Termius 9.35.4 Mac

System administrators and DevOps engineers who manage fleets of servers often reach for Termius. It is the SSH client that layers organization onto raw terminal access, and as of version 9.35.4, a handful of deeper tools stand out for experienced users who need more than a basic shell window.

Lock access with a physical key

Termius supports FIDO2 hardware-key authentication. Plug in a YubiKey or similar device and the app will use it for public-key challenges, keeping the private material on the token where it cannot be exported.

Forward the agent, keep keys local

SSH agent forwarding lets you bounce through one server to another without copying private keys anywhere. Termius forwards the local agent socket so the keys stay on your Mac.

Choose modern, fast ciphers

The app handles ECDSA and ed25519 keys alongside the chacha20-poly1305 cipher. That combination keeps handshakes quick and sessions encrypted with algorithms designed for speed over high-latency links.

Route through jump servers and proxies

Connections can be tunneled through a bastion host or a proxy server defined in the connection settings. The configuration lives alongside the host entry, so you do not need to edit an ssh_config file by hand.

Sync without exposing secrets

Termius can optionally sync connection details and credentials across your devices using encrypted cloud storage. The encrypted vault means the data is opaque to the sync layer itself.

A field technician’s Saturday morning

Imagine a network tech who got a call at 7 a.m. because a point-of-sale server at a remote depot stopped responding. She opens Termius on her MacBook Air, and the saved host entry for the depot’s edge router is right there in the sidebar, already configured to bounce through the corporate jump server in Frankfurt. She double-clicks it. The session opens over Mosh, which keeps the connection alive even when the depot’s satellite link wobbles. She pulls up the shared history, types the first three letters of a diagnostic command she ran last month, and hits return. The router reports that the POS server is up but its SSH daemon is unresponsive. She opens a split view, starts a serial connection to the server’s console port in the right pane, and within four minutes she has restarted the stuck service. The whole sequence — from bed-head to resolved ticket — happens inside one window, with no separate terminal emulator, no config-file fiddling, and no panic about a dropped connection.

Typing passwords manually instead of using the encrypted vault

New users often treat Termius like a plain terminal and ignore the organizational features that separate it from a stock Terminal.app tab. One common slip is typing passwords into unlabeled sessions when the app can store credentials in its encrypted vault, protected by Touch ID on a Mac. Another is pasting the same long ssh -J user@bastion string every time instead of building a host entry with a jump server already defined. That is what the GUI is for.

Beginners also overlook the snippet library. They retype the same tail -f /var/log/syslog or docker logs --tail 50 commands by hand, session after session, while the saved-commands pane sits empty. A third mistake is ignoring the split-view button entirely; they open separate windows, lose track of which is which, and close the wrong one after a long day.

Finally, some users download a Termius mac crack or a Termius torrent expecting to skip the sync engine, then discover the cracked build ships with a modified binary that cannot update and silently drops agent forwarding. A clean install avoids those headaches.

How Termius compares with similar Mac apps

Against Royal TSX, Termius feels lighter. Royal TSX is a connection-management Swiss Army knife that handles RDP, VNC, and web interfaces alongside SSH, and its credential system is deeply integrated with the file-based document model. Termius focuses almost entirely on SSH and Mosh, and its sync is account-backed rather than file-backed, which makes moving between a Mac and an iPad straightforward.

Next to the command-line OpenSSH client with a config file, Termius sacrifices infinite flexibility for discoverability. You cannot express every Match block or ProxyJump nuance that a hand-tuned ~/.ssh/config supports, but you gain a visual host list, one-click snippet execution, and a shared history that survives across machines. People who live entirely in a tmux session inside a single jump box will find OpenSSH sufficient. People who touch thirty customer environments with different keys and bastions tend to prefer Termius.

When placed beside the macOS built-in Terminal app, the difference is night and day. Terminal requires a separate file-transfer tool for SFTP, has no built-in host list, and does not understand Mosh. Termius bundles SFTP into the same sidebar that shows the terminal, and it can resume a session after a laptop-lid close without a VPN reconnect, thanks to Mosh support.

Host groups sync from her Linux laptop before she touches a key

A DevOps engineer reaches her desk at nine. She opens Termius on a Mac Studio and the sidebar populates with the same host groups she organized on her Linux laptop the night before. She clicks a group labeled “staging” and sees four hosts. She selects the web server, presses Command-D to duplicate the tab, and arranges the two tabs in a horizontal split: logs on top, a shell on the bottom.

She taps the snippet icon and picks “tail app errors” from her saved commands. It runs instantly in the top pane. In the bottom pane she types a git pull on the staging branch, then opens the SFTP panel — still inside the same host session — and drags a revised .env file from her desktop into /var/www/app. No separate SCP command, no typing paths twice.

Mid-morning, she needs to check a production database but the production subnet is reachable only through a bastion. She opens the host entry for the database, verifies the jump-server field points to the bastion, and connects. The session appears instantly; the agent-forwarding option she enabled months ago is still toggled on, so her local SSH key authenticates the second hop without a password prompt. She runs a read-only query, copies the output, and closes the tab.

Before lunch, a colleague asks for a quick pair-debug on a customer’s edge device. She creates a temporary host entry, pastes the IP, sets the proxy to a SOCKS5 address the customer provided, and tests the link. The session opens. She shares her screen, runs two diagnostic commands from the shared history, and deletes the temporary host when the call ends. The whole session — from new host to deleted entry — takes under eight minutes, and nothing leaves her local machine except the SSH traffic itself.

Version 9.35.4 addresses several crash-on-launch scenarios that appeared under macOS 14. No new features are included; the update is a stability release recommended for all users on the current version.

• macOS 10.13 or later
• Apple Silicon or Intel 64-bit processor
• Interface language: English