SSH Host Vault

SSH Host Vault is a Linux alternative to Termius for organising SSH hosts.
Disclaimer: This project is an independent open-source tool and is not
affiliated with, sponsored by, or endorsed by Termius Corporation.

What it really does:
• Encrypted vault: hosts, passwords/key passphrases, snippets and port-forward
rules are stored in one file encrypted with ChaCha20-Poly1305 (RFC 8439,
pure-Python implementation verified against the RFC test vectors); the key is
derived from your master password with scrypt (N=2^15, r=8, p=1).
Encrypted export / import with a separate password.
• Host groups and tags, search, TCP/banner reachability test with measured ms.
• Import concrete Host entries (incl. Include, LocalForward/DynamicForward)
from your real ~/.ssh/config.
• Connect: launches the real OpenSSH ssh client in a pseudo-terminal shown
in a built-in VT100 terminal (basic, no colours). Stored passwords /
passphrases are typed automatically at the prompt.
• Snippets: run commands on a host over ssh and see the output.
• Port forwarding rules (-L / -R / -D) started as real ssh processes.
• knownhosts viewer for ~/.ssh/knownhosts with SHA256 fingerprints,
hashed-entry lookup, ssh-keyscan and trust-on-confirm.

Snap notes: reading ~/.ssh (config, keys, knownhosts) needs the ssh-keys
interface: sudo snap connect ssh-host-vault:ssh-keys. Inside the snap ~/.ssh
is read-only, so newly accepted host keys are written to the app's own
knownhosts file. The built-in terminal is a VT100 subset; complex full-screen
programs may render imperfectly (use "Copy ssh command" for your terminal).

Support development: https://buymeacoffee.com/thanhnv128b