SSH client · Encrypted vault · 100% local

All your servers.
One vault.
Connected in one click.

RustFort combines a full SSH client with a locally encrypted vault: keys, passwords and hosts protected by your master password. Multi-tab terminals, SFTP and a file explorer — and nothing ever touches the cloud.

Download RustFort See the features

100%

Local encryption

0

Data sent out

1 click

To connect

Features

Everything you need.
Nothing you don't.

Built for developers, DevOps engineers and sysadmins who take the security of their access seriously.

Unified workspace

SSH terminals and file explorers live in the same tab bar. Move freely between all your open sessions — same server or different servers — without ever closing anything. One-click reconnect if a session drops.

Terminals and files in one place

Encrypted vault

Your SSH credentials (private keys, passwords, IP addresses) are encrypted locally with a master password. Nothing is ever sent to an external server.

SQLite · ChaCha20-Poly1305 · Argon2id

Streamed SFTP transfer

Streamed upload and download — multi-GB files no longer saturate your RAM. Progress bar with real-time speed and estimated ETA.

database-backup.sql.gz 68%
1.4 Go / 2.1 Go 112 Mo/s · ETA 6s

File explorer

A full Finder-style explorer, directly on your servers: navigation, folder and file creation, built-in text editor, and per-server path favorites.

✓ Linux permissions in one click (checkboxes + octal)
✓ Per-server path favorites
✓ Built-in text editor & transfers

Commands & palette

A catalog of 80+ commands by category, a search palette, your pinned favorites and your own saved commands. Injected into the active terminal in one click.

System Docker Network Security Screen +5

SSH key & password

Supports both SSH authentication modes. Import your existing private keys from your machine, with an optional passphrase encrypted in the vault.

✓ Ed25519 / RSA / ECDSA keys
✓ Passphrase encrypted in the vault
✓ Built-in key pair generation

PDF recovery kit

When you create the vault, a secure recovery kit is generated as a PDF, with a 24-word phrase (BIP39). Perfect for regaining access if you forget your master password.

Print it and keep it safe

Encrypted export / import

Back up your entire vault into a password-protected .rfx file. Restore it on any machine in seconds — perfect for migrating or backing up offline.

ChaCha20-Poly1305 · Argon2id · .rfx

Audit log

Every action on the vault is logged locally: connections, additions, deletions, exports. A timestamped, signed history you can review at any time from the interface.

✓ Timestamp on every operation
✓ Signed log (HMAC), tamper-proof
✓ Reviewable directly from the interface

Security

End-to-end encryption.
Zero trust.

RustFort trusts no one — not even your machine. Every secret is encrypted before being written to disk. The master password never leaves RAM.

ChaCha20-Poly1305

Authenticated encryption

Each secret is encrypted individually with a unique random nonce (AEAD). Even physical access to your disk is not enough.

Argon2id

Key derivation

The master password is derived with Argon2id, using a unique salt per installation — enough to make brute-force attacks impractical.

0 bytes

Sent over the network

No telemetry, no sync server, no hidden network connection. Your secrets never leave your machine.

100% local vault
No account required
Zero subscription
Data never shared

Quick commands

Your built-in runbook.
Always within reach.

No more digging through notes or memorizing complex syntax. RustFort ships with a catalog of ready-to-use commands, a search palette, your pinned favorites and your own commands.

For beginners

Find the right command by typing a keyword: "docker", "disk", "logs"… The catalog guides you without needing to know the exact syntax.

For experts

Save time: the search palette runs any command, your favorites stay on top, and you can save your own commands. One click injects it into the active terminal.

🖥 System 💾 Disk 🌐 Network ⚙ Processes 📋 Logs 🔐 Security 🐳 Docker 📂 Files 💻 Screen
⚡ Quick commands
Containers docker ps -a --format 'table …'
Live stats docker stats --no-stream
Images docker images
Volumes docker volume ls
Container logs docker logs -f <nom>

↑ Click · The command runs in the terminal

Platforms

macOS, Windows, Linux. Native.

RustFort is compiled natively for each platform. No dependency on an external runtime.

macOS

12+ Monterey

Apple Silicon & Intel

Available

Windows

10 / 11

x86-64

Available

Linux

Ubuntu 20.04+

Debian · Fedora · Arch

Available

Ready to secure
your SSH access?

Download RustFort. No account required to start, no credit card, no data collected.

SHA-256 verified

One app, all your platforms

Download for macOS

12 Monterey and up · Apple Silicon & Intel

Download for Windows

10 / 11 · x86-64
Fast install, no dependencies
Updates included, continuously
Cross-platform application
Local vault, no data collected

FAQ

The questions we get most often.

Where are my server credentials stored?
Exclusively on your machine, in an encrypted SQLite vault. Your private keys, passwords and IP addresses are encrypted before being written to disk. Nothing is ever sent to an external server: no cloud, no mandatory account to use the vault.
What encryption does RustFort use?
The master password is turned into a key via Argon2id (with a unique salt per installation), then your secrets are encrypted with ChaCha20-Poly1305, a modern authenticated encryption algorithm. The master password never leaves RAM and is never written to disk.
What happens if I forget my master password?
When you create the vault, RustFort generates a PDF recovery kit containing a 24-word phrase (BIP39 standard). Keep it somewhere safe: it lets you regain access to your vault even if you forget the master password.
Can I use RustFort on several machines?
Yes. You can export your entire vault into an encrypted .rfx file, protected by its own password, and import it onto another machine in seconds. Ideal for migrating from one computer to another or keeping an offline backup.
Which SSH authentication modes are supported?
Both: private key (Ed25519, RSA, ECDSA) and password. You can import your existing keys, with an optional passphrase encrypted in the vault, or generate a new Ed25519 key pair directly from the app.
Does RustFort send data anywhere?
No. No telemetry, no sync server, no hidden network connection. The only outgoing connections are the ones you establish yourself to your own SSH servers. Your secrets stay strictly on your machine.
Which operating systems does RustFort run on?
RustFort is compiled natively for Windows 10/11, macOS 12 Monterey and up (Apple Silicon and Intel), and Linux (Ubuntu 20.04+, Debian, Fedora, Arch). A single self-contained app, with no dependency on an external runtime.
Is this a subscription?
No. RustFort downloads freely and runs locally with no subscription. Payment, when it applies, is a one-time purchase for a lifetime license — no rental, no recurring charge.