FAQ
What's the difference between the community edition and SSH Ache Teams?
They're two builds of the same app:
| Community edition | SSH Ache Teams | |
|---|---|---|
| Who it's for | One person — individual use only | 2+ people (and solo users who want cloud sync) |
| Price | $0 forever | Free plan, then Pro $2 / Enterprise $3 per member/mo |
| Licence | Open source, Apache-2.0 | Source-available, PolyForm Noncommercial |
| Source published | ✓ | ✓ |
| Free commercial use | ✓ | — (needs a paid commercial licence) |
| App name | SSH Ache | SSH Ache Teams |
| Bundle id | com.sshache.app | com.sshache.teams |
| Homebrew cask | sshache | sshache-teams |
| Repo | SSH-Ache/ssh-ache | SSH-Ache/ssh-ache-teams |
| Terminal, SFTP, tunnels, MCP | ✓ | ✓ |
| Team sharing, presence, audit | — (no server code at all) | ✓ |
| Personal cloud vault | — | ✓ |
| Plan & billing management in-app | — | ✓ |
They're separate applications — different names, icons, and bundle identifiers — so installing one never replaces the other and you can run both. They do share the same local store (~/.ssh-ache) and OS-keychain entries, so your saved connections and settings follow you between them.
The builds on the download page are the Teams app. It behaves exactly like the community edition until you sign in, so solo use costs nothing either way. Pick the community edition when you specifically want an Apache-2.0 build with no networking code in it. These docs cover the Teams app; everything outside the Teams section applies to both.
Do I need an account to use SSH Ache?
No. The desktop app is local-first and fully usable with no account — hosts and secrets stay on your machine. An account is only needed for the optional Teams and personal cloud vault features.
Is it free?
Using it on your own is free, forever, in both editions — no account, no card, no trial clock.
You pay only to share with other people, and only past the Free plan:
| Teams plan | Price | What you get |
|---|---|---|
| Free | $0 | Up to 2 members, 5 shared connections, personal cloud vault, live session view, 7-day audit |
| Pro | $2 / member / mo — first 2 members free | Unlimited members and connections, shared folders & tags, access grants, JIT & approvals, 90-day audit + 30-day history |
| Enterprise | $3 / member / mo (billed from seat 1) | SSO + SCIM, Auditor role & custom RBAC, key escrow, IP allowlists, unlimited audit + SIEM export |
So a 5-person Pro team pays (5 − 2) × $2 = $6/mo. Current pricing always lives on the main site.
Is it really open source?
The community edition (SSH-Ache/ssh-ache) is open source under Apache-2.0 — use, fork, and ship it, including commercially. It's the individual-use build: local features only, no team or server code.
The Teams app (SSH-Ache/ssh-ache-teams) is source-available under PolyForm Noncommercial — read it, build it, verify it, and use it free for anything noncommercial. Commercial use needs a separate paid licence (using it at work, in a company, or to deliver a paid service). See LICENSING.md or email hello@sshache.com.
So: if you want a build you can use commercially with no permission and no payment, that's the Apache-2.0 community edition.
Which platforms are supported?
macOS, Windows, and Linux. Get installers on the download page.
SSH Ache Teams also runs on Android — get it on Google Play. It's the Teams phone client; see the Android app for what it does.
Can the SSH Ache servers see my passwords or keys?
No. Local-only connections never leave your machine. For Teams and the vault, everything is end-to-end encrypted before upload — the server stores ciphertext and can't decrypt it. See the security model.
Why do I log in through the browser instead of in the app?
So the desktop app never handles your email/password, and so linking uses a type-the-code confirmation that resists phishing. You sign in on the site, approve the device, and the app is linked.
A teammate joined but can't see the shared connections. Why?
They need the team key wrapped to their account. An existing member with access shares it (🔑 Share keys in the Teams tab). Until then they're a member but can't decrypt secrets — that's the zero-knowledge model working as intended.
How do I get more than 5 team connections?
Upgrade the team from Free to Pro in the web app — Pro is unlimited. The 5-connection (and 2-member) limit is per team on the Free plan.
Can I watch a teammate's live terminal?
Yes. On a shared connection open the "N online" list and hit View session to watch a teammate live — read-only, in its own tab. It works whether they're on the desktop app or the web terminal, on any plan. For a desktop session the app mirrors only on-screen output to the relay; the SSH connection and keystrokes stay local. See live view.
How do I leave or delete a team?
In the desktop Teams tab: Leave removes you from a team (any member); Delete team removes the whole team and its shared connections (owner only). The last owner of a team must transfer ownership or delete it rather than leave it ownerless. Your personal vault can't be left.
Can I delete my account?
Yes — Settings → Delete account in the web app. It permanently removes your account, your personal vault, and every team you solely own (with their connections). It asks for your password first and can't be undone.
I created a team but it shows the Free plan — why?
New teams inherit your current plan at creation. If you upgraded after creating a team, that team keeps the plan it started with — delete and recreate it, or upgrade it directly from the web app.
Where can I get help?
Open an issue on GitHub, or email hello@sshache.com. For a suspected vulnerability, mail security@sshache.com instead of filing publicly.