Bast
bast.sh
What it is
Bast is a command-line tool and terminal interface for managing SSH hosts and connecting to servers. It uses the system OpenSSH client and relies on the existing SSH configuration as its source of truth. Users can search, sort, group, tag, color, favorite, and hide hosts, then connect through SSH or use port forwarding. A dual-pane Files tab supports local and remote file browsing and transfers through OpenSSH SFTP. The key manager can generate, import, export, and install SSH keys. Bast documents host synchronization with GCP, AWS, Azure, box.ascii.dev, Upstash Box, Vercel Sandbox, and Hetzner Cloud. Its Vault encrypts managed hosts and keys on the client using a passphrase-derived key and XChaCha20-Poly1305; the server stores ciphertext. Users can self-host the web app and keep Vault data on their own infrastructure. Bast is free, with plans for macOS, Linux, and Windows 11. Windows requires OpenSSH Client commands on PATH. Vercel Sandbox sessions are capped at five hours.
Spec sheet
- Purpose
- Bast is a command-line tool and terminal interface for managing SSH hosts and connecting to servers.Read 8 Oct 2026 · bast.sh
- Maker
- Bast.sh is a product and hosted service of ELLIPSE SOFTWARE GROUP LIMITED, trading as ellipse Software.Read 8 Oct 2026 · bast.sh
- Cloud integrations
- Bast documents host sync for GCP, AWS, Azure, box.ascii.dev, Upstash Box, Vercel Sandbox, and Hetzner Cloud.Read 8 Oct 2026 · bast.sh
- File transfer
- Its dual-pane Files tab browses local and remote files and transfers them over OpenSSH SFTP.Read 8 Oct 2026 · bast.sh
- Host management
- It can search, sort, organize, favorite, and hide SSH hosts, with groups, tags, and colors.Read 8 Oct 2026 · bast.sh
- Key management
- Bast can generate, import, export, and install SSH keys.Read 8 Oct 2026 · bast.sh
- OpenSSH
- Bast uses the system OpenSSH client and treats the existing SSH configuration as its source of truth.Read 8 Oct 2026 · bast.sh
- Self-hosting
- Users can self-host the Bast web app and configure the client to store Vault data on their own infrastructure.Read 8 Oct 2026 · bast.sh
- Supported operating systems
- Bast installs on macOS, Linux, and Windows 11.Read 8 Oct 2026 · bast.sh
- Telemetry privacy
- The privacy policy says telemetry does not collect hostnames, keys, emails, project IDs, or SSH config contents.Read 8 Oct 2026 · bast.sh
- Vault encryption
- Vault encrypts managed hosts and keys on the client using a passphrase-derived key and XChaCha20-Poly1305; the server stores ciphertext.Read 8 Oct 2026 · bast.sh
- Vercel connection limit
- Bast caps Vercel Sandbox session timeouts at five hours, although Vercel Pro and Enterprise sandboxes can run up to 24 hours.Read 8 Oct 2026 · bast.sh
- Windows requirement
- On Windows, Bast requires the OpenSSH Client commands ssh, ssh-keygen, and ssh-add on PATH.Read 8 Oct 2026 · bast.sh
Plans and prices
Strong points and limits
Strong points
- Uses the system OpenSSH client and existing SSH configuration.
- Organizes hosts with groups, tags, colors, and favorites.
- Supports OpenSSH SFTP file transfers and port forwarding.
- Vault encrypts managed hosts and keys on the client.
- Free plan includes cloud host sync and encrypted Vault sync.
Limits
- Windows requires ssh, ssh-keygen, and ssh-add on PATH.
- Vercel Sandbox session timeouts are capped at five hours.
Who it suits
Bast suits people managing SSH hosts across macOS, Linux, or Windows who want host organization, key management, and SFTP in one interface. Self-hosting and client-side Vault encryption may appeal to users who want their Vault data on their own infrastructure.
Verdict
Bast combines SSH host organization, key management, and SFTP while building on the system OpenSSH setup. Check the Windows command requirement and Vercel timeout cap if either applies to your workflow.
Where Specifiction places it
- SSH Clients#9 of 338.1