Andy Dixon 9cf221779b fix: purge keychain credentials on profile delete, atomic owner-only secret writes, zeroize derived keys
- Secrets::delete_profile removes every profile credential kind from the OS
  keychain as well as the vault (previously only the vault was purged, so
  keychain passwords/tokens outlived the profile).
- write_private writes to a sibling temp file and renames it into place, so a
  crash mid-write cannot truncate the vault or an export, and a pre-existing
  world-readable file is replaced rather than reused.
- Argon2-derived vault/export keys are Zeroizing and wiped on drop.
- Recordings (which capture typed input), JSON exports and --data-dir
  directories are created owner-only.
2026-10-12 07:20:11 +01:00
2026-10-11 17:52:35 +01:00

Nexus Terminal

A native desktop client for SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local terminals — with secure credential handling and a focused, multi-session workflow.

Nexus Terminal helps you manage many connections at once, keep terminal work organised, and move files with confidence. It is a single Rust application with no webview, so it starts quickly and stays responsive under heavy terminal output.

Highlights

  • SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local terminal sessions in one app
  • Tabbed sessions with split panes, pinning and drag-to-reorder
  • SFTP browser with drag-and-drop uploads and a permission-aware directory picker
  • SSH jump hosts, SOCKS5/HTTP proxies, local and remote port forwards, agent forwarding and TOTP auto-fill
  • Serial consoles with full line settings (baud, data bits, parity, stop bits, flow control)
  • Native VNC viewer, optionally tunnelled over SSH
  • Disconnected overlay with one-click reconnect, and auto-reconnect with backoff
  • Broadcast input, snippets, trigger rules and terminal search
  • Session recording (asciicast v2) and playback
  • Secure credential storage with the OS keychain first and an encrypted vault fallback

Quick start

  1. Launch Nexus Terminal.
  2. Click + at the bottom of the sidebar (or press Cmd+N / Ctrl+N) and create a connection profile.
  3. Click Create & Connect to save it and open a session in a new tab. Afterwards, click the profile in the sidebar to connect.

Prefer a one-off session? Use Cmd+Shift+Q / Ctrl+Shift+Q to quick connect, or click Local Machine in the sidebar for a local shell.

If a session drops, use the Reconnect button in the disconnected overlay.

On first run, Nexus Terminal copies your Alchementary Link profiles, encrypted vault and recordings into its own data directory, and picks up credentials saved in the OS keychain. The old data is left untouched. Older .link export files can still be imported.

Documentation

Keyboard shortcuts

All shortcuts use Cmd on macOS and Ctrl on Windows/Linux.

macOS Shortcut Windows/Linux Shortcut Action
Cmd + K Ctrl + K Open command palette
Cmd + N Ctrl + N New connection
Cmd + W Ctrl + W Close current tab
Cmd + Tab Ctrl + Tab Next tab
Cmd + Shift + Tab Ctrl + Shift + Tab Previous tab
Cmd + 1–9 Ctrl + 1–9 Switch to tab by number
Cmd + , Ctrl + , Open settings
Cmd + F Ctrl + F Find in terminal
Cmd + Shift + D Ctrl + Shift + D Split pane right (side by side)
Cmd + Shift + E Ctrl + Shift + E Split pane down (top and bottom)
Cmd + Shift + R Ctrl + Shift + R Toggle session recording
Cmd + Shift + B Ctrl + Shift + B Toggle broadcast input mode
Cmd + Shift + S Ctrl + Shift + S Open snippet library
Cmd + Shift + Q Ctrl + Shift + Q Quick connect
F11 F11 Toggle fullscreen

Building from source

Nexus Terminal is a Rust workspace in rust/. With rustup installed:

cd rust
cargo run --release

See docs/build-and-release.md for platform prerequisites, tests and release packaging.

S
Description
Open-source native desktop client for SSH, SFTP, Telnet, Serial, VNC, RDP, IRC and GitHub, written in Rust. AGPL-3.0.
https://dixon.cx/nexus Readme AGPL-3.0
32 MiB
v3.0.2
Latest
2026-10-13 14:16:27 +02:00
Languages
Rust 97.6%
Shell 1.5%
PHP 0.9%