A real terminal
Fast emulation, a key bar made for touch, snippets, jump hosts and strict host key checks. Run one command on many servers, and open a Windows desktop when SSH isn't enough.
Terminal · Servers · Vault
Your servers and secrets. In one app.
Open a real terminal, see what every server is doing, watch its logs live, and keep your passwords, codes and passkeys beside them. Zedlin runs on your phone and your computer, on your own or with your whole team.
In early access · iPhone, iPad, Windows and Linux
$ ssh deploy@web-01
Host key verified (ED25519)
Connected through bastion-eu
$ systemctl is-active nginx postgresql
active
active
$ docker compose ps
NAME STATUS
api Up 3 days (healthy)
worker Up 3 days (healthy)
$
What it does
Everything you reach for when a server needs you.
One app instead of a terminal, a monitoring dashboard and a password manager that don't know about each other.
See and fix without typing
Metrics, live logs, processes, services, Docker, cron, users, firewall and files for Linux, Windows and macOS servers, with no agent to install.
A vault that fills itself in
Passwords, one-time codes and passkeys beside your servers. AutoFill on iPhone, a Chrome extension on your computer, and a safe way to share them with your team.
Terminal
Built for the phone, not shrunk onto it.
The terminal keeps up with full-screen tools like htop and vim, and the key bar puts the keys a phone keyboard hides one tap away.
- Key bar with Esc, Tab, Ctrl, Alt and arrows
- Snippets you run with one tap
- Several sessions open at once
- Run one command on many servers together
Servers
Every server at a glance. Every log, live.
Open a server to see how it is doing, follow any log as it is written, then act on what you see without remembering the command.
- CPU, memory, disk and network, with the top consumers
- System logs built in, plus any log you add with a command
- Services, containers, cron, users and firewall
- Browse, edit and transfer files
Vault
Your vault, wherever you sign in.
Logins live in the same encrypted workspace as your servers. Zedlin fills them in, generates your codes and tells you which passwords to change.
- AutoFill in Safari and apps, and a Chrome extension
- One-time codes and passkeys
- Leaked, reused and weak password checks
- Notes, cards, identities, API keys and attachments
Explore Zedlin
Far more than a terminal.
Everything you run your servers with, and the secrets that go with them. Pick a place to start.
Servers
Terminal, live metrics and logs, services, Docker, files and Remote Desktop.
Vault
Passwords, codes and passkeys, with AutoFill and team sharing.
Desktop
Tabs and split view, a CLI, an SSH agent and a Chrome extension.
Monitoring and alerts
Healthchecks and metrics around the clock, delivered where you want them.
Ansible
Versioned playbooks that run from any device, with no control node.
Apps
Versions, deployments, checks and Sentry-compatible error tracking.
Firewall
Analyse iptables across every server and change it safely in one place.
Threats and port scans
Who is knocking, what they would find, and one click to block them.
Networks and port forwarding
Reach servers and services with no public address.
Backups
Scheduled restic backups you can browse and restore.
Teams
Your own server, recorded sessions and clear permissions.
Security
How your data is protected, and where the protection stops.
Two ways to use it
Start on your own. Bring your team when you're ready.
The same app works in both, and you can keep personal and team workspaces side by side.
Personal
No server needed
Your device connects to your servers directly. Your workspaces are end-to-end encrypted, and Zedlin Sync keeps them in step across your iPhone, iPad and computers.
- Several workspaces, each with its own vault
- Sign in with Apple, Google or email
- Every sensitive action approved on your iPhone
- Terminal, server tools and vault included
Team
Your own Zedlin server
One Docker image on a host you control. It holds the credentials and connections, watches your servers around the clock and runs the work, so everyone sees the same picture.
- Credentials stay on the server, never on devices
- Teams and per-module permissions, session recordings
- Alerts, healthchecks and metrics around the clock
- Ansible, apps, backups, central firewall and port scans
Security
Your computer can't open your secrets on its own.
Your servers, keys and passwords are the most sensitive things you own. In Zedlin, secrets open only when your approval device says so.
End-to-end encrypted
Workspaces are encrypted on your device before they sync. Zedlin Sync stores only ciphertext it cannot open.
Approved on your phone
Opening a server or a secret on a computer asks your iPhone for Face ID. YubiKey and Windows Hello can approve too.
Hardware-bound keys
Keys live in the Secure Enclave, a TPM or a YubiKey. A stolen session or approval doesn't work on another machine.
No agent required
Terminal, metrics, logs and services work over plain SSH. Optional modules such as connection logs tell you what they install.
Your infrastructure
In team mode the Zedlin server runs where you put it. Connections, metrics and team secrets stay with you.
A full trail
Team servers record sign-ins, changes and approvals, and can keep a replayable recording of every session.
Platforms
Where Zedlin runs.
Early access
iPhone and iPad
The full app, AutoFill and team servers. Your iPhone is also your approval device.
Early access
Windows and Linux
The desktop app with tabs, a code editor, Remote Desktop, a CLI, an SSH agent and a Chrome extension.
Later
Android
Planned, with the same encrypted workspaces.
Questions
Something else on your mind? Write to support@zedlin.dev.
Do I need a server to use Zedlin?
No. You need a Zedlin account and an iPhone. In a personal workspace your device connects to your servers directly, and Zedlin Sync keeps your encrypted workspaces in step. You only need a Zedlin server for team mode.
Can Zedlin read my servers, keys or passwords?
No. Personal workspaces are encrypted on your device, and Zedlin Sync stores only ciphertext. In team mode the data lives on the Zedlin server you run yourself.
Do I have to install anything on my servers?
Not for the terminal, metrics, logs, services, containers or files; those use plain SSH. A few optional team modules put something on the host when you turn them on: connection logs use a small collector, and file backups copy the restic binary.
Why does the desktop app need my iPhone?
So that malware on your computer can't empty your vault. The computer can't open secrets by itself; your iPhone approves with Face ID. You add a computer by scanning its QR code. A YubiKey or Windows Hello can also approve once your iPhone is set up.
What happens if I lose my phone?
Another approval device can carry on. If you have none left, you can recover with your master password on a new iPhone after a 24-hour wait, during which your other devices are told and can stop it. If you lose your devices and your master password, your data can't be opened by anyone, including us.
How much does Zedlin cost?
Basic use will be free with limits, and a subscription will lift them. Limits and prices will be announced before the public launch.
Want to try Zedlin early?
Zedlin is in early access on iPhone, iPad, Windows and Linux. Write to us and tell us how you'd use it.