# Tempest SSH Knowledge Base

## English

- [Tempest Knowledge Base](https://docs.gotempest.app/readme.md): Tempest is a cross-platform SSH client with SFTP, FIDO2, OpenSSH certs, post-quantum KEX, AI, and presets for Teleport, Cloudflare Access, AWS SSM.
- [Tempest Remote — Open Saved SSH Servers in VS Code](https://docs.gotempest.app/connect-to-servers/tempest-remote-vscode.md): Connect Visual Studio Code to saved Tempest SSH servers with Tempest Remote, the local Tempest CLI and Microsoft Remote - SSH.
- [SSH Client for Teleport, Cloudflare Access, AWS SSM, GCP IAP & Tailscale](https://docs.gotempest.app/connect-to-servers/ssh-client-for-teleport-cloudflare-access-aws-ssm-gcp-iap-and-tailscale.md): Tempest works with Teleport, Cloudflare Access, AWS SSM, GCP IAP, and Tailscale via OpenSSH cert auth and ProxyCommand wizards.
- [SSH Jump Host & Bastion Chaining](https://docs.gotempest.app/connect-to-servers/ssh-jump-host-bastion-chaining.md): Connect to private servers behind one or many SSH bastions with Tempest's recursive jump-host chaining — like OpenSSH ProxyJump, with a GUI.
- [SSH Port Forwarding — Local, Remote & Dynamic SOCKS5](https://docs.gotempest.app/connect-to-servers/ssh-port-forwarding.md): How to set up SSH port forwarding in Tempest — local (-L), remote (-R), and dynamic SOCKS5 (-D) forwards via a GUI with live status for each tunnel.
- [SSH Connection Multiplexing](https://docs.gotempest.app/connect-to-servers/ssh-connection-multiplexing.md): Tempest's SSH connection multiplexing reuses one authenticated connection across many sessions to the same host — instant new tabs, one MFA per host.
- [SSH Agent & X11 Forwarding](https://docs.gotempest.app/connect-to-servers/ssh-agent-x11-forwarding.md): Use SSH agent forwarding (1Password, ssh-agent, Pageant) and X11 forwarding in Tempest — keep keys local and run remote GUI apps on Mac/Win/Linux.
- [Launch Tempest from URLs and External Tools](https://docs.gotempest.app/connect-to-servers/launch-tempest-from-url.md): Launch Tempest from external tools, browsers, scripts, and bastion clients using Tempest deep links or SSH URLs on macOS, Windows, and Linux.
- [Open Terminal Here — Folder Context Menu](https://docs.gotempest.app/connect-to-servers/open-terminal-here-folder-context-menu.md): Right-click any folder in Explorer, Finder, Dolphin, Nautilus, Nemo or Thunar and open a Tempest terminal there — on Windows, macOS and Linux.
- [Mosh (Mobile Shell) — Survive Flaky Connections](https://docs.gotempest.app/connect-to-servers/mosh-mobile-shell.md): Tempest has built-in Mosh (Mobile Shell) — survive flaky Wi-Fi, laptop sleep, and IP changes with the same UI as a normal SSH tab.
- [How to Connect to a Telnet Server](https://docs.gotempest.app/connect-to-servers/connect-to-telnet-servers.md): How to open a Telnet session to a router, switch, embedded device or legacy system in Tempest — saving the host, encoding, and what to use instead.
- [How to Open a Serial Console](https://docs.gotempest.app/connect-to-servers/serial-port-terminal.md): How to open a serial console in Tempest — picking the adapter, setting the baud rate, and connecting to Arduino, Raspberry Pi UART, ESP32 or a Cisco console cable.
- [How to Enable and Use RCON](https://docs.gotempest.app/connect-to-servers/rcon-game-server-admin.md): How to turn RCON on for Minecraft, ARK, Palworld, CS2, Rust and Factorio, and how BattlEye RCON differs for Arma 3 and DayZ — with the settings and ports for each.
- [How to Stream a Desktop with Moonlight & Sunshine](https://docs.gotempest.app/connect-to-servers/moonlight-sunshine-desktop-streaming.md): How to stream a desktop into Tempest over Moonlight — installing the component, pairing with a Sunshine host, the ports involved, and what the stream does and does not carry.
- [macOS: "No route to host" on Your Own Network](https://docs.gotempest.app/connect-to-servers/macos-local-network-permission.md): If Tempest reaches the internet but every server on your own network fails with "No route to host" on macOS, it is missing the Local Network permission. Here is how to get it back.
- [How to Transfer Files over SFTP](https://docs.gotempest.app/files-and-storage/sftp-file-manager.md): How to move files over SFTP in Tempest — drag and drop, bookmarks, editing a remote file in place, chmod and chown, background transfers and ZMODEM.
- [S3, WebDAV & FTP Browser](https://docs.gotempest.app/files-and-storage/cloud-storage-browser-s3-webdav-ftp.md): Tempest is a unified browser for S3 (incl. R2, B2, MinIO, Wasabi, Spaces), WebDAV, and FTP — same drag-and-drop file manager as SFTP.
- [YubiKey & FIDO2 SSH Authentication](https://docs.gotempest.app/authentication/yubikey-fido2-ssh-authentication.md): Use a YubiKey or any FIDO2 security key to authenticate SSH in Tempest on Mac, Windows, Linux — no agent or PAM module, works with ed25519-sk keys.
- [Post-Quantum SSH Algorithms (PQC)](https://docs.gotempest.app/authentication/post-quantum-ssh-algorithms.md): Post-quantum SSH explained — the ML-KEM (FIPS 203) and SNTRUP761 hybrid key exchanges OpenSSH 9+ ships, how to check your connection is quantum-safe, and why Tempest enables PQC by default.
- [HashiCorp Vault — Fetch SSH Credentials at Connect Time](https://docs.gotempest.app/authentication/hashicorp-vault-ssh-credentials.md): Fetch SSH credentials from HashiCorp Vault at connect time — Vault-signed SSH certificates or KV v2 secrets — instead of storing keys and passwords locally in Tempest.
- [Tempest CLI — Connections, Files & Collaboration](https://docs.gotempest.app/productivity/tempest-cli.md): Use Tempest from the terminal: connect to saved servers, transfer files, monitor SSH hosts, host or join encrypted collaboration sessions, and enable shell completion.
- [Tempest AI Assistant](https://docs.gotempest.app/productivity/tempest-ai-assistant.md): Tempest AI Assistant integrates Apple Intelligence, Claude, GPT, Gemini, and self-hosted LLMs into your SSH terminal — explain commands, debug errors, generate one-liners.
- [Tempest AI Security Model](https://docs.gotempest.app/productivity/tempest-ai-security-model.md): How Tempest keeps its AI assistant on a leash — what Copilot is and isn't allowed to do on its own, and how that changes when you bring your own agent through the CLI.
- [AI Agents for Server Automation (Codex, Claude Code, OpenCode)](https://docs.gotempest.app/productivity/using-ai-agents-to-manage-servers.md): Connect Codex CLI, Claude Code, OpenCode, or any MCP-compatible AI agent to Tempest so it can operate your SSH servers for you — no shell scripts, just plain-English requests.
- [Install Tempest MCP Server in Claude Code, Codex, Cursor & More](https://docs.gotempest.app/productivity/install-tempest-mcp-server-in-ai-clients.md): Step-by-step guide to install the Tempest MCP server in Claude Code, Codex CLI, Claude Desktop, Cursor, VS Code (Copilot & Continue), Zed, OpenCode, and any other Model Context Protocol-compatible AI
- [Design Reusable AI Skills for Ops Automation](https://docs.gotempest.app/productivity/ai-skills-reusable-ops-automation.md): Package prompts, scripts, and docs into reusable AI skills so your AI agent runs SSH and server operations the same reliable way every time. A practical guide with a real DevOps example, built on Temp
- [Tempest Drive — Saved Commands & Scheduled Runs](https://docs.gotempest.app/productivity/snippets-scheduled-runs.md): Find Tempest Drive, save reusable SSH commands, use them across desktop and mobile, and configure interval-based scheduled runs with notifications.
- [iperf3 Network Speed Test](https://docs.gotempest.app/productivity/iperf3-network-speed-test.md): Built-in iperf3 in Tempest — measure throughput, latency, and jitter to any server without installing iperf3 on either side.
- [Kubernetes Profiles](https://docs.gotempest.app/productivity/kubernetes-profiles.md): Manage multiple kubeconfig contexts in Tempest — one Kubernetes cluster per tab, with kubectl, helm, and k9s ready to go on macOS, Windows, and Linux.
- [Tempest Monitoring](https://docs.gotempest.app/productivity/tempest-monitoring.md): Live CPU, memory, disk, and network gauges for any SSH server you connect to with Tempest — privacy-respecting, no agent install, runs only with consent.
- [Terminal Output Highlighting](https://docs.gotempest.app/productivity/terminal-output-highlighting.md): Tempest can automatically color plain terminal output — errors, warnings, success states, IP addresses — even when the program printing it doesn't color anything itself. Here's what it's for and how t
- [Split Screens — Tile Multiple SSH Sessions](https://docs.gotempest.app/productivity/split-screens.md): How to split, tile, and arrange terminal panes in Tempest — keyboard shortcuts for vertical and horizontal splits on macOS, Windows, and Linux.
- [Handoff — Pick Up a Session Anywhere, or Share It](https://docs.gotempest.app/productivity/handoff-live-collaboration.md): Pick up a terminal session from your desktop on your phone, or invite a colleague into the one you are working in — live, in the same terminal, and end-to-end encrypted.
- [Tempest Push Notifications](https://docs.gotempest.app/productivity/tempest-push-notifications.md): Tempest Push sends cross-device notifications — get a push on your phone when a scheduled snippet fails. End-to-end encrypted, opt-in per device.
- [Tempest Remote — Build Your Own Integration](https://docs.gotempest.app/developer-integrations/tempest-remote-plugin-protocol.md): Build editor, terminal, tunnel and automation integrations using Tempest CLI's remote protocol v1, authentication prompts and local SSH relay.
- [Self-Hosted Tempest Server & Web Mode](https://docs.gotempest.app/deployment/self-hosted-tempest-server.md): Run your own Tempest sync server — keep encrypted vault sync inside your network and access SSH from any browser via Tempest's Web Mode.
- [Deploy the Tempest Server with Docker Compose](https://docs.gotempest.app/deployment/self-host-tempest-server-docker-compose.md): A complete, tested Docker Compose deployment of the open-source Tempest server image — Postgres, Redis, CouchDB, S3 storage, and the sign-in flow a real Tempest client uses.
- [OSS vs Enterprise Edition](https://docs.gotempest.app/deployment/oss-vs-enterprise-edition.md): What the open-source Tempest server gives you, what Enterprise Edition adds, and how to tell which one you are running.
- [Accounts, Vaults & Multiple Accounts](https://docs.gotempest.app/account-and-privacy/accounts-and-vaults.md): Add and switch Tempest Cloud or self-hosted accounts, choose personal and shared vaults, and understand sign-out versus removal from this device.
- [Vault History — Inspect & Restore Earlier Versions](https://docs.gotempest.app/account-and-privacy/vault-history.md): Inspect, compare, copy and restore retained encrypted vault revisions, with Tempest Cloud retention limits and CouchDB settings for self-hosting.
- [How Tempest Protects Your Privacy](https://docs.gotempest.app/account-and-privacy/how-tempest-protect-your-privacy.md): Tempest's current privacy boundaries: encrypted vault contents, protected local account storage, server-visible metadata, Web Mode and AI data paths.
- [End-to-End Encryption (E2EE)](https://docs.gotempest.app/account-and-privacy/end-to-end-encryption.md): How Tempest protects vault contents with account-key wrapping, independent vault keys and per-record encryption, and where those protections stop.
- [Where Tempest Stores Your Credentials](https://docs.gotempest.app/account-and-privacy/where-tempest-stores-credentials.md): Current account and vault storage: encrypted SQLite documents, sealed per-account secrets, OS-protected host master keys and fallback behavior.
- [Passwords & Recovery — Account Sign-in and Master Password](https://docs.gotempest.app/account-and-privacy/resetting-password.md): Distinguish account sign-in from the vault Master Password, change the current v3 password, and preserve remaining access when a password is lost.
- [Termius vs MobaXterm vs PuTTY vs iTerm2: SSH Clients Compared 2026](https://docs.gotempest.app/compare/tempest-vs-termius-mobaxterm-putty-iterm2.md): Termius or MobaXterm? PuTTY or iTerm2? Side-by-side 2026 comparison of the top SSH clients — platforms, price, FIDO2 & post-quantum auth, AI, E2EE sync — and how Tempest stacks up against all of them.
- [Release Notes for Tempest Desktop](https://docs.gotempest.app/release-notes/release-notes-for-tempest-desktop.md): What's new in Tempest for Windows, macOS & Linux — full desktop release notes with every version's new features, improvements, and bug fixes.
- [Release Notes for Tempest Mobile](https://docs.gotempest.app/release-notes/release-notes-for-tempest-mobile.md): What's new in Tempest for Android & iOS — full mobile release notes with every version's new features, improvements, and bug fixes.