the resulting sshconfig or CSV above.

Export hosts

Download your hosts to move them anywhere. Passwords are never exported — connection details only.

Recently deleted

Deleted hosts are kept for 30 days, then removed. Restore syncs to all your devices.

New API key

A key runs commands on your tunnelled servers over MCP. Scope, a command policy and expiry limit its blast radius.

Name Expires Servers it can reach

What this key may run

Your new API key

Copy it now — it won’t be shown again. Treat it like a password; it can run commands on your tunnelled servers.

Termalin account

Set your master password

Reset password

Your servers, in the browser