SSH, files and remote desktops in one app.

Tidegate is a free client for SSH, SFTP, RDP, VNC, serial ports and more, on Windows, macOS and Linux. Your hosts, keys and passwords are kept in one encrypted file on your own computer. You do not need an account, and nothing is stored online.

Free. Windows 10 and 11, 64 bit.

Tidegate showing nine hosts in the groups Lab, Network and Production, each with a green or red dot for online status

A quick look

Screenshots from the app, with made up hosts.

An SSH terminal with a bar on top showing CPU, memory, disk, uptime and network speed

Each SSH tab shows CPU, memory, disk, uptime and network speed of the server, read on the same connection.

What it does

The things you use every day are on the main screens. Things you need now and then are in menus and settings. The docs explain each one.

Connect

  • SSH, RDP, VNC, Telnet and serial ports
  • Local terminals: PowerShell, cmd, WSL and Git Bash on Windows, your own shell on macOS and Linux
  • Jump hosts, SOCKS5 and HTTP proxies
  • Port forwarding: local, remote and dynamic
  • Up to four terminals in one tab, and typing into all of them at once
  • Each step of a connection is shown, and an error says what went wrong

Files

  • SFTP, FTP, FTPS and S3 in the same two panes
  • Become root on SFTP with sudo or su, on the same connection
  • Edit remote files in the built in editor or your own
  • Compare two files side by side
  • File transfers in the terminal with rz and sz

Keys and logins

  • Passwords, keys, the SSH agent and Pageant
  • YubiKey and other FIDO2 keys on Windows
  • A 2FA tab: scan a QR code from the screen or import from Google Authenticator
  • Replace a key on many servers. The new key is tested before the old one is removed
  • SSH certificates from your own small CA, if you want them

Tools

  • Docker: containers, logs and shells on your servers
  • Proxmox: turn virtual machines on and off, and change CPU and memory
  • Databases: MySQL, MariaDB, PostgreSQL, SQLite and MongoDB
  • Network gear help for Cisco, Juniper, MikroTik and HPE
  • Encrypted backups of switch and router configs, and what changed between them
  • Run one command on many hosts, and read each answer
  • Ping, traceroute, DNS, port checks and Wake-on-LAN

Security

What keeps your hosts, keys and passwords safe.

One encrypted file

Hosts, passwords, keys and 2FA codes sit in one file on your computer, locked with your master password. AES-256-GCM, with the key made by Argon2id.

No account, no cloud

There is nothing to sign up for and no copy online. Sync between your own computers goes through a folder you pick, encrypted.

Nothing sent home

No telemetry and no analytics. The update check is off until you say yes, and it sends nothing about you.

Signed updates

Every release is signed. Tidegate checks the signature and the file before it installs anything.

Locks when you leave

Auto lock, lock on sleep and on minimize. Unlock with Windows Hello, a security key or Touch ID.

Host keys always checked

A changed server key warns you, or blocks the connection in strict mode. Also through jump hosts and tunnels.

Download

The newest version is always at these links.

Windows 10 and 11, 64 bit.

Installer

Recommended

Installs for your user only, no admin needed. Updates itself from inside the app if you allow it.

File
-
Size
-
SHA-256
-
Download installer

Portable

One exe that runs without installing. Make a folder named data next to it and everything stays in that folder.

File
-
Size
-
SHA-256
-
Download portable

macOS 12 or newer, on Apple Silicon and on Intel.

Apple Silicon

M1 and newer

Open it and drag Tidegate to Applications. When a new version is out, the app downloads it, checks it and opens it for you.

File
-
Size
-
SHA-256
-
Download for Apple Silicon

Intel

For Macs with an Intel chip. Not sure? Open the Apple menu, About This Mac. It says Chip (Apple) or Processor (Intel).

File
-
Size
-
SHA-256
-
Download for Intel

Different on a Mac

RDP hosts open in Windows App from the App Store. Touch ID can unlock Tidegate. Security keys need Windows for now. Everything else works the same.

The first time, run xattr -dr com.apple.quarantine /Applications/Tidegate.app in Terminal after you drag Tidegate to Applications. Without it, macOS says the app is damaged, because Tidegate is not signed by Apple yet.

64 bit x86 (amd64). An AppImage for any distribution, and packages for Debian and Arch.

AppImage

Any distribution

One file that runs on most distributions. Make it executable and start it. It updates itself in place if you allow it.

File
-
Size
-
SHA-256
-
Download AppImage

Debian package

For Debian, Ubuntu, Mint and others that use apt. Install it with your package tool. New versions are downloaded and checked for you.

File
-
Size
-
SHA-256
-
Download .deb

Arch package

For Arch, Manjaro, EndeavourOS and others that use pacman. Install it with sudo pacman -U and the file name.

File
-
Size
-
SHA-256
-
Download for Arch

Fedora, openSUSE and others

Use the AppImage. It runs on most distributions without installing anything, and it updates itself if you allow it.

Changes

The newest versions and what changed in them. This list updates by itself.

    Loading the list from api.tidegate.net.

    Questions

    Does it cost anything?

    No. Tidegate is free, with no account and no paid plan.

    Where is my data?

    In one encrypted file in your user folder: %APPDATA%\Tidegate on Windows, ~/Library/Application Support/Tidegate on macOS and ~/.config/Tidegate on Linux. The portable exe keeps it in the data folder next to itself. Nothing is kept anywhere else.

    What if I forget the master password?

    Then the vault cannot be opened. Nobody can get around the encryption, us included. On Windows you can also start without a master password. Tidegate then gives you a recovery code to keep somewhere safe, and you unlock with Windows Hello or a security key day to day.

    Can I move to a new computer?

    Yes, also between Windows, macOS and Linux. Export makes one encrypted file. Copy it to the new computer, start Tidegate there and pick "Import from another PC". You choose at setup if SSH keys and 2FA codes may leave this PC at all.

    Does it talk to the internet by itself?

    Only if you say yes to update checks. Then it asks api.tidegate.net for the newest version when it starts and every 2 minutes. The request holds nothing about you. Everything else only connects to servers you open. See the privacy page.

    How do updates work?

    If you allow it, Tidegate looks for a new version when it starts and every 2 minutes. A small box offers to download it. Tidegate checks the signature and the checksum, then installs it on Windows and with the AppImage, opens the disk image on a Mac, and shows the new package on Debian and Arch.

    I used Monolith SSH. Is this the same app?

    Yes. Monolith SSH is now Tidegate. Install Tidegate once over it and your hosts, keys and settings move along. From then on it can update itself.