Persistent Context Across Devices

Your terminal session lives on your computer, not in the app. Close the app, lock your phone, or lose your connection entirely — the session keeps running in the background with all of its state intact.

Running processes, shell history and scrollback are preserved
Reconnect instantly and pick up exactly where you left off
Long-running builds, training jobs and deploys survive any disconnect

Seamless Switching

Start a task at your desk, keep watching it from the couch, and check in again from the train. Every device attached to your account opens the same live session — no detaching, no reattaching, no setup.

Move between desktop and mobile without losing context
Link multiple devices, each managing multiple terminals
One account across iOS, Android and the Web App

File Browser & Download

Browse the file system of any linked computer straight from your phone. Navigate directories, inspect files, and pull anything down to your device with a single tap — no SCP commands, no cloud sync detours.

Full remote directory browsing from the mobile app
One-tap download of logs, builds and documents
Downloads ride on the same encrypted channel as your terminal

Access Localhost / LAN Web Apps

Reach the web apps that only exist inside your network — dev servers on localhost:3000, your router's admin page, a NAS dashboard, or internal tools — directly from your phone, wherever you are.

Open localhost ports running on your PC from anywhere
Browse private LAN services without a VPN
No port forwarding or firewall changes required

Smart Connectivity

CLIAnywhere always picks the fastest path available. When your devices can reach each other directly, it establishes a peer-to-peer connection; when they can't, traffic falls back to an encrypted relay — automatically.

Direct P2P connection for the lowest latency when possible
Encrypted relay fallback keeps you connected on any network
No public IP, DDNS or router configuration needed

Every Shell, Every Platform

The PC daemon runs on macOS, Linux and Windows, and speaks your shell of choice — bash, zsh, fish, sh, cmd, pwsh and powershell. The daemon is fully open source, so you can audit exactly what runs on your machine.

Hosts: Windows, macOS, Linux (desktop UI or headless CLI)
Clients: iOS, Android and the browser-based Web App
Open-source daemon you can build from source yourself

Security

End-to-End Encryption, by Default

Every session rides on a secure channel, negotiates its keys directly between your devices, and encrypts all data end-to-end — so the relay only ever sees ciphertext, never your content.

Layer 1 · Transport

Secure Channel

Connections are established over DTLS for direct P2P links, or WSS when traffic falls back to the relay — a secure transport either way.

DTLS · WSS

Layer 2 · Handshake

Key Exchange

A SPAKE2 password-authenticated key exchange negotiates the session key between your computer and the app — your security code is never uploaded anywhere.

SPAKE2

Layer 3 · Payload

Data Encryption

All application data is encrypted with AES-256-GCM before it leaves your device — authenticated encryption for every keystroke and byte of output.

AES-256-GCM

Even when your traffic passes through our relay, it only ever forwards ciphertext. Your keystrokes, terminal output, and files are readable by your devices alone.

A Full Terminal, in Your Pocket