GPU-accelerated terminal with xterm.js WebGL. Password, key, and agent authentication. Jump hosts, agent forwarding, and automatic reconnection.
tail -f that floods the screen still scrolls smoothly. Each profile keeps the host, port and user, the authentication (password, private key, or a key loaded in the macOS SSH agent), a startup command such as cd /var/www && tmux attach, its tunnels, and a colour, tags and a folder so a long server list stays readable. Rather than retyping your servers, import your ~/.ssh/config from the sidebar.
Behind a bastion, a profile's Jump Chain (Pro) lists up to 5 hops in order, each one a saved profile with its own credentials, and SSHive opens the whole chain for you; the jump host guide walks through it. If the connection drops, SSHive reconnects on its own in the same tab and brings the profile's tunnels back with it.
Passwords and key passphrases are encrypted with a key held in the macOS Keychain and saved in a file that only your user account can read; a profile never holds them in clear text. An optional setting, Require Touch ID before decrypting passwords, is off by default. On iPhone and iPad, the same profiles open in the native SSH client for iOS once iCloud sync, a Pro option, is turned on.GPU-accelerated rendering with xterm.js WebGL for smooth scrolling even with massive output
Password, private key, and SSH agent authentication methods
Jump Host (ProxyJump) support for multi-hop connections through bastion servers
Automatic reconnection when connections drop unexpectedly
Keep production, staging, a few VMs and the home lab in one sidebar, sorted into folders, coloured and tagged. Open several servers in tabs, insert a saved command into the one in front of you, and with Pro send the same line to every connected session with broadcast.
A private subnet reachable only through a bastion is one profile away: add the bastion as the first hop of the target's Jump Chain and SSHive goes through it, with no ProxyJump line to maintain in ~/.ssh/config. Each hop is authenticated from your Mac, so your private key stays on it; agent forwarding is a separate switch you turn on only when a server needs it.
With a few cloud accounts, you soon end up with a different key for each project or account. Give every profile its own key file, or a key generated in SSHive (Ed25519, ECDSA or RSA 4096), and a server is never offered the wrong one.
~/.ssh/config: the Mac App Store sandbox lets SSHive read the file only once you confirm it. SSHive then creates one profile per named Host block, with its HostName, User, Port and IdentityFile. ProxyJump becomes a Jump Chain, ForwardAgent the agent-forwarding switch, and LocalForward, RemoteForward and DynamicForward the profile's tunnels. A server already saved with the same address, port and user is skipped, so importing twice creates no duplicates. The free version stops at 5 profiles. Exports from PuTTY, MobaXterm and Royal TSX are imported from Settings > Import / Export.~/.ssh/authorized_keys.find / scrolls without stutter. What you feel when typing on a distant server is the network round trip, and no terminal can shorten that.tmux attach puts you straight back into it. Closing the tab stops the attempts.Drag & drop file manager
Local, remote & SOCKS5 proxy
Reusable command library
RFC 854 terminal for legacy equipment
Console cable to router, switch or board
Claude & Cursor integration