Bast.sh: native SSH picker and key manager

Browse SSH hosts, transfer files over SFTP, sync cloud VMs, manage keys, and connect from the terminal.

Bast.sh wraps the OpenSSH already on your machine. Hosts stay in ~/.ssh/config. Use the TUI, or automate with bast --json.

$curl -fsSL https://bast.sh/install | sh

Latest release v0.10.2

BAST Demo

web-01

Connect

[email protected]

GCP synced · known host

Access

Auth

~/.ssh/bast/keys/work

SSH name

gcp_demo_web-01

About

Used

2026-07-26 13:40 (4)

tap select • 1/2/3/4/5 tabs

Bast, Termius, or PuTTY?

All three get you onto servers. Bast is for people who already live in the terminal and want a faster way around OpenSSH, not another app that owns your hosts. See all comparisons: Termius, PuTTY, MobaXterm, SecureCRT.

QuestionBastTerminal pickerTermiusGUI SSH clientPuTTYClassic Windows client
Where does it run?Inside your terminal on macOS, Linux, and Windows 11As a separate GUI app on desktop and phonesAs a Windows desktop app
How do you connect?Calls the OpenSSH binary already on your machineUses Termius's own SSH clientUses PuTTY's own SSH stack and .ppk keys
Where are hosts stored?Your normal ~/.ssh/config (Bast does not replace it)Inside Termius's own host databaseAs saved PuTTY sessions
Cloud hosts?Imports from GCP, AWS, Azure, Hetzner Cloud, and box.ascii.devMostly manual setupNot built in
Sync between machines?Optional encrypted Bast vault for managed hosts and keysThrough a Termius accountNo
File transfers?Dual-pane SFTP in the same TUIBuilt-in SFTP UI on paid plansSeparate PSCP / PSFTP tools
Cost?Free and open source (MIT)Free tier, paid plans for sync and extrasFree

FAQ

Short answers to the questions people ask before installing.

Does Bast replace OpenSSH?
No. Bast launches the ssh binary already on your machine and reads your existing ~/.ssh/config. It adds a managed Include for hosts you create in Bast. Your config stays the source of truth.
Does Bast work on Windows?
Yes. Bast runs natively on Windows 11 with Windows OpenSSH, including Windows Terminal, PowerShell, and Command Prompt. It also runs inside WSL as a Linux application. Native Windows and WSL use separate home directories and SSH configuration.
Where are hosts and keys stored?
Connection settings stay in OpenSSH config. Bast-managed hosts live under ~/.ssh/bast/, keys under ~/.ssh/bast/keys/, and metadata (groups, tags, notes) in ~/.config/bast/state.json.
Is Bast vault end-to-end encrypted?
Yes. Vault encrypts Bast-managed hosts, keys, and metadata on your machine before anything is uploaded. Bast servers only store ciphertext. The passphrase never leaves your device.
How is Bast different from Termius?
Termius is a GUI client with its own host database and account sync. Bast stays in the terminal, speaks native OpenSSH, and keeps hosts in ~/.ssh/config. Pick Bast when you want a faster picker without leaving your SSH setup behind.
Can I automate Bast or use it with AI agents?
Yes. Prefer bast --json for scripts, and install the agent skill with npx skills add ellipse-software/bast -g -y.

Sponsors

Bast is free and open source. Sponsorships fund development.

Install Bast

macOS, Linux, and Windows 11. Uses native OpenSSH, so your config and keys stay where they already are.

$curl -fsSL https://bast.sh/install | sh

Latest release v0.10.2