Keychain
SSH keys in Keychain — no SSHaven cloud vault
Where SSHaven stores SSH credentials on iPhone, iPad, and Android: device Keychain / Keystore, app sandbox, and no Adam Codes cloud vault. This page extends /security — it does not replace it.
What stays on the phone
- Passwords and key passphrases — iOS Keychain; Android EncryptedSharedPreferences / Keystore.
- Private key files — app sandbox with OS file protection. Not iCloud-synced by SSHaven.
- Host profiles and agent labels — local metadata so the fleet board can group sessions.
What never goes to an Adam Codes cloud
In normal operation there is no SSHaven account and no vendor vault of your keys. Adam Codes does not receive SSH passwords, private keys, key passphrases, or the contents of your terminal sessions.
SSH traffic is from your device to the hosts you choose — not through an Adam Codes relay. See the pillar page: /security.
How this fits agent fleet attach
SSHaven is a thin client for remote agent sessions. Secrets stay local while you attach to tmux from iPhone or run the AI agent pilot board ($4.99 one-time).
Optional recipe fetches (honest)
Optional install-recipe catalogs can load over HTTPS from sshaven.app (or another allowlisted host). Those requests are for recipe JSON only — they do not upload your SSH keys. Installing software on a server still requires your consent in the app.
Your responsibilities
Device passcode, biometrics, OS updates, and host/key hygiene are still yours. SSHaven cannot make a weak host key or a reused password safe. Delete connections or uninstall to clear local data; Keychain items follow OS behavior when the app is removed. Legal detail: Privacy Policy.
FAQ
Do you store my SSH keys in the cloud?
No. There is no SSHaven cloud vault. Passphrases live in the device Keychain / Keystore; private keys stay in the app sandbox.
Is SSH traffic relayed through Adam Codes?
No. Sessions go from your device to the hosts you choose.
Does SSHaven sync keys with iCloud?
SSHaven does not iCloud-sync your private keys. OS Keychain behavior still follows your device settings.
What about Android?
Passwords and passphrases use EncryptedSharedPreferences / Keystore on Android. Play package: io.adamlabs.shellcraft. Apple Search Ads remains App Store-only.
One-time pricing?
The pilot board is $4.99 one-time — see one-time SSH client.
More about SSHaven
- iPhoneSSH client for iPhoneConnect to servers from your pocket with a native shell, Keychain keys, and wait alerts.
- Claude CodeRun Claude Code from iPhoneClaude stays on your Mac or VPS. SSHaven is the SSH + tmux board that pings you when it waits.
- iPadSSH client for iPadA larger terminal canvas with hardware-keyboard workflows and the same on-device secrets.
- AgentsPilot remote AI agents in tmuxSee Running, Needs you, and Finished — and get notified when a remote agent waits.
- CompareSSHaven vs Termius, Blink, and PromptFair criteria: price model, credential storage, and the tmux agent pilot board.
- PricingOne-time SSH vs Termius subscriptionWhat you pay once for SSHaven on iPhone, iPad, and Android — and when Termius still wins.
- Agents vsSSHaven vs Moshi, SSHHIP, and TermRoverHow SSHaven’s $4.99 pilot board compares with newer agent-terminal apps.
- SecurityKeys stay on your deviceWhat SSHaven stores in Keychain, and what never leaves the phone for our cloud.
- SessionsMulti-session SSH and projectsKeep a pool of sessions, tag work across machines, and leave remote jobs running.