Is Onshell.cloud really free?

Yes. The Free plan is free forever for one person: up to 3 hosts, browser SSH, SFTP, the encrypted credential vault, and 7 days of audit history, with no credit card. It is a permanent tier, not a trial. Paid Team and Business plans add seats, hosts, RDP, snippets, and longer retention — and those come with a separate 14-day trial.

Do I need to install any software or agents?

No. Everything runs in the browser through the Onshell gateway. There are no desktop clients, browser extensions, or per-host agents to deploy — any host you can already reach with a normal SSH client works as-is.

How are my credentials and keys kept safe?

SSH keys and passwords are encrypted at rest with AES-256-GCM, using a master key held only in the server environment. Every connection is brokered through the gateway, so key material is never serialised into the browser and members connect without ever seeing the secret.

Does the terminal support vim, tmux, and colours?

Yes. It is a full xterm implementation, so 256-colour output, alternate screen buffers, mouse reporting, and resizing all work. Interactive tools behave exactly as they do in a local terminal.

Which protocols and platforms are supported?

SSH and SFTP for Linux and Unix hosts, plus RDP for Windows desktops. A single registered host can be opened as a terminal, a file browser, or a remote desktop, depending on what it supports.

Can I control who accesses which servers?

Yes. Five roles from Owner to Auditor, with per-host permissions, so each member only reaches the systems they should. Sign-in supports email, Google, and two-factor authentication via an authenticator app or emailed codes.

What gets logged for audit and compliance?

Every session, file transfer, permission change, and admin action is recorded with actor, IP, and timestamp in an append-only log. Retention matches your plan — 7 days on Free, 90 days on Team, and a full year on Business.

What does the AI assistant do?

It answers questions about Onshell.cloud itself and about practical Linux, shell, and SSH work — commands, config files, key management, systemd, and troubleshooting — from inside the console. Conversations are saved as threads so you can pick up where you left off. It never asks for or repeats your secrets.

How does billing work?

Paid plans are billed per workspace rather than per seat, monthly or yearly, with yearly including two months free. You can upgrade or downgrade at any time, and larger deployments are arranged directly — just get in touch.

Free forever for one user — no card required

The best browser-based SSH client for teams.

Open a full audited terminal in a browser tab, move files over SFTP, and reach Windows desktops over RDP. Keys stay encrypted in one vault, access is granted per host, and every session is recorded. Nothing to install — on any operating system.

Start free How it works

No agents to install · AES-256 encrypted vault · Every session audited

3-in-1SSH · SFTP · RDP

$0To start, forever

100%Sessions audited

AES-256Vault encryption

Everything in one workspace

A browser SSH client that replaces your whole access stack

Eight capabilities that usually take six tools — behind one login, one policy, one audit trail.

Full browser SSH terminal

A real xterm in a tab: 256 colours, resizing, scrollback, and every control sequence. vim, tmux, and htop behave exactly as they do locally.

SFTP file manager

Browse, upload, download, and edit remote files on the same host, with per-user permission checks on every operation.

RDP for Windows hosts

Launch Windows desktops through controlled gateway sessions — policy-bound and recorded alongside your shell sessions.

Encrypted credential vault

Keys and passwords sealed with AES-256-GCM. Members connect through a credential without ever being shown the secret.

Shared team snippets

Keep reviewed one-liners and runbooks next to the hosts they belong to, so routine work stays consistent.

Built-in AI assistant

Ask about a stubborn systemd unit or an Onshell setting and get a practical answer, without leaving the console.

Roles and per-host access

Five roles from Owner to Auditor. Developers reach staging, auditors read the trail, production stays locked down.

Complete audit trail

Every session, transfer, and admin change recorded with actor, IP, and timestamp. Retention follows your plan.

How it works

From bare servers to audited access in fifteen minutes

Four steps, no agents, and nothing to install on the machine you're sitting at.

Register your hosts

Add each server's address, port, and username once. No agent to deploy — anything you can already reach over SSH works as-is.

Store credentials once

Paste keys or passwords into the encrypted vault and attach them to hosts. Nobody has to keep a copy on their laptop again.

Invite your team

Assign roles and per-host access. Members sign in with email, Google, or a 2FA-protected account.

Work from any browser

Open terminals, move files, and launch desktops from any machine with a browser — every action audited.

Pricing

Start free. Upgrade when your team grows.

One genuinely useful free tier for solo operators, then per-workspace pricing for teams — not per seat.

Yearly billing includes 2 months free

Free forever

Free

Everything you need to replace a desktop SSH client, for one person.

$0forever

1 user / 3 hosts

1 user
Up to 3 hosts
Browser SSH terminal
SFTP file manager
Encrypted credential vault
7-day audit history

Start freeNo credit card, no time limit

Team

For small teams sharing servers. Billed per workspace, not per seat.

$19/mo

10 users / 50 hosts

Up to 10 users
Everything in Free
Browser RDP sessions
Shared team snippets
Role-based host permissions
90-day audit retention

14-day free trial, cancel anytime

Business

For growing DevOps organisations that need governance and scale.

$49/mo

50 users / 300 hosts

Up to 50 users
Everything in Team
Unlimited AI assistant
365-day audit retention
SAML / OIDC ready
Priority support

14-day free trial, cancel anytime

Upgrading to a paid plan?We'll pass these details to the billing provider.

Your emailOrganization

Need more than 50 users or custom retention? Talk to us about Enterprise instead.

Enterprise

More than 50 users, custom audit retention, SSO enforcement, data-residency requirements, or a security review to get through? We'll size it with you.

Talk to us

Why teams switch

The problems desktop SSH clients leave you with

Private keys scattered across every laptop

Keys live encrypted in one vault. The gateway injects them; members never hold the material.

Offboarding means hunting for who had which key

Revoke one membership. Access to every host disappears with it, and the audit log shows what they touched.

Nobody can answer "who ran that on Tuesday?"

Every session, transfer, and permission change is recorded with actor, IP, and timestamp.

New engineers lose a day to SSH config

They sign in and see the hosts they're allowed to reach. Setup time is a single invite.

FAQ

Questions teams ask before switching

Everything you need to know about running remote access from the browser.

Onshell.cloud is a browser-based SSH client for teams. Register your servers once, store their keys and passwords in an encrypted vault, then open full audited terminals, SFTP file browsers, or RDP desktops from any browser tab — with per-host permissions and a complete audit trail, and nothing to install.

Open your first browser terminal in five minutes

Free forever for one person. No credit card, no agents to deploy, no config to copy around.

Start free Talk to us first