Changelog

Quick Terminal has been adjusted to make auto complete easier to use.

Support for picking font variants in terminal settings.

Use Command+Shift+[] to switch between terminal tabs. You can still use Command Left/Right to switch.

SSH keys configured to require biometrics authentication work correctly.

Fix issue where some users had too much space between terminal lines.

Dragging entries from list of Codespaces or Droplets to server list correctly creates configuration.

Configure terminal scrollback from Advanced settings.

Download from Copy/Paste will show download progress when transfer time exceeds half a second.

Copy/Paste menu includes Download choice to download file with the selected filename into a folder of your choice. When filename is shared by several files you pick the correct one from a submenu.

Export of private key no longer requires right clicking Export Public Key button.

Improved import of OpenSSH style private keys where import seemed to work but authentication with key failed. Keys where authentication fails need to be imported again.

Faster authentication for ed25519 keys with a high number of key derivation function (KDF) rounds.

Improvements to font handling to avoid incorrect terminal size for certain fonts.

Rotate your push notification data from (...) in the Shell Integration notification log screen. This can be useful if you accidentally made a .shellfishrc file public. You need to reinstall Shell Integration on servers using 'widget' or 'notify' commands after rotation.

Fix discolouring of certain keyboard keys in terminal after showing settings.

Improvements to terminal autocomplete.

Upgrade to libssh2 1.11.1 to mitigate CVE-2023-48795 "Terrapin Attack"

SSH keys with Touch/Face ID requirement allows device password fallback.

Configure SSH keys to require Face ID or Touch ID before use.

Note that older versions of Secure ShellFish do not support this. If you have iCloud sync of SSH keys enabled, keys requiring Face ID or Touch ID will not work until you update Secure ShellFish on these devices.

Improved error message when connection to server with multiple comma separated addresses failed.

Fix bug where dynamic port forwarding didn't recognise addresses to forward in terminal unless Files location was enabled for server.

Fixes issue renaming files while they are being uploaded.

Fix bug that could prevent Instant Playback from working.

Fix crash that could happen on iPadOS 17 when app enters the background.

Directories with name containing diacritics (accent, umlaut and friends) will now correctly download inside folders marked for offline usage.

Fix crash that could happen when installing Shell Integration.

Help screen can be hidden by long tapping Help from outermost screen.

Snippets support control sequences. Remember that snippets can be activated using dictation, with Apple Pencil scribble and assigned to keyboard bar.

Fix widget refresh when shell has Oh My ZSH powerline prompt.

Last update added the ability to configure custom keys when keyboard bar has extra space assigning entries from Fn keyboard or snippets from context menu. Custom keys now show snippet name.

Improvements to port forwarding where dynamic forwarding would sometimes prevent regular port forwarding from working.

Port forwarding is easier to configure explaining what each port forward does when selected and including a field for naming port forwarding entries.

Downloaded files are no longer moved to trash when deleting instead prompting for immediate deletion.

Last month Secure ShellFish for iOS gained a new Pro feature allowing progressive playback of video and audio files without downloading. This is now available in ShellFish for Mac with Handoff support such that you can start playback on one device and resume playback on the other device.

Long tap media files in the Files app and pick Playback from the context menu.

Learn more about this and other features from the Help screen inside Secure ShellFish.

Notifications sent using the 'notify' command are delivered more efficiently such that Secure ShellFish doesn't have to run in the background to decrypt content.

You need to update Shell Installation for this improvement to take effect.

Adjustments to help screen.

Disable message that shows terminal size changes in Advanced settings.

Terminal connection that open slowly can be cancelled.

Exif thumbnails shown in Files app respect image orientation.

F11 and F12 are included on Fn keyboard again.

Playback large video & audio files from the Files app context menu without downloading first. Using progressive streaming you get faster startup times and minimize total network use. How much of each file needs to be downloaded and how well seeking works is file format dependent. Modern mp4 files work very well with progressive streaming.

This feature is exclusively available to Pro users and supports full-screen playback, picture-in-picture and remembers playback position. Long tap media files in the Files app and pick Playback from the context menu near the bottom.

Fixed bug where it wasn't possible to write snippet names in Chinese.

Support OSC 4 escape sequence allowing changes to color palette from shell.

Fix crash that could happen at launch when running iOS 15.2 or 15.3.

Context menu on terminal settings button to quickly toggle Autocompletion, Keyboard bar, File recognition and to Check Shell Integration without showing full Settings.

Keyboard shortcut to Check Shell Integration.

Improved pruning of autocomplete history to avoid slowing down terminal.

Fn keyboard includes Return key.

Improved help when running Secure ShellFish for the first time.

Saving of Autocomplete state is more efficient to avoid terminal stutter.

Use terminal autocompletions on iPhone or iPad without a physical keyboard. Completions are shown when swiping the keyboard bar right or tapping the small leftmost disclose button on keyboard bar.

Completions are suggested based on previous terminal output. It will suggest filenames output by ls and will suggest previous commands due to terminal echo. Autocompletion memory is stored for each server, never leaves the device and is purged if you disable autocomplete in settings.

Tapping terminal either sends arrow keys to move cursor or sends a mouse event if supported by server. Option tapping will now always move the cursor.

vt520 escape sequences to change cursor style are respected.

Block cursor is shown correctly in combination with Chinese characters.

Includes a security fix for https://github.com/migueldeicaza/SwiftTerm/security/advisories/GHSA-jq43-q8mx-r7mq

Tapping terminal sends mouse events if supported by server and arrow keys to move cursor otherwise. Option tapping now always sends arrow keys.

Startup Command is sent with carriage return instead of line feed.

Better error messages on connection failure with Multipath TCP enabled.

Improved logging

Watch an introductory video video showing how to use the app. Tap the play button located in the upper right corner of the Help screen for a fast and easy to understand walkthrough of key features.

Improved logging.

Support for AES-GCM ciphers.

Apple Watch correctly updates possible complications when new --target arguments are used in widget command.

Improved widget layout.

Larger widgets show content in a new way where symbols and text can be mixed freely to allow the largest possible text size.

Never confuse terminals with server-specific color themes. Pro users can toggle whether color theme changes for all or the current server above the list of themes.

It can be especially useful to have unique toolbar colors for different servers. Assign the toolbar color for a theme by long-tapping one of the 16 ANSI colors.

Improvements to SSH Key Install when authentication isn't possible.

Improved Fish shell integration with functions for notify, openUrl, pccopy, pbpaste, quicklook, sharesheet, textastic and widget.

Improved widget layout to better handle large amounts of text.

Support for exporting private parts of keys imported in OpenSSH format as well as for exporting sk-ecdsa private keys. As always you need to tap and hold "Share Public Key..." to export private keys. This is to make sure only people that read release notes can go against best practices.

Typing ^J using ^ on the keyboard bar now correctly sends ascii 10 instead of ascii 13.

SOCKS server sometimes required app restart to work which is no longer needed.

Includes 2023.1 improvements:

New SOCKS proxy to forward http requests through SSH terminal when configured as system proxy server. This is enabled as part of port forwarding on a server-by-server basis.

While the available Proxy Auto-Configuration is read from secureshellfish.app the proxy itself runs on device at localhost:2080 but having this auto-configuration URL makes it easier to configure proxy in system settings.

Port forwarding activity is shown with a sparkline above terminal. This is a total of port forwarding activity for any terminal and includes http proxy.

Terminal widgets and notifications supports opening URL or running Shortcut when tapped with arguments such as
widget Tap here 'https://workingcopy.app/'
notify 'Run Shortcut' --shortcut "My Shortcut"

Run 'widget' and 'notify' without arguments for more information.

Configure whether a server or subdirectory uses Exif data for thumbnails on not-yet-downloaded files from the Manage screen. This is perfect for photo collections on NAS. Long tap directories in the Files app to show the Manage screen.

Your image files need to contain Exif thumbnails and Shell Integration includes a new 'thumbnail' command for adding this. Run something like
thumbnail *.jpeg *.png
after updating Shell Integration.

New SOCKS proxy to forward http requests through SSH terminal when configured as system proxy server. This is enabled as part of port forwarding on a server-by-server basis.

While the available Proxy Auto-Configuration is read from secureshellfish.app the proxy itself runs on device at localhost:2080 but having this auto-configuration URL makes it easier to configure proxy in system settings.

Port forwarding activity is shown with a sparkline above terminal. This is a total of port forwarding activity for any terminal and includes http proxy.

Terminal widgets and notifications supports opening URL or running Shortcut when tapped with arguments such as
widget Tap here 'https://workingcopy.app/'
notify 'Run Shortcut' --shortcut "My Shortcut"

Run 'widget' and 'notify' without arguments for more information.

Configure whether a server or subdirectory uses Exif data for thumbnails on not-yet-downloaded files from the Manage screen. This is perfect for photo collections on NAS. Long tap directories in the Files app to show the Manage screen.

Your image files need to contain Exif thumbnails and Shell Integration includes a new 'thumbnail' command for adding this. Run something like
thumbnail *.jpeg *.png
after updating Shell Integration.

Verify Configuration correctly detects terminal capabilities for OpenSSH server built into Windows 11.

Assign keyboard shortcuts to snippets when external keyboard is attached.

Improved iCloud sync of snippets.

Fix problem where terminal ads was sometimes shown to users with pro unlock.

List of GitHub Codespaces pick up Codespace renames.

Also includes changes from last major update:

Snippets can be activated through speech recognition by speaking while holding down the Paste button context menu. This is activated from the (...) button on the snippets screen but only available on iPhones with on-device speech recognition to avoid transmitting snippet queries for privacy reasons.

There is a new "snip" command used to quickly add new snippets from the terminal. You need to update the Shell Integration install for this to be available. Entering "snip !!" will add your last command as a snippet.

Search terminal with ⌘F or from Copy/Paste menu.

More flexible keyboard-interactive for Duo Two Factor authentication.

Fix bug where it wasn't possible to tunnel through a server authenticating with secure enclave key.

Create new sessions from context menu of session picker button.

Fix crash that could happen when uploading from share sheet.

Snippets can be activated through speech recognition by speaking while holding down the Paste button context menu. This is activated from the (...) button on the snippets screen but only available on iPhones with on-device speech recognition to avoid transmitting snippet queries for privacy reasons.

There is a new "snip" command used to quickly add new snippets from the terminal. You need to update the Shell Integration install for this to be available. Entering "snip !!" will add your last command as a snippet.

Search terminal with ⌘F or from Copy/Paste menu.

More flexible keyboard-interactive for Duo Two Factor authentication.

Fix bug where it wasn't possible to tunnel through a server authenticating with secure enclave key.

Create new sessions from context menu of session picker button.

Fix crash that could happen when uploading from share sheet.

Fix bug where showing terminal ads with keyboard bar enabled in Stage Manager would obscure bottom lines of terminal.

Improved behaviour when terminal is flooded with data.

Additional logging to track down wake-on-lan errors.

Snippet tags only used in gallery are hidden when gallery is disabled.

Fix bug where snippet names starting with #tag would become smaller and smaller while editing.

Improvements to "Install Public Key" feature.

When using two-finger panning and terminal is in alt-buffer mode without mouse support up/down arrow keys are transmitted. This makes scrolling in man pages much easier.

Fix bug where it wasn't possible to enter the detail screen for disabled servers.

Improved handling of two-factor authentication using keyboard-interactive.

Pro users can hide UI they are not using from the context menu. Configure Server, Cloud Servers and Pro Unlock can be hidden.

Toggle whether shared gallery should be shown from ellipsis menu on snippets screen.

Fix problem with Chinese text entry in terminal.

Hovering mouse pointer over inactive terminal tab shows thumbnail on iPad.

Fix bug where keyboard bar would sometimes flicker on iPadOS 16.1

Secure ShellFish is now available on Macs running macOS Ventura. Pro Unlock is shared between iOS and Mac.

Import servers in CSV format by tapping + above list of servers. You will be asked which fields are assigned to name, address, port and user before deciding on lines to import.

Server List action in the Shortcuts app has a new .ssh/config property making it very easy to export all servers in a format suitable for command-line ssh.

Make bold text use bright terminal colours. This is a setting on individual colour themes.

Fix problem typing latin diacritics on external keyboard.

Shortcuts action to List Servers. This is is useful when making shortcuts that work on several servers or for exporting a server list.

Shell Integration for Fish includes setbarcolor, notify and widget.

Long tap the button that shows the tmux session picker to quickly switch between sessions.

Terminal will no longer dismiss keyboard right after startup when connection was established very quickly.

Includes improvements from last update:

Use Apple Pencil for inserting snippets by writing their names in the terminal. Since these can be regular English words it works great with Scribble text recognition making it the fastest way to insert snippets on iPad.

Enable this from the ellipsis menu in the snippet popup.

Change toolbar colour from the terminal with commands such as
setbarcolor red, setbarcolor '#ff0000' or setbarcolor 'color(p3 0.9 0 0)'
where these css-style values often need shell quoting.

This requires updating Shell Integration from terminal settings which also improves support for tmux 3.3 and later.

Use Apple Pencil for inserting snippets by writing their names in the terminal. Since these can be regular English words it works great with Scribble text recognition making it the fastest way to insert snippets on iPad.

Enable this from the ellipsis menu in the snippet popup.

Change toolbar colour from the terminal with commands such as
setbarcolor red, setbarcolor '#ff0000' or setbarcolor 'color(p3 0.9 0 0)'
where these css-style values often need shell quoting.

This requires updating Shell Integration from terminal settings which also improves support for tmux 3.3 and later.

Context menu for server groups has action to Configure Server inside group.

Configure a target for widgets and Apple Watch complications and use "widget --target" to send different content to different widgets. This requires the Pro Unlock.

It is possible to update several widgets with one command by including --target more than once for increased power efficiency.

The built-in terminal color themes can be modified without having to make a copy.

The "widget" command from last update is able to update complications on Apple Watch and the "notify" command can post notifications to your watch.

Michael Flarup has designed new icons for the app and users with the Pro unlock can pick their favourite icon.

Add widgets with content directly controlled through a "widget" command installed as part of Shell Integration. Just like "notify" command from last update this doesn't need to run inside a shell hosted by Secure ShellFish allowing you to update widgets from any server.

Widget can display icons, text and progress in different colors with a command such as:
widget terminal.fill Load 30/100
Run the widget command without arguments for instructions on how to use it.

This is useful for server stats and by running a cron-job you could fetch and display all sorts of information on your home screen or lock screen when you update to iOS 16.

'notify' command for showing notifications from the terminal no longer needs to run in a shell hosted by Secure ShellFish. After installing Shell Integration from terminal settings any server can post notifications even from cron jobs.

Better error reporting when unable to start SSH server inside GitHub Codespace.

Fix such that starting directory for GitHub Codespace servers is correct when repository name is uppercase.

Support for ecdsa-sk ssh keys where the private key resides on and signing happens on a YubiKey. Import these keys in OpenSSH format and generate new ones inside the app.

This works using NFC making it iPhone only and the server must be OpenSSH 8.2 or later with security-key features enabled.

Authenticate with SSH certificates that you import or update from the key detail screen. SSH certificate support is a pro feature and requires the pro subscription or lifetime pro unlock.

Improved tmux path detection.

Users with the pro unlock can import servers in .ssh/config format by tapping + above the list of servers.

Specify region when creating GitHub Codespaces.

Improvements to Verify Configuration from server detail screen.

Notifications made with "notify" command are displayed more prominently.

Password fields support auto-fill.

Fix to allow authenticating without username or password for servers with implicit (none) authentication.

Improvements to SSH Key installation such that it correctly locates .ssh/authorized_keys file on Synology NAS.

SSH keys can be generated on the Secure Enclave and used to authenticate with servers.

There is no way to export the private part of these keys making them highly secure and using them during authentication requires either Touch ID or Face ID. 

Having interactive steps during authentication is not yet supported in the Files app which means Secure Enclave keys can only be used for terminal connections.

Configure ethernet address for a server to send wake-on-lan packets when connecting.

Fixed problem that prevented files dragged from other apps to terminal from uploading.

Fixed bug where terminals started from Shortcuts app would sometimes attempt to share one connection breaking both existing and new terminal.

Configure a Startup Command to run when terminal connects. This is available when tmux persistence is disabled.

Fix bug in Digital Ocean integration where authentication failed to refresh after 30 days forcing a new Sign-In.

Fix bug where keyboard-interactive authentication sometimes caused prompt even though a password was configured.

Fix that terminal would sometimes not close after being terminated with exit or ^D

Improved parsing of username@hostname text dragged into Secure ShellFish.

This makes it easy to drag text from the new "Connect with SSH" feature on GitPod into Secure ShellFish and launch a terminal in seconds.

Dragging to the list of servers configures new servers and dragging to the quick terminal button at the top left opens a terminal without adding to the list of servers.

Only Pro users are allowed to configure more than 5 servers. 

Non-pro users that exceed this limit can keep their existing server configurations but are unable to configure more until they upgrade to Pro.

List Directory action in the Shortcuts app has been improved. It is much faster when entering subdirectories, it has built-in filtering with patterns such as *.png and !subdir/ and returns rich file information instead of filenames such that you will not need the Get File Status action as often.

To avoid breaking existing Shortcuts the new action is only used when you add the List Directory again. A warning about future support is shown where the old action is used but there are no plans to remove support for the old action.

It only takes a minute to enable the OpenSSH server included in Windows 10 and 11.
Help screen includes instructions on how to enable this.

Fix bug where keyboard-interactive authentication wasn't always attempted and where multi-factor authentication never prompted for a 3rd factor.

Keyboard shortcuts for PageUp, PageDown, Home and End.

Fix crash that would happen when dismissing terminal settings on iPhone.

Improved detection of tmux path when defined as shell alias.

Fix bug where terminal would sometimes scroll a few pixels up & down.

Alt + Left & Alt + Right will jump to previous & next word in terminal.

Button below list of ssh keys to install public key from clipboard. This makes it easy to use the key installation logic for ssh keys in other apps.

Fix bug where tmux scrolling would sometimes stop working after having switched away from and back to the app.

Fixed crash that could happen where CRT emulation consumed excessive amounts of memory.

Hostkey fingerprints are cleaned up automatically if you have many.

Help screen is shown first time you launch the app.

Fixed "codespace is already running" error that would sometimes happen when starting a newly created GitHub Codespace.

Improved handling of terminal disconnects when using tmux where first reconnect will be attempted automatically and further reconnects can be started from the error dialog.

Alt+Shift+7 will correctly insert \ on Swedish keyboards with automatic Option key setting.

Improvements to terminal emulation to make "gnu screen" start out at correct width.

Secure ShellFish generates RSA keys by default. Long tap Generate Key on the list of keys to generate ECDSA keys.

Export RSA and ECDSA private keys in PEM format. Since this goes against security recommendations the feature is only available to people reading release notes. 

Long tap Share Public Key for a menu allowing export of public or private key.

Terminal notifications are only posted if period of activity or silence is more than 30 seconds.

Verify Configuration completes much faster for Windows 10 servers.

Quickly locate your servers. Tap the magnifying glass above the server list or press Cmd + F to search servers.

Fix bug where port forwarding would sometimes pause as Secure ShellFish went into the background.

Organise servers into groups from the server configuration screen as an alternative to drag and drop.

Terminal notifications include screenshot from when terminal went quiet or stopped being quiet. Enable terminal notifications from Advanced settings to remind you of terminals that might need attention.

Arrow keys are larger on iPad Mini.

Banner ads for free users are not as tall and will be shown less frequently.

Terminal notifications tell you when a terminal you are not looking at goes quiet or stops being quiet, which is useful if you have long running jobs that wait for your input. Toggle terminal notifications from advanced settings.

Improvements to scrolling in tmux.

New rectangular and round frames for server icons.

Control your server icon from the server configuration screen by tapping the button next to Log. Pick the frame and two letters that can abbreviate the server name where emoji are allowed.

Fix error when connecting to Synology NAS configured for SFTP and not SSH.

Full Width display mode for widgets.

Fix bug where deleting lines with ^k in nano inside tmux didn't update the terminal correctly.

Rename tmux sessions from context menu in session picker.

Switch between terminal tabs with keyboard shortcuts. Hold down ⌘ for the list of shortcuts.

Fixed bug where picture-in-picture terminal would sometimes fail to update.

Avoid unresponsive UI when terminal is flooded with data.

Fix that terminal ads would sometimes wrap incorrectly.

Squashed bug introduced in last update where ssh:// and shellfish:// links wouldn't not open correctly.

List all repositories and not just the first 100 when created GitHub Codespaces.

Terminal will automatically close when disconnected if there are no errors. Switch back to the old behaviour of manually closing terminal in Advanced settings.

Tapping + above the list of servers allows you to add terminal configurations previously opened through ssh:// or shellfish:// URLs or with the Quick Terminal popup and to create a configuration from the clipboard.

Fix problem entering IPv6 addresses in server configuration.

Create Digital Ocean droplets from previously saved snapshots. This is a great way to save money on droplets you only use occasionally.

Note that snapshots are region-specific and will not be shown if you have picked a region where it doesn't exist.

Support for GitHub Codespaces that can be used like regular SSH servers. Codespaces are started on-demand as you open terminals and browse in the Files app.

Codespaces are listed alongside Digital Ocean droplets inside the Cloud Servers screen. Sign in/out, configure SSH key and create new codespaces by tapping + in the upper right corner.

You can also create codespaces by dragging in repository or pull-request links to the list of codespaces or the outermost list of servers.

Context menu for codespaces allows opening VS.Code in Safari, Starting, Stopping and Deleting the codespace. Drag codespaces directly into Safari to start VS.Code.

Paste button on the bar above the keyboard makes it faster to Paste into the terminal.

Disable automatic screen lock in Advanced settings.

Nicer animation in terminal banner ads.

Improvements to keyboard entry on French keyboards.

Duplicating a server inside a group makes the copy start inside the same group.

Terminal is available without the Pro Unlock. Terminal banner ads are shown for non-paying users and curious Pro users can enable them from advanced settings.

Server choice of SSH key is synced with other devices when iCloud sync for SSH keys is enabled. To avoid overwriting old settings this only happens for public key choices made after this update.

Keyboard shortcut for listing sessions changed to Cmd+Alt+T and shortcut for detaching other tmux clients changed to Cmd+Alt+M.

Fix such that tapping terminal thumbnails opens with the correct active tab.

+ button on list of color themes can create new themes making it easier to get started editing making your own.

When terminal is minimised a thumbnail for each tab is shown in server list and these update as terminals change. Tap to show the terminal, long tap for a context menu and drag thumbnails to open terminal in new window on iPad.

Last update had a bug in the shell integration script that prevented sharesheet and quicklook command from working. This is fixed now.

Detach other clients from your tmux session with Cmd+Alt+D on external keyboard.

Adjustments to $LC_CTYPE when terminal has unknown language.

SSH logic updated to support RSA key authentication with latest versions of OpenSSH.

Configure terminal bell in advanced settings.

Shell integration includes new 'pbpaste' command that outputs the iOS pasteboard contents to the terminal.

All shell integration commands are updated to send escape sequences to $SSH_TTY when standard output isn't a tty. This makes it possible to pipe or redirect from sharesheet, pbpaste and the other commands.