Changelog

For the full release history with detailed notes for each version, visit:

zestssh.com/changelog

The changelog on the website includes:

New features and enhancements
Bug fixes
Security updates
Platform-specific changes
Breaking changes (if any)

You can also find release notes in the app stores:

What changed in 2.2.0

Update every device you sync. 2.2.0 adds your account’s own keys to the synced data, so once one device updates and syncs, devices still on 2.1.1 stop syncing and ask to be updated. Update phones and tablets before turning on two-step sign-in too: older versions there cannot ask for the code.
Two-step sign-in: signing in can also ask for a six-digit code from an authenticator app. Set it up in Profile > Security on phones and tablets, or at zestssh.com/account/security on Windows, macOS and Linux. Ten recovery codes, shown once, turn it off if you lose your phone. Free. See Two-step Sign-in.
Signed-in devices: Profile > Devices lists every device signed in to your account, with sign out and sign out everywhere. Only each device’s platform and sign-in date are kept. Free. See Signed-in Devices.
SSH servers that ask for a one-time code (an authenticator or Duo through PAM, RSA SecurID, a YubiKey) now work: the server’s question appears in a dialog you answer, and your saved password only goes to a real password prompt. See Keyboard Interactive.
Delete account deletes at once after you sign in again, and checks everything is gone before offering to wipe the device. See Account and Purchases.
No activity logs: ZestSSH Cloud keeps no record of your syncs, sign-ins or account changes and stores no IP addresses. Every account that syncs also gets its own keys, ready for sharing with a team in 3.0.
SFTP: conflict prompts count every file in a folder upload before it starts (Conflict 1 of 4), a Windows local pane shows the real Windows attributes instead of a made-up permission string, a live transfer stops with a red stop square, and the pane footer says what its size covers. See SFTP Browser and Drag and Drop.
Fixed: Profile > Sync now overwrote edits made on your other devices (it now pulls, merges and pushes); self-hosted sync after a sync password change could leave a store no new device could join; Delete account failed for older accounts; desktop Sign out from the Tree menu stayed signed in; RSA certificate logins failed on current OpenSSH, and certificates on hardware keys could not sign through a forwarded agent. See Cloud Sync and OpenSSH Certificates.

What changed in 2.1.1

Host icons redrawn: 130 line icons in eight categories and 31 OS and platform marks, all in one style and tinted with the host’s own colour. The picker has search and category sections; every icon you already chose keeps its meaning.
tmux button beside Snippets in the session bar: one click opens tmux on that host; once attached it shows the session name and opens the sessions menu.
Transcripts: Save transcript so far writes everything on screen, scrollback included, whether or not you were recording; Record transcript from now is its own choice; Stop recording and save saves first. Every save asks where and whether to encrypt, then shows the path with a Show in folder button. See Session Transcripts.
SFTP Replace changed files compares content when a same-size file has a different modification time, so a rebuilt folder with new timestamps but the same bytes is not re-uploaded: both ends are checksummed and unchanged files are skipped, and the drop reports how many. See Drag and Drop.
Tab menu: Copy SSH command is gone, and Close others / Close all only appear when there is another tab. Account emails arrive branded, and the connection log records the negotiated key exchange.
Fixed: the pop-out SFTP editor opened as a blank grey window (it carried no translations, so the editor failed to build; pop-out windows now render in your language and print a build error instead of hiding it); stopping a transcript recording threw the recording away on desktop and mobile.

What changed in 2.1.0

Post-quantum key exchange: every SSH connection offers mlkem768x25519-sha256 (the OpenSSH 9.9+ default) and sntrup761x25519-sha512 (the OpenSSH 9.0 to 9.8 default) first. Both pair a post-quantum KEM with X25519, so a recording of a session cannot be decrypted later by a quantum computer; a server without them negotiates the classic exchange. The session details show a Post-quantum badge when a hybrid was used. See Supported KEX Algorithms.
Session logs: log every session to a plain-text file as it happens, with escape sequences stripped and an optional timestamp per line. Off by default and unencrypted on purpose. See Session Logs.
Eternal Terminal as a connection protocol: sessions that survive network drops and sleep, with scrollback intact, using the system et client. See Eternal Terminal.
Remote copy to clipboard (OSC 52): tmux, Vim and Neovim on the remote host can put text on this device’s clipboard. Off by default; reading the clipboard is always refused.
Workspaces reworked: neutral cards, an open now tag, an Add host row in the editor, All workspaces as its own list screen.
Fixed: the pop-out SFTP editor and detached terminals take input again on Windows; a cleartext key-exchange reply of a certain length was wrongly rejected when ChaCha20 or AES-GCM had been negotiated; Serial and Local Shell hosts no longer turn into SSH hosts after sync.

What changed in 2.0.0

Triggers: watch terminal output for a pattern and get a notification, a sound or a highlight. Free, synced.
Command history: every command you run, with exit code, duration and working directory when the shell reports them (OSC 133 / OSC 7). Opt-in per device, synced end-to-end encrypted (Squeezed).
tmux control mode: Ctrl+Shift+X or tmux -CC turns a tmux session into native tabs and panes. See tmux Auto-Attach.
12 languages across every screen.
What’s new and Report a bug inside the app, setup guides on Automation, Snippets and Server Monitor, desktop onboarding dialogs, sign in with email and password, a copyable Account ID, and Redeem a code.
The SFTP text editor pops out into its own window; a per-host startup command runs the moment a session opens.
Host cards: three sizes sharing one height, a 50-icon catalog or your own image per host, a dashed New Connection tile, drag to reorder in Sort: Manual, and drag terminal panes between groups.
Settings rebuilt with Appearance, Keyboard shortcuts, Security and Notifications pages; Recording mode on the REC button with Layout and Strict levels.
Fixed: Ctrl+W reaches the terminal again (closing a tab is Ctrl+Shift+W), macOS full screen and title-bar layout, the free-tier session limit no longer waits out the close delay, and the server login banner shows before the first prompt.

What changed in 1.9.7

Help panel: the ? button opens a docked panel with the most common questions first, then Report a bug, Suggest a feature and Get help, with the app version and the service status in its footer. See Getting help.
In-app bug reports and suggestions post straight to the ZestSSH Discord forums, anonymous by default, with a preview of exactly what leaves your device and screenshots redacted by default. Only six facts ride along (app version, build, platform, OS version, language, plan); never logs, hosts or settings.
Recording mode hides host names, addresses, usernames, key names, saved-password labels, group, workspace and network names, SSIDs and fingerprints across the whole app for screenshots and screen shares, with Layout and Strict levels and Ctrl+Shift+R. See Recording Mode.
Copy redacted screenshot puts a masked PNG of the window on the clipboard in one click, with a Save as PNG option, without turning recording mode on.
SFTP remembers the last folder per host and reopens where you left off, on every device when Cloud Sync is on.
The command palette shows every action’s current key binding, and keyboard shortcuts now live in Settings where they can be changed.
Tab and Shift+Tab walk every form, multi-line fields included; the file editor keeps Tab for indenting.
Windows 11 clipboard history (Win+V) now pastes into the SFTP editor and every other text field.
Testing a connection to an already trusted host no longer refuses its host key, and row hover no longer paints the theme’s text colour as a fill on Dracula, Monokai and similar themes.

What changed in 1.9.6

Folder Sync: right-click empty space in the local pane of the desktop SFTP browser and choose Sync folder to server to push only what changed, with a preview of changed, new, unchanged and server-only files before anything moves. See Folder Sync.
Verify by content: compare files by SHA-256 checksum instead of timestamp, so a file edited without its timestamp changing is still detected.
Preview only: a dry run that shows the full plan and sends nothing.
Server-only deletions are opt in: listed by name, run only after every upload succeeded, and held in the same undo window as a manual delete.
Overwrite modes renamed to say what they do: Replace changed files, Replace only when local is newer (which now reports the files it held back, with a Send them anyway action), Skip existing files, Keep both.
Identical files are skipped when you drag a folder onto a place where some of it already exists, and the conflict counter counts only files that actually differ.
Servers that refuse timestamp changes are detected and compared by size; accented filenames match across macOS and Linux; case-colliding server names are skipped with a warning instead of overwritten.