Kino SSH Manager

Name: Kino SSH Manager — Download free. Encrypted credential terminal
Availability: InStock
Rating: 5 (1 reviews)
Author: Samarth Kombemane

Kino SSH Manager — Free Download. Encrypted credential terminal

Kino SSH Manager is a cross-platform credential manager and terminal that keeps hosts, keys, and passwords in one encrypted vault on the local machine. It combines an SSH client, SFTP browser, process manager, cron editor, and port forwarding tools. The application stores data only on the device and supports optional sync to a private GitHub repository. Session recording, Docker control, jump hosts, and a built-in AI copilot are available. The vault uses Argon2 key derivation and AES-256-GCM encryption. One master password unlocks all stored credentials and snippets.

★★★★★

5.0(1 ratings)

Download Kino SSH Manager (Official links)

File size: 9.87 MB

The latest version of Kino SSH Manager is: 0.9.2

Operating system: Windows, Linux

Languages: English

Developer: Samarth Kombemane

Price: $0.00 USD (Open Source (GPL-3.0))

Encrypted vault. All hosts, keys, passwords, notes, and snippets are stored in a single encrypted container protected by Argon2 key derivation and AES-256-GCM. A master password unlocks the entire vault. No plaintext data is written to disk. The vault remains on the local machine unless optional GitHub sync is enabled.
SSH terminal. A full xterm.js terminal is created for each host. Split panes, broadcast input, adjustable font size, and scrollback up to 200,000 lines are included. Multiple sessions run in tabs. Terminal output can be copied as a PNG image with colors and highlighting preserved.
Flexible authentication. Each host can use a password, an SSH key, or both. Keys can be imported from .pem, .key, or .ppk files. Ed25519 keypairs can be generated directly inside the application. Key audit checks for weak algorithms, reuse across hosts, and key age.
Port forwarding. Local (-L), remote (-R), and dynamic SOCKS5 (-D) tunnels are supported. Tunnels are started and stopped per session. Each tunnel is displayed as a diagram showing which end opens the port and which direction traffic flows.
SFTP browser. A built-in file browser handles uploads and downloads with progress indicators. Rename, delete, mkdir, and chmod operations are available. Remote files can be opened in a built-in Monaco editor and saved back over SFTP without a manual download round trip.
Snippets library. A reusable command library stores frequently used commands. Selected snippets can be configured to run automatically when a connection is established. Snippets are per-host configurable and stored inside the encrypted vault.
Cron editor. The host crontab is read and each schedule is shown in plain English, such as "At 04:00 on Tuesday." The next execution times are calculated in the host clock. Only lines that are changed are rewritten, so comments and PATH settings remain untouched.
Process tree. Processes are grouped under their parent processes and branches can be folded. Filtering keeps matching ancestors visible so a result never appears without the chain that spawned it. Signals including SIGTERM, SIGINT, SIGHUP, SIGSTOP, SIGCONT, and SIGKILL can be sent to any process.
Docker management. Containers, images, volumes, and networks can be listed and controlled over an SSH connection. Live log streaming is available. A one-click container shell opens a terminal session inside a selected container.
Jump hosts. Private hosts can be reached through a bastion host, similar to ssh -J. Any saved host can be selected as the jump host. The session tunnels through it. Each hop verifies its host key independently, and bastions can be chained.
Session recording. Any SSH or local session can be recorded to an asciicast file. Recordings can be replayed inside the application with a built-in player. This feature is suitable for audits and demonstrations.
Encrypted profile sharing. A host can be exported as a password-encrypted file using Argon2 and AES-256-GCM. The recipient imports the file with the password. The shared profile does not include shell history archives.
Live system metrics. A streaming dashboard shows CPU, memory, disk, load average, uptime, and network throughput. Metrics are sampled once per second for remote hosts and the local machine.
Host health probes. An optional background probe shows a live reachability indicator and round-trip latency next to each host. The feature is disabled by default and can be enabled per host or globally.
AI copilot. An opt-in assistant in the terminal is powered by OpenRouter. Users bring their own API key, which is stored encrypted in the vault. Terminal output can be selected and sent to the copilot for explanation or error analysis.
Session restore. Open tabs and pane layouts can be remembered and rebuilt after unlocking. Each host reconnects into its original pane. This option is configurable and can be disabled.
Home favorites. Frequently used hosts can be pinned to a home panel with one-click connect cards. The panel appears when a pane is empty. A star in the sidebar adds a host to favorites.
Customizable shortcuts. The command palette, terminal find, copy, paste, and font shortcuts can be rebound. Live conflict detection shows duplicate assignments. Each action has a per-action reset option.
In-app updates. New releases are installed from inside the application. The signed package downloads and applies in place, then offers a relaunch. Every update is verified against a bundled public key.
Agent mode and relay discovery. Hosts with no inbound port can be reached through a relay. The agent dials out, so nothing is exposed. Kino Cloud relays or self-hosted relays can be used. Relay discovery lets a host point to kino-control instead of a fixed relay, with the saved relay URL as a fallback.
Encrypted notes. Recovery codes, licence keys, and API tokens are stored beside the vault under the same master password. Note bodies remain blurred until clicked to reveal. Notes sync with the vault.
Shell history archaeology. The shell history of the connected account is pulled into an encrypted archive per host. Commands that HISTSIZE has already trimmed from the server accumulate in this archive. The archive is never part of an exported profile.
Tray operation. Minimising sends the application to the notification area instead of the taskbar. Closing the window leaves it running. Desktop notifications appear when a host that was up goes down. An ntfy topic can be added to forward alerts to a phone.
Output highlighting and terminal find. Timestamps, severities, IP addresses, URLs, and file paths are colored from the active theme. Highlighting is disabled inside vim, htop, less, and over output the host already colored. Terminal search reports match count and position, highlights every hit, and marks matches on the scrollbar. Case-sensitive, whole-word, and regular-expression toggles are included.
Typography and motion. Six bundled monospace fonts are available for the terminal. An optional background override and a choice of interface font, including Atkinson Hyperlegible, are provided. A reduced-motion switch stops all animation and decorative effects.
Host key verification. A TOFU SHA256 fingerprint store is used. The key is trusted on first use and refused on any mismatch. Each hop in a chain verifies its key independently.
Idle auto-lock and connection history. The vault can be locked automatically after a period of inactivity. Host search, per-host accent colors, 15 themes, split-pane naming, and session logging are included. Connection history tracks when and where sessions were opened.

Development of Kino SSH Manager began in 2023 by Samarth Hegde. The application is written in Rust with a Tauri shell for the desktop interface. The terminal component relies on xterm.js, and the editor uses Monaco. The first public release focused on the encrypted vault and SSH terminal. Port forwarding, SFTP browsing, and snippets were added in subsequent releases. The agent mode and Kino Cloud relay service were introduced later to address NAT and firewall restrictions.

Alternatives to Kino SSH Manager:

AquaSSH

AbsoluteTelnet

No-IP

SmartFTP

Amnezia VPN

Voktty