Built-in SSH client
Terminal based on libssh2, independent from the system ssh. Agent, key, password or keyboard-interactive auth.
SSH · SFTP · RDP — macOS · iPadOS
SSH, SFTP and remote desktop. On Mac and iPad.
KeyHole brings an SSH terminal, an SFTP browser and Windows Remote Desktop together in a native app for Mac and iPad, on the App Store.
On Windows? Discover MSKeyHole
Apple Silicon Mac, macOS 13 or later · iPad, iPadOS 16 or later
deploy@prod-web-01:~$ systemctl status nginx ● nginx.service - A high performance web server Active: active (running) since Tue 2026-09-15 08:12:04 CEST deploy@prod-web-01:~$ tail -n 2 /var/log/nginx/error.log 2026/09/16 09:41:12 [warn] upstream response is buffered deploy@prod-web-01:~$
Native RDP
Windows desktop with audio, HiDPI rendering at native Retina resolution and dynamic resizing.
Touch ID / Face ID lock
App locked by Touch ID, Face ID (iPad) or password. Secrets stored in the macOS or iPadOS Keychain.
Features
Your Linux servers and Windows machines, in the same window
SSH terminal
Built-in libssh2, ProxyJump, known_hosts verification, ~/.ssh/config import.
Dual-pane SFTP
Local disk on the left, server on the right. Drag-and-drop transfers, local delete goes to the Trash.
RDP remote desktop
NLA/CredSSP, remote audio to the Mac, remote cursor, ⌘ usable as Ctrl, Ctrl+Alt+Del.
Split views
Tabs, side-by-side or stacked views, sessions detachable into a window and re-attachable.
Host organization
Collapsible groups, instant search (⌘K), 52 host icons, connect with double-click or Enter.
Local security
Lock by Touch ID, Face ID (iPad) or password (Argon2) after inactivity. Passwords in the macOS or iPadOS Keychain.
Session recording
Terminal to Markdown, RDP to video, stored in Documents/KeyHole records.
13 themes
KeyHole Dark, Nord, Dracula, Tokyo Night, Catppuccin Mocha… with matching terminal themes.
Security and privacy
Nothing leaves your Mac or iPad
Secrets in the Keychain, no account, no telemetry. KeyHole is sandboxed for the App Store: it only sees what you give it.
Verified connections: known_hosts for SSH, TLS fingerprint pinning of the server for RDP.
Secrets in the macOS or iPadOS Keychain
Passwords and passphrases are stored in the Mac or iPad Keychain, never in a plain-text file.
Automatic lock
The app locks with Touch ID, Face ID (iPad) or a password (hashed with Argon2) after a period of inactivity.
No VigilanceX server
No data — hosts, credentials, sessions — is sent to any VigilanceX server. No account, no external sync.
Sandboxed app
Distributed through the App Store, KeyHole runs inside the macOS and iPadOS sandbox.
On a Windows PC? Meet MSKeyHole
MSKeyHole, the Windows edition, has its own website: built-in OpenVPN, a vault locked by YubiKey and KeyHole RemoteApps for companies.
Pricing · Mac and iPad
Free to start, then the plan that fits
Free version limited to 2 hosts. Payment managed by Apple, cancel anytime from your Apple account. A purchase is valid on both Mac and iPad with the same Apple account.
Free
€0 no time limit
Up to 2 hosts, no credit card. Session recording not available.
- 2 hosts maximum
- SSH, SFTP and RDP, no time limit
- Upgrade to a Pro plan whenever you want
Yearly
€39/year
i.e. €3.25/month — 35% savings versus monthly.
- All features, all the time
- Updates included
- Cancel from your Apple account
Monthly
€4.99/month
No commitment, for a one-off assignment.
- All features
- No commitment
- Cancel from your Apple account
Perpetual license KeyHole 1
€99
One-time purchase. All KeyHole 1 updates included.
- Every KeyHole 1 update
- Major versions (roughly every 2.5 to 3 years) sold separately
- Preferential pricing for license holders
Companies — Per-seat license keys, outside the App Store, on request at contact@vigilancex.io.
Apple Silicon Mac, macOS 13 or later · iPad, iPadOS 16 or later
Frequently asked questions
What are the system requirements?
On Mac: macOS 13 Ventura or later, on an Apple Silicon Mac. On iPad: iPadOS 16 or later. On Mac and iPad, KeyHole is distributed through the App Store, and a purchase is valid on both Mac and iPad with the same Apple account.
What does the free version include?
Up to 2 hosts, SSH, SFTP and RDP, with no time limit and no credit card. Session recording is reserved for Pro plans. You upgrade from within the app, through the App Store — nothing is charged without your consent.
Where is my data stored?
On Mac and iPad, only on your device: hosts, keys and sessions stay local; passwords and passphrases go to the macOS or iPadOS Keychain. There is no account, no cloud, no telemetry.
What does KeyHole replace day to day?
The SSH/SFTP client you already use — plus an RDP client. Your Linux servers and Windows machines live in the same window, with tabs and split views.
How do I cancel a subscription?
From your Apple account (Settings → Subscriptions), like any App Store app. Access stays active until the end of the current period.
What does the perpetual license cover?
€99 once: every KeyHole 1 update is included. New major versions (roughly every 2.5 to 3 years) are sold separately, with preferential pricing for license holders.
One tool to open in the morning
SSH, SFTP and RDP in one native app for Mac and iPad.
Mac and iPad: free up to 2 hosts, purchases managed by Apple.