One Source of Truth
- Link a Termy host to an OpenSSH Host alias. Choose SSH Config as the route, enter the alias, and preview the resolved destination before saving.
- Connection settings stay current. Termy re-reads HostName, User, Port, Include, and ProxyJump before every new connection and reconnect.
- Imported hosts can remain linked. The SSH config importer can keep hosts connected to the default config instead of creating a one-time snapshot.
ProxyJump & Safety
- Multi-hop and nested ProxyJump routes are supported. Saved Termy credentials are reused for matching jump hosts, while other hops can use the target host's configured authentication.
- Authentication remains under your control. Termy continues to use its saved authentication or your SSH agent and never opens private keys merely because they appear as IdentityFile entries.
- Unsafe or unsupported routes fail clearly. Invalid ports, malformed or cyclic jump chains, and ProxyCommand routes are rejected instead of being silently bypassed. Match and ProxyCommand commands are never executed.
What changed
Host Backups
- Export and import Termy hosts. The Hosts menu now creates a portable JSON backup and restores it without duplicating matching destinations.
- Software-key export is optional and off by default. When enabled, referenced software SSH keys are encrypted with your backup passphrase. Passwords are never exported.
- Device-bound keys stay device-bound. Secure Enclave, FIDO2, and PIV private keys never leave their hardware; matching local keys are reused by fingerprint during import.
iCloud Sync
- Sync status now reflects the current launch. Settings distinguishes active iCloud sync, a pending restart, local-only fallback, and temporary storage.
- The restart reminder now clears correctly. After Termy restarts with the requested sync setting, the reminder is replaced by the active or off status.
- CloudKit startup failures are visible. Termy explains when it has fallen back to local-only storage instead of leaving an enabled toggle with no diagnostic.
SSH Agent
- All available agent identities are now tried. If a server rejects the first key, Termy continues with the remaining identities until one is accepted or every key has been exhausted. This fixes multi-key authentication with 1Password SSH Agent and other agents exposed through SSH_AUTH_SOCK.
What changed
Companion IntelligenceBeta
- Smart reactions can now run entirely on your Mac. Download the optional 1.38 GB, 4-bit Qwen 3.5 2B model and keep the companion’s prepared lines as an instant fallback.
- Talk directly to your companion. A new local-only conversation window follows the selected companion’s personality and answers in the language you use.
- Active-window context is optional and private. For selected reactions, Termy can read the frontmost window with local OCR, immediately discard the screenshot, and send nothing to the cloud.
- Conversation and project memory stays bounded and local. The companion can remember a small set of useful facts and recent turns on this Mac, with a one-click option to clear everything.
- Intelligence controls only activate when the model is truly ready. Incomplete downloads no longer appear installed, and the Companion item is now clearly marked Beta in Settings.
Local Model Reliability
- The Qwen model now downloads correctly from its public Hugging Face repository. The preparation-time authorization failure that rejected the download has been fixed.
- Interrupted downloads continue from saved progress. Cancelling or restarting Termy preserves completed bytes so the 1.38 GB model does not need to be downloaded again.
- Downloads finish only after verification. Progress remains visibly in flight while files are assembled and SHA-256 checked, and Termy activates only a complete verified model snapshot.
- The companion uses a memory-efficient llama.cpp runtime. The quantized GGUF model has bounded context, cancels superseded requests, and unloads after idle time instead of leaving overlapping high-memory sessions behind.
- Structured local replies are more dependable. Constrained JSON generation, hard timeouts, and cancellation prevent malformed-response errors and ensure a prepared reaction appears if the model is not ready in time.
Companion Polish
- One event produces one visible reaction. Duplicate terminal and interface signals are coalesced, and late model replies can no longer replace an already-finished fallback.
- Desktop reactions stay separate from private chat. The companion no longer repeats random lines from an earlier conversation when reacting to the desktop.
- The companion stays anchored when a speech bubble appears. Showing or dismissing text no longer moves the sprite, clips the bubble, or sends its geometry down the screen.
- The conversation window now behaves like Termy. It uses the app’s dark visual language, reliably accepts keyboard focus, opens without a blank duplicate window, and automatically follows the newest message.
- New companion intelligence surfaces are localized. Settings, download state, privacy explanations, memory controls, and conversation UI follow Termy’s selected language.
Terminal Privacy
- Passwords are no longer saved as recent commands. Input entered at password, passphrase, verification-code, OTP, or PIN prompts is excluded from terminal history.
- Sensitive input is excluded from session helpers. Credentials are not retained in session previews or Inline Fix context.
- Passwords stay in the active terminal. Sensitive prompt input is no longer mirrored to other panes when synchronized input is enabled.
License Activation
- One-time account links no longer store your permanent license key. Termy now completes browser activation with the signed device token and a non-secret local license identity.
- Existing licenses stay active after the update. Previously activated Macs keep their current token and Keychain recovery data, so there is no need to enter the license key again.
What changed
Local Terminal
- Command-T now works from Hosts. Open a new local terminal tab even when you are not already connected to a server.
- Start Termy at a terminal prompt. A new Startup setting can open a local terminal automatically instead of restoring tabs or showing the Hosts list.
- Local shells start in your home directory. Login shells now open in the macOS account home rather than the filesystem root or an app container.
- Your SSH agent is available in local shells. Termy forwards a validated `SSH_AUTH_SOCK` or uses the 1Password SSH Agent when available.
SSH Config & Authentication
- Wildcard ProxyJump rules are applied automatically. Saved hosts now follow matching rules such as `Host *switch*.foo.com` with `ProxyJump proxy.foo.com`.
- SSH Agent is available for saved hosts. Choose SSH Agent in the host editor to authenticate through `SSH_AUTH_SOCK` or 1Password without importing private keys into Termy.
- Existing Termy routes remain authoritative. Explicitly configured ProxyJump chains continue to take priority over automatic SSH config matching.
ProxyJump
- Final-host authentication errors are reported correctly. If the jump host connects but the target rejects its password or key, Termy now identifies the target authentication failure instead of blaming the intermediate host.
- Host-key diagnostics follow the failed hop. A successfully verified proxy host key is no longer mistaken for a host-key problem on the target.
- Tunnel failures include actionable context. Connection logs now distinguish target negotiation failures from reachability and jump-host forwarding policy issues.
- Recovery guidance keeps the configured route intact. Troubleshooting suggestions no longer recommend disabling ProxyJump or assume that saved Termy hosts exist in `~/.ssh/config`.
What changed
Companions
- Meet your new terminal companion. Choose from five characters, each with a personality of their own.
- They follow the rhythm of your work. Your companion reacts as you type, waits with you while commands run, and responds when commands or connections finish.
- Keep it just the way you like it. Move your companion anywhere, turn off its comments, or hide it completely at any time in Settings.
Everyday Improvements
- Database row counts are clearer. PostgreSQL and MySQL tables now show an accurate total automatically, and keep it up to date after edits.
- Connections recover more gracefully. Sessions and tunnels handle network changes more smoothly, while stopped tunnels stay stopped.
What changed
RabbitMQ
- Connect to TLS-enabled RabbitMQ services through an SSH tunnel. Termy now verifies the original broker correctly while carrying the connection through the local tunnel.
- Connection tests now check both RabbitMQ and its Management API. Saved credentials are reused when appropriate, and failures clearly identify whether the broker or the Management endpoint needs attention.
- Watch new messages without naming an existing queue. Leave Queue empty, choose an exchange and routing pattern, and start a Live tap. Termy uses a temporary queue that is removed automatically when you stop.
Interface
- Data Service controls are now arranged consistently. Refresh stays on the left and Disconnect stays at the far right across PostgreSQL, MySQL, Redis, MongoDB, ClickHouse, and RabbitMQ.
- RabbitMQ message controls now align cleanly. Queue, prefetch, Pull, Peek, and consume actions use a consistent height and clearer active states.
What changed
1 fixes & polish
- Hosts no longer disappear after updating or restarting Termy. Version 1.6.1 fixes a storage compatibility issue introduced in 1.6.0 while preserving your existing host catalogue.
What changed
Getting Started
- Your first connection now takes fewer steps. Onboarding leads directly to adding or importing a host, testing the connection, and opening a shell.
- SSH config import has a clear next step. After importing, you can review and test the first host or connect to it immediately.
- Host X-ray appears after your first connection. Termy identifies the system and brings the most useful host details into view as soon as the shell is ready.
Safer Operations
- See exactly what will run before it runs. Broadcasts, Playbooks, and command pipelines now show the command, target hosts, environment, risk, rollout settings, and verification plan before execution.
- Roll out changes gradually. Use a canary host, limit concurrency, pause or stop a run, and inspect the result for each host before continuing.
- Unsupported Playbook steps are blocked up front. A compatibility summary explains what Termy can run, what needs attention, and what must be changed before execution.
Diagnostics & Activity
- Connection failures now come with a reason and a next step. Diagnose can distinguish DNS, port, authentication, key, ProxyJump, and host-key problems and suggest a focused fix.
- Repeated Activity errors are grouped together. You can see how often a problem occurred, when it last happened, and what to try next without digging through duplicate entries.
- Incident Capsules keep troubleshooting context together. Save a local, redacted record of affected hosts, evidence, actions, and verification, compare hosts, and turn a verified fix into a reusable runbook.
- A weekly operations digest is available in Activity. It summarizes recent work on this Mac and can be turned off at any time.
Pro & Account
- The seven-day Pro trial starts after your first successful connection. You get time to evaluate Pro after reaching real value, not while you are still setting up the app.
- The paywall now explains the feature you were trying to use. Monthly, yearly, and lifetime plans are shown consistently at $6.99, $49.99, and $139.99.
- Activate Termy directly from your web account. Each active license includes a one-time “Open Termy and activate” link, while copying the license key remains available as a fallback.
Privacy & Accessibility
- Background host checks and the weekly digest are under your control. Their status is visible in Settings, and either feature can be disabled.
- Reporting a problem is safer. Termy removes sensitive details and asks for permission before attaching a diagnostic bundle.
- Keyboard and assistive navigation are more consistent. Command search, quick switching, status controls, and database suggestions now expose clearer focus and selection states.
- Termy now runs on macOS 14 and newer. Redis tools require macOS 15 or newer; the rest of the app remains available on macOS 14.
Tailnet Discovery — Beta
- Import hosts from an installed Tailscale client. Termy reads the local MagicDNS inventory and imports only the hosts you select, without copying your Tailscale account credentials.
What changed
Distribution
- Termy now ships as a notarized Developer ID build. The app and DMG are signed, submitted to Apple notarization, and stapled so macOS can verify the download through the normal Gatekeeper flow.
- Updates have a cleaner trust path. Sparkle now points at a notarized DMG instead of the previous signed-only early-access packages.
Included Fixes
- License recovery and activation states remain smoother. Termy keeps the recent improvements for recovering active licenses and explaining expired or inactive access.
- SFTP focus behavior remains tightened up. Folder navigation, focused text fields, and split-view shortcuts continue to follow the active pane more reliably.