Changelog

Internal sites

• AI apps reuse an app's site and open it on any page. When an AI app adds an internal site for a `host:port` that already has one, it gets that site back instead of a copy, and the link it gives you opens the page or file it asked for (e.g. `localhost:3000/reports/q3.pdf`). One site opens every page of an app.
• An AI app can rename a site or point it at the app's new address: `web_link_update`, 23 tools in all. The site keeps its address and the people you shared it with; when it now leads somewhere else, everyone signed in to it is signed out and opens it again.

Backups

• Pro's largest archive is now 5 GB (was 4 GB); Team stays at 20 GB.
• A full storage no longer stops a scheduled backup. When the cloud storage, or the trial's 5 GB for backups, is used up, the job's oldest archive makes way for the new one, and the run says so. When only one archive of that size fits, the new one replaces the previous one — removed only after the new one is stored, so a run that fails never leaves you with none.
• A backup stops at once when the server's Connector drops part way, instead of waiting up to six hours; the next run tries again.
• A database dump that fails because `pg_dump` or `mysqldump` isn't on the server now says which package brings it, or to set the Docker container.
• A backup that stops on a limit says which one — the largest archive, the cloud storage left, or the trial's share — and what to do about it.

Servers through the Connector

• Sign-in works on servers whose clock is a few minutes behind. A server whose clock runs up to five minutes slow (WSL after the PC slept, a VM without time sync) no longer refuses the sign-in as "not yet valid".

Connectors now keep themselves up to date, backups can include your PostgreSQL and MySQL databases, and an AI app can draft a backup job for you to confirm. Plus a one-line Linux install and a round of desktop fixes.

Connectors update themselves

• A Connector keeps itself up to date (Connector 0.2.0). Each Connector reports its version, and the cabinet shows update available or up to date, any rollback, an Update automatically switch per Connector (on by default) and Update now. It installs a new version only after checking the signed version list, the download's size and checksum and the binary's own signature, then a trial run; a routine update waits up to an hour for open sessions to finish. If the new version can't connect within 10 minutes it rolls back by itself, and that version is skipped for 7 days.
• Connectors installed before this release need one manual update. The cabinet shows the one-line command; until you run it they keep working as before.

Database backups

• Back up PostgreSQL and MySQL/MariaDB, not just files. A backup job can now dump a database — on the server or inside a Docker container, one database or all of them — into the same encrypted archive as your files, with a README inside on how to restore it. Linux and macOS servers; on Windows servers backups stay files-only for now.
• No database password is kept at Termalin. It signs in as the server's own local user, through a credentials file on the server (`.pgpass` / `my.cnf`) or with the container's own settings. A dump needs free disk on the server about its own size while it runs.

AI apps and API keys

• An AI app can set up a backup job: `backup_job_create`, 22 tools in all. The app drafts the job — files and/or databases, a schedule, how many copies to keep, where to store them — and you confirm it in the cabinet with one click, where the encryption key is made in your browser as for any backup; only then does it run. A draft expires after 7 days and counts toward your plan's job limit. Needs full access on the Connector.
• Background jobs now run on Windows servers. `job_start`, `job_status`, `job_stop` and `job_list` work on Windows Connectors too (in PowerShell), and a job keeps running after the session closes.
• Commands on Windows servers report what really happened. `ssh_exec` runs in PowerShell 7 when the server has it, else Windows PowerShell 5.1; a program's stderr comes back as plain text instead of red error records, and the exit code is the program's own — no more exit code 1 for a program that succeeded.
• Longer single commands. `ssh_exec` and `ssh_exec_many` take a `timeout` of up to 300 seconds (60 by default); a command that runs out says so and points to `job_start` for long work.
• `sftp_write` creates missing folders. Writing to a path whose folders don't exist yet makes them first, on Linux, macOS and Windows servers; with `create_dirs: false` it names the missing folder instead of a bare "No such file".
• When an AI finds no server, it's told what to say. Instead of a bare "no servers", it now explains that you install a Connector on the server itself — typing an address into the chat or saving a host doesn't connect it.

Cabinet

• A tidier backup form. The fields line up and it works at phone width, it adds databases, and it shows a draft an AI proposed with a Confirm button. Translated into all 9 languages.
• A note when a host address is private. For `192.168.x.x`, `10.x`, `localhost`, `.local` and the like, the host form now says termal.in can't reach it: direct web SSH is for signing in by hand to a public server, and for ChatGPT or Claude to work with a server you install the Connector on it (with a link).
• Clearer trial and plan labels. The trial line now says your account moves to Free afterwards — free forever, nothing charged — and a Lifetime plan shows as Pro · Lifetime.
• The host form says exactly what's stored: an optional password inside your vault, encrypted in your browser with your master password.

Accounts

• Delete your account with a link sent by email. Accounts created with Google, GitHub or Apple sign-in, or from an AI app's connect page, have no password and couldn't delete themselves; now a confirmation link by email works for every account, in the cabinet and the desktop app.

Internal sites

• Invitation emails can't be used to spam. The invite form now has limits per hour, per day, per site and on new people per day — stricter for accounts younger than 7 days. (Earlier this cycle, already live: internal sites got their own menu section, editing, an address check before saving, and personal invitation links.)

Desktop app

• Imports OpenSSH keys exported from Termius and similar apps. Keys that were rejected with "length invalid" — they pad the key differently — now import: OpenSSH accepts them, and so does Termalin.
• Windows: installing with Scoop works again. A Scoop install couldn't start since 0.1.47; an existing Scoop install updates with `scoop update termalin --force`.
• Linux: a one-line install. `curl -fsSL https://termal.in/install.sh | bash` installs to your home folder without root, adds a menu/KRunner entry and a `termalin` command; re-run it to update, or `--uninstall` to remove.
• Linux: in-app updates no longer fail with "Text file busy", and a downloaded update is kept for a retry.
• Linux: you stay signed in when the keyring is locked or slow to start. With KWallet or GNOME Keyring unavailable the app no longer loses its local data; and sessions now renew themselves instead of expiring after 30 days (on every platform).
• Linux: SSH through your ssh-agent finds the desktop's agent even when the app is started from the menu, and the error says why when it can't.
• Terminal: full-screen apps leave your shell intact. btop and the like restore the shell's colours and screen when you quit them.
• Terminal: the tab closes when you `exit` the shell (a setting); a dropped connection keeps the tab with Reconnect.

Safety

• The cloud metadata address is refused. Connectors and web features refuse it, whether it's written as a number or as a name that resolves to it. Connector installers refuse a download without a valid signature, and the Linux Connector service runs with only the access it needs.
• Fewer false alarms in command review. Our review of risky commands now tells admin and lab work apart from abuse better.

Internal sites: reach a dashboard or an admin panel on a private network from your browser, with no port forwarding. Plus backups for Windows and macOS servers, alert settings for each server, and an Android app on the way.

Internal sites

• Open an app that only your private network can reach — in any browser. Point a Connector at a web service it can get to (Grafana, Home Assistant, Portainer, a router's page — anything on `localhost` or a private address) and Termalin gives it an address of its own, `https://<10 characters>.termal.ink`. Nothing is opened on the server and no port is forwarded: the Connector dials out. Connectors on Linux, Windows and macOS all do this, and an app on the Connector's own `localhost` works on Windows and macOS too.
• Yours alone, or shared with a few people. You open a site from the cabinet or the app, already signed in. Share it with specific people by email for 24 hours or 7 days — they confirm their address with a one-time code, with no account to create — and you can take access away at any moment, which closes their open pages at once. Opening works on Pro, Team and the trial; sharing needs a paid plan.
• Most apps work with nothing to change on their side. WebSockets pass through; turn on "the internal site uses https" and a self-signed certificate inside is fine. Grafana, Home Assistant and Portainer open as they are — the visitor's address arrives in `X-Real-IP`, so apps that refuse an unknown proxy don't need a proxy setting. Only private addresses can be opened.
• Easy on the limits. There's no cap on how many sites you add. A soft daily traffic brake — 5 GB per link, 20 GB per account — resets at midnight UTC, and a link you didn't name shows visitors just "Internal site".

Server backups

• Back up Windows and macOS servers too, through a Connector — until now backups were Linux only. On Windows, files that are open during the backup (databases, mail stores) are copied consistently from a Volume Shadow Copy when the Connector's login user is an administrator (Windows 10 1803 / Server 2019 and newer); without that right it reads the live drive and the archive says so. On macOS it packs at the lowest priority; if macOS blocks a folder, turn on "Allow full disk access for remote users" under Remote Login. The backup form shows example paths for each server's OS, in the cabinet and the app.
• Trial backups use up to 5 GB of Termalin storage — a paid plan gives them the full pool. If your plan or trial ends, scheduled jobs stop but the archives already in Termalin storage stay downloadable for a while (14 days after a trial, 30 days after a paid plan), with an email before they're removed. Archives in your own S3 bucket or on your own server are never touched.

Alerts

• Each server can keep its own alert settings. Per server, choose Account defaults, Custom or Off — and Off only stops the alerts, it keeps collecting that server's metrics, so you no longer have to switch monitoring off to quiet one noisy machine. Every threshold is editable, down to how long a server must be gone before it counts as offline, how long the host may take the CPU, how many days before a certificate expires count as critical, and the inodes-critical mark. In the cabinet and the app.
• New account-wide alerts. You're told when your Termalin storage is nearly full, when a scheduled backup quietly stops succeeding, when your balance falls below a figure you set, and before an auto-renewing storage pack renews if your balance won't cover it.

Desktop and mobile apps

• An Android app is coming to Google Play. It's the same app as on iPhone and iPad; open sessions stay connected while it's in the background, and it receives your server alerts like the iPhone does.
• Add a Connector on Windows from the desktop app. The add-Connector dialog now has a Windows choice with the PowerShell line to run as administrator; it installs OpenSSH if the server needs it and leaves port 22 closed.
• A desktop opened through a Connector signs you in as the Connector's user by default, so there's nothing to retype. "Save password" now starts off for SSH, RDP and VNC — a password is kept only when you tick it.
• Open a Mac's Screen Sharing with its own user name and password. The app now speaks macOS Screen Sharing's sign-in, so a Mac opens with the account you log in to it with — the Mac's own user, not an Apple ID — as it already did in the web cabinet.
• On iPhone, sign in before you subscribe. A purchase is now tied to the Termalin account that made it.

AI apps and API keys

• AI apps can add internal sites to your cabinet: `web_link_create`, `web_link_list` and `web_link_delete`, 21 tools in all. Ask an assistant to set up a dashboard that only listens inside a server (say `localhost:3000`) and it appears under Internal sites, marked "Added by" with the app's or key's name. Only you open it, signed in; sharing it with someone stays with you in the cabinet. Adding and removing need full access, on a Connector open to AI with full access.
• A client with no credential is told to sign in instead of connecting and then failing tool by tool.
• `backup_create` asks first. It's marked as a tool that can change things — keeping its "keep last" count can remove the oldest archive — so assistants that confirm before destructive steps check with you.
• Windows Connectors don't try to sign in as `root`. Windows has no root user, and the attempt only filled the server's log with failed sign-ins.
• AI apps no longer see servers you've closed to AI when they read metrics or alerts.

Teams

• Adding someone to a team now sends an invitation they accept. They join only when they accept it — from the email or in the cabinet, signed in with that confirmed address — and take no seat until then. Pending invitations are listed and expire after 14 days; the owner can cancel or resend one.

Privacy, security and email

• Internal sites stop the moment an account is paused. Access is checked on every request, so pausing an owner's account ends sessions that were already open, not only new sign-ins.
• The web Data client reaches only the address you give for MongoDB and Cassandra — it no longer follows a cluster to other addresses the server reports.
• A deleted account leaves only a short, hashed record, erased 12 months after it's deleted; the privacy page lists exactly what's kept.
• Account emails fit a phone screen — images size to the screen, long words wrap, and the text is a step larger.

Founders Lifetime

• Lifetime now sells in three price steps within the same 100 licenses: 1–25 at $149, 26–50 at $199, 51–100 at $249. The pricing page and the cabinet show the current step and how many licenses are left at its price. Anyone who already bought keeps Lifetime as before.

What this release of the web cabinet, the cloud service and the Connector brings; the desktop app's part of it is in the section below. The mobile apps stay at 0.1.47; the Chrome extension is new.

Server backups

• Encrypted backups of your Linux servers, taken through the Connector. Pick a server, the folders, how often (hourly, daily, weekly or by hand), how many copies to keep, and a read-speed limit so a backup never hogs the disk and network the server needs (20 MB/s by default; 0 lifts it). Nothing is installed on the server: it packs the folders at the lowest CPU and disk priority. Backups are a Linux feature for now.
• Only you can open an archive. Each backup is encrypted with a key made in the cabinet or the app; the private half is protected by your master password, and a key made in one opens the other's archives. Termalin's storage, an S3 bucket and your own server hold ciphertext only. Download an archive, or decrypt it in the browser or the app and save the `.tar.gz`.
• Store it where you like. Termalin storage (shared with recordings), any S3-compatible bucket (AWS, Backblaze B2, Cloudflare R2, Hetzner, MinIO…), or My server (via Connector) — over SFTP to another of your servers that has a Connector, such as a second VPS or a home NAS (default folder `termalin-backups`, a relative or absolute path you can change). An S3 bucket and your own server don't count against your plan's storage, and archive lists show where each file lives.
• Sensible limits. Backup jobs per account: 20 on Pro, 100 on Team. Largest single archive: 4 GB on Pro, 20 GB on Team.
• A failed scheduled backup tells you the way your alerts arrive — email, push, Telegram or webhook; Run now shows the error directly.

Connector on Windows and macOS

• One line, like on Linux. `curl -fsSL https://termal.in/i/<token> | sudo sh` on Linux and macOS; `irm https://termal.in/i/<token>.ps1 | iex` in PowerShell on Windows — Windows asks for administrator rights itself. Get install command in the cabinet gives the line under the Linux / macOS and Windows tabs; the link works once, for an hour. On macOS the Connector turns on Remote Login; on Windows it adds the built-in OpenSSH Server if missing, runs as a service and gives SSH sessions PowerShell — so the web terminal, remote desktops, AI apps and monitoring reach those servers too.
• On Windows, port 22 stays closed. When the installer adds OpenSSH, sshd listens on the machine itself only and the firewall rule for it stays off; sshd is left on automatic start. An OpenSSH Server that was already installed is left as it was.
• Windows on ARM. The Connector now has Windows ARM64 builds alongside x64.
• Monitoring for Windows and macOS servers. A server's metrics and alerts now work on Windows (CPU, memory, page file, drives, network, disk traffic, processes, uptime) and macOS (load, CPU, memory, swap, volumes, network, processes, uptime), not only Linux.
• Uninstall with one command: `termalin-agent uninstall` on macOS, `& "$env:ProgramFiles\Termalin\termalin-agent.exe" uninstall` on Windows.

Remote desktops

• RDP and VNC desktops in the browser, through the Connector. Right-click a Connector or a host that has one → Remote desktop: a Windows desktop (RDP, port 3389) or any VNC desktop (5900–5999) on the Connector's machine or its private network opens in the cabinet — no inbound port. Tabs, Ctrl+Alt+Del, paste your clipboard into the desktop, fit or actual size. 4 open at once on Pro, 10 on Team; idle sessions close after 30 minutes. Pro, like the Connector.
• Or directly, without a Connector. A desktop reachable from the internet opens straight from termal.in: choose Direct in the Remote desktop dialog and enter its public address. Public addresses only — a computer on a private network still goes through a Connector. If the connection fails, the cabinet says why: refused, no answer, or a private address.
• Save a desktop as a host. RDP and VNC are host types in the cabinet now, with a Connect choice — *Directly (the desktop has a public address)* or *Through Connector {name}*. The protocol and port are remembered on the host, the password never is. (The desktop app opens the same hosts in a tab; it needs 0.1.48 or newer.)
• Files next to the desktop. A desktop opened through a Connector on the Connector's own machine gets a Files button that browses that machine's files through the same Connector, with no key — docked beside the desktop. Windows drive paths work.
• Windows desktops remember their certificate. The first time you open an RDP desktop, its certificate is remembered for that desktop. If it later shows a different one, the connection stops and both fingerprints are shown, with a button to trust the new one.
• Brakes against guessing. Three failed sign-ins in a row to the same desktop pause it for 30 minutes, doubling up to a day; direct mode allows at most 30 new sessions and 5 different addresses an hour.

AI apps and API keys

• Two new tools, 18 in all: `backup_create` and `backup_list`. An AI app can take an encrypted backup of a server before a risky change, with a note saying why, and check that last night's backup worked.
• Decide what AI may run on each server. A Connector's settings — in the cabinet or the app — now have "What AI may run here": full access, only listed commands, or read-only. It applies to every AI app and API key on top of their own setting, and the stricter of the two wins. Your own sessions are never limited by it.
• Your own Anthropic key isn't held to the built-in limit. The assistant ran at most three requests at once per account whichever key it used; with your own key it can now run up to ten.
• "Only listed commands" is stricter. Shells, interpreters, editors and anything that runs other programs are refused even when listed; `sudo` is looked through; the flags that make `tar`, `find`, `git`, `docker`, `kubectl`, `rsync`, `ssh` and `curl` run or write something are refused. The cabinet explains what the list can and cannot do.
• Keys and connections that may only run listed commands, or only read, always sign in as the Connector's user. They can no longer pick another login user, and nothing falls back to `root` behind the caller's back.
• An AI app that reconnects keeps its rules. Reconnecting under a new client id no longer resets a connection to full access.

Termalin for Chrome

• A browser extension, now in the Chrome Web Store (https://chromewebstore.google.com/detail/lndnklpcljdenmlmgmcobchhdkpaahgi). On ChatGPT, Claude, GitHub and Stack Overflow every code block gets Run on server: pick a server, check the command, run — nothing runs until you press the button, and risky commands ask twice. After a run, Insert into chat puts the output into the ChatGPT or Claude composer so the agent sees the real result. The side panel shows your servers, open alerts and server metrics, with a command box and history; the toolbar badge counts open alerts. On Hetzner Cloud, DigitalOcean and AWS EC2 pages a known server IP gets a Run button. In nine languages. It signs in to your account like any AI app and follows the same command rules.
• `hosts_list` returns each server's public `ip` (the address its Connector connects from), for the extension and for your own scripts.

Sign-in and account

• "Sign in with browser" shows who is asking. The approval card names the app, where the request came from and how long ago, warns when it came from another network, and asks for the short code the desktop app shows.
• A confirmed email is needed to create an API key or add a passkey. Resetting the password of an unconfirmed account also removes its keys, passkeys, devices and connected apps.
• An authenticator code works only once. A used two-factor code can't be replayed.

Plans

• One cloud storage pool for recordings and backups: 25 GB on Pro, 100 GB on Team. Recordings keep priority — they are never removed to make room for a backup; a backup that would not fit does not start and says why. Monitoring history is not part of the pool.
• More cloud storage when you need it. On a paid plan you can add 100 GB for $2.99 or 1 TB for $19.99 a month, paid from your balance and shared by recordings and backups. Cancel any time and the pack lasts to the end of the month you paid for; if a pack ends and your files no longer fit, new backups and recording uploads pause while downloads and restores keep working, and after 30 days the oldest backup archives are removed until everything fits (recordings are never removed).

Remote desktops, backups, monitoring and alerts arrive in the desktop app, alongside the web cabinet's part of this release above.

Remote desktops (RDP / VNC)

• RDP and VNC hosts open in a tab. Two new connection types next to SSH: a Windows desktop over RDP or any VNC desktop, scaled to fit the tab or at actual size, with mouse, wheel, keyboard, Ctrl+Alt+Del and the clipboard both ways. Connect directly to an address, or through a Connector to a desktop on its private network (empty address = the Connector's own machine). On the Connector path the encrypted RDP session is opened by the app itself; termal.in only passes bytes along.
• Direct is free; a Connector needs a plan. A direct RDP or VNC connection from the app is free — your computer dials the desktop and our servers aren't involved. Opening one through a Connector uses the backend relay and needs a paid plan (Pro, Team or the trial).
• Files beside the desktop. When a desktop is opened through a Connector on the Connector's own machine, a file panel docks beside it — that machine's files through the same Connector, with no key.
• Windows sign-in with user, password and domain (local accounts or NTLM; Kerberos is not supported). The password prompt and "remember password" work as for SSH. The server's certificate fingerprint shows in the status line.
• The app remembers a desktop's certificate on first connect and stops with both fingerprints if it changes, before any password is sent; trusting the new one is a click. Editing the host's address or route clears it.
• Mac keyboard and clipboard. ⌘ is the Windows key, and ⌘C, ⌘V, ⌘X, ⌘Z, ⌘A, ⌘S, ⌘F arrive as Ctrl shortcuts; a per-host switch sends every ⌘ as Ctrl. The clipboard syncs both ways: what you copy locally reaches the desktop when the viewer gets focus, what you copy there lands in your clipboard; one switch per host turns it off.

Backups, monitoring and alerts in the app

• Backups — Settings → Account → Backups: jobs (add, edit, run now, pause), archives (download, decrypt & save), your own S3 buckets, another of your servers (My server, via a Connector), and the storage bar shared with recordings. A backup job's key made in the app opens in the web cabinet and the other way round.
• Monitoring — an overview of every Connector server (CPU, memory, disk, load, online), collection switches, and 1h / 24h / 7d charts per server. The rarer panels open the web cabinet.
• Alerts — open and recent alerts, mute (24h, until lifted, a whole server), and the settings: email, push, webhook, Telegram, thresholds, pause all, send a test.
• Signed-out and Free accounts see what the feature is and where to sign in or pick a plan, instead of an error.

Agent keys

• Keys saved in the app unlock in the key agent automatically and show up at once, instead of waiting for a manual unlock.
• A key the agent can't load is listed with the reason, instead of quietly disappearing.

Privacy and security

• Session recordings are encrypted on your computer. Recordings the app saves are now encrypted with a key kept in your system keychain (macOS Keychain, Linux Secret Service, Windows user account). Replay, "Summarize with AI", saving a copy and cloud backup work as before. Recordings from earlier versions are converted the first time the app sees them, and nothing is replaced until the converted copy has been checked. If the keychain can't be opened, a recording says so instead of failing to load.
• The app checks termal.in's certificate. The app now compares termal.in's certificate with the authorities our hosting uses. In this release the check only notes a mismatch (Settings shows how many connections it would have refused) and never blocks anything; refusing such connections comes in a later release. The list can be updated ahead of time with a file signed by our offline key, and if an old copy of the app can't get an update, the check pauses with a note in Settings. On a network that inspects encrypted traffic, you can turn off "Check the termal.in certificate" in Settings.

These reached the web cabinet and the cloud service on their own, with no app release — the desktop and mobile apps are still 0.1.47.

Server monitoring and alerts

• Server metrics in the browser, nothing to install. Any server with a Connector (Pro and Team) now reports to the web cabinet once a minute: charts for CPU, load, memory and swap, disk and inodes, network, disk I/O, pressure, processes, containers, failed services, TLS certificates and listening ports. Hover a point to see that interval's peak. History goes back 90 days on Pro and two years on Team. Turn it on for everything at once, or per server.
• Alerts with sensible defaults. You get told when a disk is nearly full or filling fast, inodes run low, memory or load climbs, the host eats the CPU, a process is killed for memory, a service fails, a container keeps restarting or reports unhealthy, a certificate is about to expire, the clock drifts, or a server goes offline or reboots. Alerts go to email and iOS push out of the box, to Telegram through a one-click bot link, and to a signed webhook that Slack and Discord accept as is. Thresholds are editable; mute one kind of alert on one server, or a whole server, for a day or until you lift it. "Repeat" is off by default and "Tell me when a problem clears" is on. A new Connector sends only critical alerts for its first day.
• Fewer false alarms. Old or placeholder certificates, routine failed services and finished disk bursts no longer page you; a batch of failed services arrives as one alert, and a connection that flaps is reported once as unstable rather than over and over.
• Quieter alerts. A value sitting on its threshold keeps a single alert open instead of flapping; "offline" waits five minutes before it fires; "resolved" is sent only for problems that lasted fifteen minutes or more; and once an hour has three messages, the rest are held for a single summary at the end of the hour.
• Reinstalling a Connector keeps its past. Running the install command again on a server you already have keeps that server's history and settings, instead of leaving you with a second entry.

AI apps and API keys

• AI apps can read your monitoring. Two new tools let a connected assistant pull a server's metrics and its open alerts, bringing the hosted endpoint to 16 tools.
• API keys that are easier to set up. Each key now comes with ready-to-paste configuration for Claude Code, Cursor, VS Code, Claude Desktop, Manus and other agents, or a curl line. A Test button tells you how many servers the key can reach. When a key is refused, it now says why — expired, revoked, or cut off where it was pasted — and the key list shows the last refused attempt.

Web terminal

• The AI "explain" answer ends with something to run. When you ask the assistant to explain output in the web terminal, it finishes with a few read-only commands to check the thing yourself; a button types them at the prompt, and never runs them for you.
• Select and copy inside full-screen programs. In apps that take over the mouse — Claude Code, Codex, htop — dragging now selects text and copies it when you let go. Right-click has "Copy screen", and "Select text…" opens the last 2,000 lines as plain text, which also works on a phone.

Plans and account

• No more caps on what you can save. There is no longer a limit on hosts or SSH keys on any plan, and no set limit on devices or Connectors on Pro and Team.
• See how much recording space you're using. A bar in the web cabinet — and in the app's account dialog — shows space used against your total, the number of recordings, how long they're kept, your largest file, and a warning once you pass 80%.
• "Upgrade" takes you to the right place. Upgrade links now open straight on the Billing card.
• Deleting your account clears everything. Removing an account now also deletes its activity log, AI command log, command history, saved host keys and recording files.
• The free trial is once per person. A second account on the same device or server starts on Free; the email explains how to get the trial back if that wasn't intended.
• A Lifetime licence stays Lifetime. Buying a monthly or yearly plan can no longer overwrite a Lifetime licence.

Bring any model: the assistant now runs on an endpoint of your choosing, local models included. Plus the first fixes after 0.1.46.

AI assistant

• Your own model, any provider. Settings → AI assistant → Model provider → Own endpoint: any OpenAI-compatible API (OpenAI, Gemini, OpenRouter, Groq, DeepSeek) or a local model through Ollama or LM Studio. Requests go straight from your device to that endpoint with Termalin's prompts; nothing passes through Termalin's server, and no allowance applies. The key is optional for a local server. Same in the web cabinet (Account → AI assistant).
• Right-click in the web terminal now has Copy, Paste, Explain the selection and Ask for a command, as on the desktop.
• Asks first (iOS and Microsoft Store builds). The first time you use a summary, an explanation, a command request or "describe this server", the app says where the text goes — the built-in provider or your own endpoint — and asks to allow it. Declining sends nothing. Asked once per provider. Desktop builds from the site get this with the next update.

Fixes

• AI answers no longer come back empty on desktop. Explain, the command from a request, the session summary and the AI settings page read the server's answer from the wrong place and showed nothing; the web cabinet was not affected.
• The command never carries prose. The assistant could put an assumption on the first line and the client typed it into the shell; the command and the note are now kept apart.
• In the web cabinet, "Ask for a command" from the ✦ button did nothing; it works.
• The "what's new" notes in the update prompt are shown in full again (a symbol in the 0.1.46 notes cut them short).

The AI assistant: what a session did, what an error means, the command for what you want — and a watchful eye on what AI agents run.

AI assistant

• Session summary — in the replay player, the Summarize button tells you what a recorded session did, what went wrong and what is left. Works for your own sessions and for ones an AI agent ran. Also in the web cabinet (right-click a recording).
• Explain this — select terminal output, right-click → Explain with AI: what it means, the likely cause, what to do.
• A command from a request — Ctrl+Shift+K (or the AI key on a phone): say what you want, get the command typed at the cursor. It is never run for you.
• Describe this server — in Connector settings: a few read-only commands, then a short card of what the machine is and a suggested note for AI apps.
• Allowance and your own key — each paid plan includes a monthly number of requests (Settings → AI assistant shows it). Add your own Anthropic API key to lift the allowance; it works on every plan, including Free.
• What is sent and kept — the text a feature works on goes to Anthropic through Termalin's server and is not stored or logged by Termalin; recordings stay encrypted and are decrypted on your device only when you ask for a summary. The privacy page has the details. Every answer has a report button.

Admin

• A second opinion on AI agents' commands: next to the pattern check, the model marks what looks like misuse, with a reason.

AI apps get background jobs and multi-server commands, the web cabinet imports from MobaXterm and gets out of a changed-server-key dead end, and the first things you see after signing up say more.

AI apps and Connectors

• Background jobs for AI apps — `job_start`, `job_status`, `job_stop`, `job_list`: a build or migration keeps running on the server after the AI's turn ends, and the AI comes back for the log and the exit code.
• One command on several servers — `ssh_exec_many` runs it everywhere at once and returns each server's output.
• `data_schema` in the cloud — describe a table through a Connector, as the local server could already.
• A note for AI on each Connector — what this server is and what to be careful with; AI apps read it before working there. In the app's Connector settings and in the web cabinet.
• Read what an AI command printed — the command log opens the kept output (web cabinet → API keys & MCP turns keeping it on).
• An AI that asks for a server by a wrong name is told the right ones.
• Right after connecting Claude or ChatGPT, the cabinet offers to add the first server. A Connector that is paused by the plan says so instead of looking offline.
• Clearer refusals: a server that does not accept the sign-in says which of the two usual causes to check; an unknown access policy on an API key is refused instead of being treated as full access.

Web cabinet

• Import from MobaXterm — upload the sessions export; folders come along, SSH, SFTP, FTP and Telnet sessions are mapped.
• A changed server key is no longer a dead end. When the server's key differs from the one seen before, the terminal says so and offers to trust the new key and reconnect — your call, since only you know whether the server was reinstalled.
• A refused connection names the two usual causes (nothing listening on the port, or the server's firewall blocks our address).
• Feedback is one click away in the sidebar.
• Sign-in security (two-factor, passkeys, social sign-in, app link) is fully translated in all nine languages.
• Storage (S3-compatible) and database connections to custom endpoints go through the same outbound address as the web terminal.

App

• Pause AI agents while locked — an optional switch in Settings: while the master-password lock is on, agents get a clear "locked" answer instead of running commands.
• Copy the command that puts a key on a server — from a key's menu, ready to paste into the server's terminal.
• A hint on the unlock screen after two wrong tries; a notice when the trial ends and the plan changes what syncs; a clear message when this device was signed out instead of "offline".
• A tunnel that could not start says why. The allowed-commands list explains what each line allows.

Fixes

• The command log of a background job shows the command, not the helper script around it.
• A Connector's address and country come from the connection, not from headers a client could set.
• Anonymous trial accounts (throwaway e-mail, Tor) cannot use the web terminal relay; everything else works.

Per-server control over what AI apps may reach, a Linux build that runs on the common distributions, and fixes for sleep on Windows, snippets and tunnels.

Connectors and AI apps

• Connector settings — rename a Connector, set the user it signs in as, and switch AI access off for a single server. In the app (right-click a Connector or its host) and in the web cabinet.
• "Connector" is a host type in the add-host form, on desktop and phone: it gives the one-line install command for a server behind a firewall. New Connectors appear in the list by themselves.
• Connectors can be revoked from the app; an offline one shows when it was last seen.
• Databases through a Connector from the app, as in the web cabinet — including the passwordless mode.
• Keep what AI commands printed: an optional log of command output, readable only by you (web cabinet → API keys & MCP).
• AI apps are told when a command did not finish, get clean results from read-only database queries, and no longer hit "server offline" in the first seconds after a Termalin update.

Account and devices

• Two-factor sign-in can be turned on and off in the app: QR code, confirmation code, one-time backup codes.
• Sign out another device remotely from Activity & devices — the thing to do when a phone is lost.
• S3 connections can be edited and deleted in the app.

Fixes

• Windows: the window comes back after sleep. After a night asleep the window could stay blank until restarted.
• Snippets sync. Snippets made in the app never left the device, and snippets from the web cabinet never showed up; both now use the same store, and existing snippets are moved over once.
• Claude Code no longer underlines the whole screen — one of its control sequences was misread as "underline".
• A tunnel set to start automatically that could not come up was retried every 20 seconds forever, signing in to the server each time. Retries now back off to once in ten minutes.
• The interface no longer falls back to German on systems set to a language Termalin doesn't have; it uses English.
• An idle app no longer keeps a CPU core busy.

Linux

• The AppImage runs on Ubuntu 22.04 and newer, Debian 12 and newer, Fedora and openSUSE. It is now built on an Ubuntu 22.04 base; the previous build required a newer system library than most distributions ship.
• The app starts on minimal installs that lack the desktop "user directories" tool, instead of showing an empty window.
• Local recordings, restored scrollback and agent settings are kept across this update.

Web cabinet

• Web terminal connections now leave from a dedicated address rather than from the Termalin server itself.
• Ctrl+C copies a selection on any keyboard layout, and Ctrl+V pastes once.
• A session that keeps getting cut within a minute stops with an explanation instead of reconnecting forever.
• The unlock screen explains what to do after a wrong master password, and there is a Feedback link at the bottom of the sidebar.

Sign in with Google, GitHub or Apple, a fix that brings the app back on Intel Macs, and a round of fixes from your reports.

Sign-in

• Continue with Google, GitHub or Apple — in the desktop app and in the web cabinet. Accounts with two-factor on are still asked for their code.
• A pending browser sign-in can be cancelled, and signing out goes straight back to the sign-in screen.
• Every password field has a show/hide toggle, and the account dialog shows how many days of the Pro trial are left.

Fixes

• macOS on Intel: the app starts again. The core library shipped in recent builds was Apple Silicon only, so the app couldn't load it on Intel Macs. The .dmg is properly Universal now — if you were affected, download it again from termal.in.
• "Remember password" works. The checkbox in the password prompt wasn't saved, and a saved password wasn't used on a manual connect. If the server later rejects a saved password, you're asked again.
• Closing the account dialog, the file manager or the data client could crash the app ("Cannot use ref after the widget was disposed") — fixed.
• After a trial ends, the app no longer asks the server to sync every 30 seconds; syncing by hand still works.
• A URL pasted into the host field (https://…, sftp://user@host:2222/path) is reduced to the host, with its port and user moved to their fields.
• Cloud sync unlocks the synced vault when the master password was set before signing in, and the "offline for a while" banner clears as soon as the server is reached.

New

• Full screen — F11 on Windows and Linux, Ctrl+Cmd+F on macOS.

ChatGPT, Claude and the web cabinet

• Termalin is in the Claude connectors directory — connect it from claude.ai in one click, the same as from the ChatGPT app directory.
• AI apps now get the exit code of every command, so a failed command no longer looks like a success. Read-only database queries are enforced by the database session itself.
• The web terminal and file browser reach IPv6-only servers.
• In the web terminal, `exit` ends the session instead of opening a new shell (press Enter to start another), and a wrong address is no longer retried twelve times.
• Invite links (termal.in/?ref=…) now credit the person who invited you — details at termal.in/referral.

Security

• Windows: the SSH key agent's pipe is private to your user, and keys are never handed to a pipe another program created first.
• Per-host command allowlists for agents are stricter: no quoting or control-character tricks around the list.
• While the app is locked, it refuses requests from local AI tools.
• The cloud session token is stored encrypted on disk.

A big one: Termalin now has a built-in database client.

Data — a database client for 13 engines

• New "Data" host type. Browse and query PostgreSQL, MySQL/MariaDB, SQLite, MongoDB, Redis, ClickHouse, Elasticsearch, Cassandra/ScyllaDB, Neo4j, InfluxDB, RabbitMQ, SQL Server and Cloudflare D1 — a schema tree of every database, table and column (with row counts, indexes, foreign keys and access), a SQL editor with Ctrl+Enter, and a results grid with CSV/JSON export.
• Edit right in the grid. Open a table and click a cell to change it, right-click a row to delete it, add rows from a form, add columns, create tables (with a column builder and a per-engine type picker) and databases. Tables without a primary key are editable too. Every generated statement is shown for review before it runs — nothing executes unseen.
• Document and broker stores included. MongoDB and Elasticsearch documents are edited by their id, with an "Add document" JSON form; RabbitMQ queues can be published to, purged and created; Redis keys are listed with type, TTL and a value preview — edit, expire or delete them in place.
• Behind a firewall — no exposed port. Reach a private database through a saved SSH host, and in the web cabinet through a Connector.
• Everything on the record. Each statement lands in the per-host command history (encrypted like your terminal commands) and the activity log — for you and for agents alike.

Agents

• Agents can query your databases — on your terms. The local MCP server adds data tools (list databases, tables, schema, run a query): off by default, read-only unless a connection grants full access, and every agent query is recorded and audited.
• Chat agents too, passwordless. claude.ai and ChatGPT connected over Termalin's hosted MCP can query databases on your servers using the database's own local trust over the keyless tunnel — no database password is sent or stored anywhere. Read-only by default.

Fixes

• Windows: the app no longer freezes after the machine wakes from sleep.
• Connectors no longer flap to "offline" while their tunnel is up; file transfers over a Connector handle files up to 100 MB; fixed an SFTP-over-Connector address that broke downloads.
• Unlinked Connectors now appear as one-click hosts in the sidebar.
• Changing a table's schema no longer breaks the next query on Postgres and MySQL ("cached plan must not change result type").

iOS

• Fixed: the app could not sign in on iPhone. The core library shipped in the previous build was out of step with the app, so signing in failed with "core library didn't load". Local hosts, keys and the terminal were affected too. Rebuilt and verified.

Command suggestions in every terminal, two-factor auth and passkeys, and a big terminal polish for Claude Code and friends.

Terminal

• Inline command suggestions: start typing and the rest of the command appears as ghost text — drawn from your history on that host, the server's own shell history (fetched at connect), your snippets and a built-in dictionary. Right arrow accepts, Alt+Up/Down pick between matches, Esc hides; several matches open a picker panel with a full-command preview and a bookmark that saves any suggestion as a snippet. Works in the desktop app and the browser cabinet alike. Settings has an on/off switch.
• Copy, paste and rendering fixed for Claude Code and other full-screen CLIs: large pastes arrive whole (bracketed, in order), Ctrl+C copies a selection without breaking interrupt, files can be dragged into the terminal to type their path, and the underline/color glitches some TUIs triggered are gone. The Claude Code mascot renders pixel-perfect with the bundled Cascadia Mono font.
• Selection survives scrolling: select with the mouse, roll the wheel — the selection grows with you instead of sliding away.
• The local terminal reopens in your last directory, and reconnecting a tab resumes exactly where that tab was.
• Command history no longer picks up interface text from full-screen apps; existing noise is cleaned up automatically.

Account security

• Two-factor authentication (TOTP): enable it in the web cabinet, sign in with your authenticator code (backup codes included). The desktop app prompts for the code too.
• Passkeys: sign in to termal.in with your device's screen lock instead of the password.
• "Sign in with browser" in the desktop app: approve the sign-in in your already-authenticated cabinet — the password never touches the app.
• Removing a device in the Devices view now actually signs that device out.

Fixes

• SSH-agent auth works again when the agent also holds a certificate (Fedora setups) — one unreadable entry no longer hides all your keys.
• SSH key generation produces real keys (a placeholder slipped into a previous build), and imported keys extract their public half correctly.
• Jump hosts (ProxyJump) for reaching servers through a bastion.
• The web cabinet's reverse-tunnel component is now called the Termalin Connector.

Connector alerts on iPhone, a smarter Dynamic Island card, and the subscription sheet in all nine languages.

iOS

• Server alerts: turn on the new switch in Settings → Security and your phone gets a notification when one of your Connectors goes offline — and another when it comes back. Short blips (a reboot, a network hiccup) stay quiet.
• The Dynamic Island card stays current in the background: when a connector drops or returns, the card updates on its own — no need to open the app.
• The subscription sheet speaks your language: every line of the App Store paywall is now translated, and "Plan & billing" explains itself properly on iPhone and Mac.
• "Restore purchases" now says so when there is nothing to restore, instead of spinning silently.
• Signing out no longer hangs when the server is unreachable.

Encrypted local storage on every desktop OS, auto-reconnect for password hosts, and the whole interface now follows your language setting.

Security

• Local data is now encrypted at rest on macOS and Linux too: saved hosts, keys and snippets are protected with a key held in the system keychain (macOS Keychain, GNOME Keyring / KWallet). Existing data is migrated automatically on first launch. Windows already worked this way and is unchanged.
• "Remember master password" now works on macOS and Linux — the password is kept in the system keychain.

Desktop

• macOS updates install themselves: the app now swaps in the new version and relaunches — no more dragging it into Applications by hand. (Takes effect for updates installed *from* this version onward.)
• Password hosts auto-reconnect: when a connection drops (network change, laptop sleep), sessions using password auth now reconnect automatically like key-based ones — no more dead "connection lost" tabs.
• Faster parallel connections: opening one SSH session no longer stalls the input and output of the others while it handshakes.
• Sessions whose connection silently died are now detected and cleaned up automatically.
• The SSH-agent key counter in the sidebar is one compact line ("32 / 36 unlocked") with an "Unlock N" button, instead of wrapping across several lines.

Languages

• The rest of the interface is translated: host screens, the file manager, the S3 browser, key/snippet/tunnel dialogs, status-bar tooltips and the account activity log now follow the language setting in all 9 languages. Previously parts of the app stayed in English.

More terminal themes with a live preview, plus a round of security hardening.

Desktop

• 20 more terminal themes (36 total): Matrix, Synthwave 84, Tokyo Night, Catppuccin, Rose Pine, Kanagawa, Night Owl, Ayu, Everforest, Homebrew, Cobalt2, Snazzy and more, with new light themes too. Set a default in Settings, or pick one per host or per folder.
• Theme preview: the picker now shows a small terminal preview of each theme, so you can see what a session will look like before choosing it.

Security

• Host backups (JSON export) no longer include saved passwords - only connection details.
• The server's identity is verified before the S3 and FTP/SFTP gateways send your stored keys or password.
• Hardened against a hostile server: capped SFTP file reads, the Telnet negotiation buffer and the terminal output buffer so they cannot exhaust memory.
• Imported host files no longer carry a local shell command, and connection details are kept out of release logs.

The macOS app is now signed and notarized by Apple.

macOS

• Signed and notarized: the macOS app is now signed with a Developer ID certificate and notarized by Apple, so it opens without the "unidentified developer" warning. The app's bundle id changed to in.termal.desktop; after updating you may be asked for your master password again on first launch (your synced data is untouched).

Termalin now speaks your language.

Everywhere

• 8 new languages: the desktop app and the web cabinet are now fully translated - Russian, Spanish, German, French, Portuguese, Chinese, Japanese and Korean, on top of English. Pick your language in Settings; the web cabinet has its own switcher too.
• Covers every screen (hosts, terminal, files, keys, snippets, recordings, tunnels, settings and the account/billing pages), including menus, tooltips, dialogs and the explanatory text.

Jump hosts, a local files browser, folders that nest, and a safer AI channel.

Desktop

• Jump hosts (ProxyJump): reach a server through a bastion — pick a Jump host in the host form and Termalin connects through it.
• Local files browser: open a files panel beside a local terminal — the same browser and built-in editor as SFTP, on your own disk (new file, rename, delete, edit).
• Folders that nest: rename and delete folders, drag one folder into another, and create subfolders (up to 4 levels). Deleting a folder lifts its hosts and subfolders to the top level.
• Remember on this device: a checkbox on the unlock screen so you’re not asked for the master password every launch.
• Report an AI response: flag inappropriate AI-generated content from Settings or the Agent Access screen.

Under the hood

• The bundled AI helper (MCP) now honours each host’s agent policy for file transfers and port forwards too, not just commands.

Bundled assistant helper and a smoother silent install.

Desktop

• Connect an assistant in one step: the local helper that lets Claude and other AI assistants reach your servers now ships inside the app and updates with it. Settings → Agent Access has a new "Connect an assistant" button with a ready-to-paste command and config.
• Cleaner unattended install: installing silently (for example via winget or scripts) no longer launches the app afterward. In-app auto-update still relaunches as before.

A password generator, a friendlier recovery code, and wider Linux support.

Desktop

• Password generator: a key button in the terminal toolbar makes a strong random password — pick the length and character types, it copies as you generate, and Insert types it straight into the terminal (handy when you're creating a user on a server).
• Recovery code as a phrase: recovery codes are now a phrase of words — easier to write down and read back. Existing codes keep working.
• Keys come back after auto-lock: unlocking after an inactivity lock now restores your keyless SSH keys too, not just the ones with a cached passphrase.
• Fixes and polish.

Linux

• The AppImage now starts on more distributions (Fedora among them) — it bundles the image and compression libraries they name differently.

Cabinet

• A password generator in the workspace toolbar, and recover with a code if you forget your master password.

Recovery codes for your master password, and a Linux startup fix.

Desktop

• Recovery code: when you set a master password you now get a recovery code, shown once. If you ever forget your password, the code gets you back in and you choose a new one — from the unlock screen or the lock screen. Keep it somewhere safe: it can't be reset for you. Making a new code or turning recovery off asks for your master password first, and we email you whenever a recovery code changes.
• Type into the watch grid: in the multi-session watch grid, the selected session now takes your keystrokes, like the web.
• Steadier sign-in: repeated wrong master passwords are slowed down to discourage guessing, and the app verifies the server before signing in.
• Fixes and polish.

Linux

• The AppImage now bundles the image libraries it needs, so it starts on Fedora and other distributions that name those libraries differently.

Find in the terminal, and finer control over what your AI agents can do.

Desktop

• Find in the terminal (Ctrl+F): search the whole scrollback, jump between matches with Enter or the arrows — it scrolls the match into view and highlights it — and press Esc to close. Works in SSH and local terminals.
• Per-host agent access: each host now has an access level for AI agents — full, an allowlist of commands, or blocked — set on the host. A blocked host refuses; an allowlist host only runs commands you've listed.
• Fixes and polish.

Cabinet

• Per-key command policy: an API key for the hosted MCP endpoint can now be full access, an allowlist of commands, or read-only — on top of the servers it's scoped to.

Copy on select, a smarter Ctrl+C, and sessions that come back on their own.

Desktop

• Copy on select: selecting text in a terminal copies it to the clipboard straight away — SSH and local terminals alike. Right-click still has the Copy / Paste / Clear menu.
• Smart Ctrl+C: when text is selected, Ctrl+C copies it; with nothing selected it sends the interrupt to the program as before.
• Reconnect on start: with Restore tabs turned on, your sessions now reconnect on their own wherever it can be done without asking — an SSH key, a cached passphrase, an unlocked agent key or a saved password, plus telnet, serial and local shells. Anything that still needs a password waits for a click, so startup never fills up with dialogs.
• Local terminal as a host: save a local shell like any other host (pick "Local") so it lives in your list and restores with everything else.
• Stronger master password: the master password now uses a stronger key derivation. Your existing data keeps working and moves up to it on its own — nothing to re-enter.
• Fixes and polish.

A local terminal, folder themes, and fixes.

Desktop

• Local terminal: open a shell on your own machine as a terminal tab. Add it like any host (pick "Local"), set a shell and working directory — or just type a command like `claude`, `gemini` or `codex` and it runs in a shell on open, dropping you back at a prompt when it exits. Works on Windows, macOS and Linux.
• Folder terminal themes: right-click a folder to set a default colour scheme for the hosts inside it. A terminal now picks its theme per-host, then per-folder, then your app-wide default.
• Watch grid themes: the watch grid now shows each session in its host's terminal theme.
• S3 file transfers: copying files to and from an S3 bucket in the two-pane file manager now works.

Terminal themes, tab reordering, and S3 in the file manager.

Desktop

• Terminal themes: pick a colour scheme per host, or set a default for all of them in Settings → Terminal. Ships Termalin's own palette (the default) plus Dracula, Nord, Gruvbox, Monokai, One Dark, Material and Solarized (dark & light). Your choice syncs with the host across devices.
• Reorder terminal tabs: drag a tab left or right to arrange your open sessions.
• S3 in the file manager: opening an S3 bucket now shows the two-pane file manager, like SFTP and FTP — copy objects between the bucket and your computer, or between the bucket and any SFTP/FTP host, in either direction. S3 is also a choice for the left pane.

Keyboard shortcuts and window memory.

Desktop

• Cmd+W / Cmd+Q: close the active tab and quit the app — even with live sessions open.
• Window memory: the app reopens at its last size and position.
• Web cabinet: repeated wrong master-password attempts now throttle, like the app.

Reset a forgotten password, cleaner settings, and terminal fixes.

Desktop

• Forgot your account password? The sign-in screen now has a reset link (email a code, set a new password) — you no longer need to be signed in to reach it.
• Settings open the right section: the Appearance/Terminal/Security/Sync sidebar entries jump to their section instead of the top.
• No more garbled scrollback: running a full-screen app (htop, vim…) no longer leaves garbled leftovers in restored/reopened tabs.
• Master-password guessing is throttled: repeated wrong attempts on the unlock screen now lock out for a growing delay.

macOS: SSH keys, tunnels and Touch ID.

macOS

• SSH keys & tunnels now work: the app is no longer sandboxed, so it can read your `~/.ssh` keys and open local port-forwards — these previously failed with "no accepted identity" and tunnel "permission denied".
• Touch ID: unlock with Touch ID now works and is labelled correctly (it said "Windows Hello" before).

Unlock your synced hosts on a new device.

Desktop

• Master password on a new device: signing in on a new machine (or after a reinstall) now prompts for your master password to unlock your synced hosts and keys, instead of opening with nothing visible.

Fixes sign-in on macOS and Linux.

Desktop

• Fixed sign-in on macOS & Linux: the app now loads its core library from the right place inside the app bundle. Some installs couldn't load it and got stuck at the sign-in screen — that's fixed.

A clearer message if the app can't start its core.

Desktop

• Clearer startup error: if Termalin's core library doesn't load, the app now explains it's a local install problem and to reinstall — instead of a confusing "server identity" error. Your account and the web cabinet are unaffected.

Your account, kept separate and secure — plus a Linux launch fix.

Desktop

• Sign in to Termalin: the app now uses your free Termalin account. It keeps working offline for up to 14 days between check-ins, so you're not blocked without a connection.
• Each account stays separate: signing into a different account on the same computer keeps every account's hosts and keys apart — no more mixing them up.
• Master password on sign-out: signing out now locks the vault, so signing back in asks for your master password again.

Linux

• Fixed launching on a clean system: the Linux app no longer fails to start when mpv isn't installed — the media library needed for file previews now ships inside the AppImage.

Cleaner links, a fixed About box, and a shortcut to manage your plan.

Desktop

• Fixed broken links: Security, Privacy, Terms and Help now open the right pages, and the old source-code links are gone.
• About box: shows the real app version and a tidy summary instead of a raw license dump.
• Plan & billing: a new entry in Settings opens your subscription in the browser.

Web cabinet

• Choose a plan and pay by card or crypto right in the cabinet.
• Sign up and set your master password in the browser.
• Confirm your email from the link in the verification email — no need to open the app.

Typing in the terminal is fixed, and SSH tunnels arrive.

Desktop

• Fixed typing in the terminal: on some setups typed characters stopped reaching the shell (Enter and the Ctrl keys still worked). Typing works again.
• Port forwarding (tunnels): open a forward in plain words, no `-L/-R/-D` to remember — reach a service that lives behind a server on your own computer, expose a local service on the server, or route your traffic through the server (a SOCKS proxy). Find them under the new Tunnels section, or from a host's menu; tunnels are saved and sync across devices.

Desktop & web

• Command history syncs: the commands you run, by host, now follow you between devices and show in the browser cabinet (Pro and Team). Encrypted with your master password.

Your desktop activity now reaches your account log too.

Desktop & web

• Every connection is logged: opening a host from the app — a terminal, the file browser, a serial port, or an S3 bucket — now shows up in your account activity, alongside where you were signed in and from which device. The host name is encrypted with your master password before it leaves the device, so only you can read which server it was; without your password the log shows only that a connection happened.
• Adding or removing an SSH key is recorded the same way, with the key's name kept encrypted.

Recycle bin, an activity log, and steadier sync.

Desktop & web

• Recently deleted: deleting a host now moves it to a recycle bin — restore it for up to 30 days, on desktop and in the browser.
• Activity & devices: see where your account is signed in and what each device did — sign-ins, connections and changes, with location.

Sync

• Deleting a host on one device no longer risks it coming back, and the app no longer overwrites the cloud between edits.

Downloads

• The installer keeps one stable name (Termalin-Setup.exe) with the version shown inside.

Fixes sign-in on installed builds.

Desktop

• Fixed the core module failing to load in installed builds, which blocked sign-in and left your synced hosts, keys and recordings locked. Signing in works again and your data comes back.

More sign-in diagnostics.

Desktop

• Records why the core module failed to load, when it does, to finish diagnosing a sign-in issue.

Diagnostics for a sign-in edge case.

Desktop

• When server verification fails at sign-in, the app now records exactly what it saw, so a network-specific failure can be pinned down and fixed.

Safer sign-in on a shaky connection, and cleaner CSV imports.

Desktop

• On a new device with a flaky connection, sign-in now waits until it can confirm your account's encryption settings before finishing, instead of risking the wrong key — and it re-checks them on every unlock.
• Importing a CSV that Termalin exported keeps each host's protocol and auth method; PuTTY `.reg` files with odd values import without failing.

Update prompts that always reach you, and safer API keys.

Desktop

• The “update available” prompt now shows on any screen — including before you sign in — so a fix is never hidden behind a screen you can't get past.

Web

• Creating an API key now lets you scope it to specific tunnelled servers and set an expiry (30/90/365 days or never); a key past its date stops working on its own.

Move your hosts in and out, and steadier sign-in.

Desktop

• Export your hosts to a Termalin backup, a portable SSH config, or a CSV — from the Hosts screen. Connection details only; passwords stay in the vault.
• Import saved PuTTY sessions on Windows, straight from your saved sessions or a `.reg` export.
• Import also reads a Termalin backup file, so hosts round-trip between devices.
• Sign-in no longer fails when the device clock has drifted — a valid server signature is enough.

Web

• The browser cabinet gains the same Export, plus PuTTY `.reg` import.

Reliable sign-in on a new device, and the Windows app icon is back.

Desktop

• Fixed signing in on a fresh install: the app now fetches your account's encryption settings from the server, so entering your master password on a new device unlocks your existing hosts, keys and recordings instead of starting empty.
• When you sign in on a new device, the master-password prompt now asks for your existing password (not a new one), so returning users know exactly what to type.
• Restored the Termalin app icon on Windows installs.

Settings polish, HTTPS-only sync, and a browser demo.

Desktop

• Adjustable terminal font size, applied live from Settings.
• Tidied the settings screen so every control does something, and Clear All Data now really resets the app.
• Cloud sync refuses plain HTTP — it always talks to the server over HTTPS.

Web

• A live demo of the browser cabinet at termal.in/account?demo — click around with sample data, no sign-up needed.

Cross-platform builds, more protocols, and a browser cabinet.

Cross-platform

• Native builds for Windows, macOS and Linux, from termal.in/download.
• Signed auto-updates on every platform — the app checks in and updates itself.

Files & protocols

• SFTP, FTP, Telnet, Serial and S3 as first-class hosts, on desktop and in the browser.
• A dual-pane file manager to move files straight between two servers, no local staging.

Browser cabinet

• The full client at termal.in/account — terminal, file browsers, snippets and recordings from any device, keyless to private hosts through the tunnel agent.

Under the hood

• Security response headers, per-endpoint rate limits, and other hardening.

The first public beta — a fast, agent-native SSH client.

Terminal

• Tabbed xterm terminal with a hosts sidebar, snippets, folders and session restore.
• Live status bar — CPU, RAM, disk, network and more, streamed from each host.
• Watch grid — mirror every open session at once, side by side.

Files

• SFTP browser with a built-in editor (syntax highlighting, find & replace).
• Viewers for images, PDF, SVG, Markdown, CSV and archives, and streaming for large media.

Agents

• MCP server — agents open their own SSH sessions or step into yours, with keys that never touch disk.
• Every agent command is marked in the session recording.

Recording & sync

• Session recording & replay with a scrubbable, marked timeline.
• End-to-end encrypted cloud sync and cloud recordings (Pro).
• A web cabinet to replay recordings in the browser, decrypted client-side.

Security

• SSH key agent, master password with auto-lock, lock-on-minimize and Windows Hello.
• Signed auto-updates — releases are verified against an offline key before installing.
• The app verifies the server's identity before sending account credentials.