Teams
Teams let you share SSH connections with your teammates, end-to-end encrypted. The server only ever stores ciphertext — it can't read your hosts, credentials, or session output. See the security model for exactly what that means.
Everything below can be done from inside the desktop app — the web app at sshache.com/app is there when you want it, but you don't have to leave the desktop to manage a team.
Connect the app to your account
You never type an email or password into the desktop app. Instead you link it through your browser:
- In the desktop app, open the Teams tab and click Connect via browser.
- Your browser opens the sign-in page. Register or log in.
- The site shows a short code. Confirm it matches the code shown in the desktop app, then approve.
- The app is now linked to your account.
This "type-the-code" confirmation means a stray link can't silently attach your account to someone else's device. The Android app links the same way.
Create a team
In the Teams tab, click + New team and give it a name. You're the owner. A fresh team key is generated on your device and wrapped to your account — the server never sees it in the clear.
Invite people
- Open your team and use Invite to create an invitation. You get an invite code.
- Send the code to your teammate.
- They open Teams → You've been invited, and Join (or Reject).
When someone joins, an existing member with access shares the team key to the new member's public key, so they can decrypt shared connections. Until that happens they're in the team but can't read secrets — by design.
Roles
| Role | Can do |
|---|---|
| Owner | Everything, including managing members and billing. |
| Admin | Manage members and connections. |
| Member | Use connections shared with them. |
| Auditor | Read-only oversight — session history and presence, without secret access. |
Leaving & deleting a team
- Leave a team — any member can leave, from the desktop Teams tab or the web app. If you're the last owner, transfer ownership or delete the team first so it's never left ownerless. (You can't leave your personal vault.)
- Delete a team — an owner can delete the whole team, removing it and its shared connections for everyone. This can't be undone.
Plans
Teams is the paid product, and it has a free plan — you pay per member, only past the first two.
| Plan | Price | Limits & extras |
|---|---|---|
| Free | $0 | Up to 2 members, 5 shared connections, 7-day audit |
| Pro | $2 / member / mo, first 2 members free | Unlimited members & connections, shared folders/tags, access grants, JIT & approvals, 90-day audit, 30-day history |
| Enterprise | $3 / member / mo, billed from seat 1 | SSO + SCIM, Auditor & custom roles, key escrow, IP allowlists, unlimited audit + SIEM export |
Teams you create come up on your current plan — if you're on Pro or Enterprise, new teams start there automatically (no re-subscribing per team).
Plan & billing, in the app
The desktop Teams & billing tab is the whole picture for the team you have selected:
- the team name, its plan, and your role;
- seats and connections used vs. your plan limits, with a warning before you hit them;
- billable seats, subscription status, and the renewal (or cancellation) date;
- a side-by-side Free / Pro / Enterprise comparison — Compare plans;
- Upgrade (owner) and Manage billing & invoices (owner or admin).
Checkout and invoices open in your browser — the desktop app never handles card details. The title bar always shows which team you're in and what plan it's on, so you can tell at a glance. You can also manage everything from the web app.
Working on your own?
None of this applies — solo use is free. Either run the Teams app without signing in, or use the Apache-2.0 community edition, which is the individual-only build.
Next steps
- Sharing & live view — share a connection, auto-sync, presence, spectate.
- Personal cloud vault — the same tech, just for you.