SSH Tunnel Manager
All your SSH tunnels in one place, one click away.
A desktop app for Windows, Linux and macOS that saves local, remote and SOCKS tunnels and starts them from the tray.
Stop memorising -L, -R and -D.
Every tunnel you use is saved once, with its host, user, ports and credentials. Then it is a click.
# the old way
ssh -N -L 5432:db.internal:5432 [email protected]
ssh -N -R 8080:localhost:3000 [email protected]
ssh -N -D 1080 [email protected]-LLocal
Reach a remote service, like a database behind a bastion, on a local port.
-RRemote
Expose a port from your machine on the remote server.
-DDynamic
A SOCKS proxy that routes your traffic through the SSH server.
From saved tunnel to connected in one click
Add a tunnel once, start it when you need it and watch its status change live.
Everything for your daily tunnels
For developers and admins who reach databases and dashboards behind a bastion every day.
KeePass & Bitwarden
Read secrets straight from a KeePass .kdbx file (no KeePass install needed) or from Bitwarden via the bw CLI.
Lives in the tray
Start and stop your favourite tunnels from the system tray. Closing the window minimises it to the tray.
Password or private key
Authenticate with a password or a private key, including keys protected with a passphrase.
Stay organised
Groups, favourites and a live status for every tunnel: connecting, connected or error.
Starts with your system
Optionally launch the app when you log in, start it minimised and check for updates.
Three steps to your first tunnel
Download & install
Use the Windows installer, the .deb package for Linux or the .dmg for macOS. .NET is bundled, so there is nothing else to install.
Add a tunnel
Enter the host, user, type (Local, Remote or Dynamic) and ports, then pick authentication: password, key or a KeePass/Bitwarden entry.
Click Start
See the status right away. Start your favourite tunnels from the tray without opening the window.
Start free, upgrade when you need more
Free covers up to five tunnels on two SSH hosts, jump hosts included. Premium removes the limits for $9.99 a year.
Free
Free
- Up to 5 tunnels
- Up to 2 SSH hosts
- Jump hosts
Premium
$9.99 per year
- Unlimited tunnels
- Unlimited SSH hosts
- Jump hosts
Premium is a yearly subscription that renews automatically until you cancel, with a full refund within 14 days of any payment. Sales tax or VAT may be added at checkout depending on your location. Orders are processed by Paddle.com, our Merchant of Record. See the Terms and Conditions, Refund Policy and Privacy Policy.
Questions & answers
Where are my passwords stored?
On Windows, passwords are encrypted with DPAPI in your user profile. Tunnel configuration is stored locally in %APPDATA%\SshTunnelManager on Windows or ~/.config/SshTunnelManager on Linux. Nothing is sent to any server.
Do I need KeePass installed?
No. The app reads the .kdbx file itself. For Bitwarden you need the Bitwarden CLI (bw) in your PATH.
Do I need an OpenSSH client?
No. Connections are handled by the built-in SSH.NET library.
Does uninstalling remove my tunnels?
No. The installer intentionally keeps your user data.
Does it work on macOS?
Yes. There are separate .dmg builds for Apple Silicon and Intel Macs.
How does Premium billing work?
Premium is a yearly subscription that renews automatically until you cancel. You can cancel at any time and keep Premium until the end of the paid year. Payments are processed by Paddle.com, our Merchant of Record.
Can I get a refund?
Yes. You can get a full refund within 14 days of any payment, no questions asked.
Keep every tunnel one click away.
Free for up to five tunnels. Windows, Linux and macOS.