# ZestSSH Docs

> Documentation for ZestSSH 3.2.7, an SSH client for Windows, macOS, Linux, Android, iPhone and iPad with end-to-end encrypted sync and teams. Every link below is the page's raw Markdown; the same page without .md is its web page.

The feature guides walk through one feature each, in the app's exact English labels (in bold), with the engineer detail under How it works. llms-full.txt has every page in one file.

## Feature guides

- [Hosts and connecting](https://docs.zestssh.com/guides/hosts-and-connecting.md): Save a server once, connect to it with a click or a tap, and check its host key the first time.
- [Keys](https://docs.zestssh.com/guides/keys.md): Make or import an SSH key, put it on your servers, and keep passwords and agent keys in one place.
- [SFTP](https://docs.zestssh.com/guides/sftp.md): Browse a server's files, upload and download them, and edit them in place, over the SSH connection you already have.
- [Port forwarding](https://docs.zestssh.com/guides/port-forwarding.md): Open a server's web page, database or service on your own device through an SSH tunnel, or share one of yours with the server.
- [Networks and jump hosts](https://docs.zestssh.com/guides/networks-and-jump-hosts.md): Reach the same host by its home address at home and through a jump host everywhere else, without saving it twice.
- [Snippets and workflows](https://docs.zestssh.com/guides/snippets-and-workflows.md): Save a command once, run it from any session or on several hosts at once, and chain steps into a workflow.
- [Automation and API keys](https://docs.zestssh.com/guides/automation-and-api-keys.md): Run commands, snippets and workflows on your hosts from links, Tasker, MacroDroid, iOS Shortcuts and schedules, with an API key.
- [Alerts](https://docs.zestssh.com/guides/alerts.md): Get a notice, a sound or a highlight when a terminal prints an error, a finished build, a password prompt or your own text.
- [History and suggestions](https://docs.zestssh.com/guides/history-and-suggestions.md): Find and run again the commands you ran, and let ZestSSH offer the rest of a command as you type.
- [Server monitor](https://docs.zestssh.com/guides/server-monitor.md): See CPU, memory, disk, load and latency for your servers at a glance, with limits you set and a notice when one runs high.
- [Sync and backups](https://docs.zestssh.com/guides/sync-and-backups.md): Keep your hosts, keys and snippets the same on every device, encrypted on the device first, and keep a .zest backup you can restore yourself.
- [Create a team and invite people](https://docs.zestssh.com/guides/team-create-and-invite.md): Make a team, buy its seats, and invite people by email or with a one-time code or QR code, adding each one only once their keys are checked.
- [Roles and vaults](https://docs.zestssh.com/guides/team-roles-and-vaults.md): Decide who in a team opens which shared vault and what they may do there, with roles, access levels, extra vaults and owners-only vaults.
- [Team rules](https://docs.zestssh.com/guides/team-rules.md): Set what members need to join a team and keep syncing it, from two-step sign-in and company sign-in to the app lock, exports, the offline limit and approved devices.
- [Joining a team](https://docs.zestssh.com/guides/joining-a-team.md): Join a team someone invited you to, by accepting an email invitation or with a one-time code or QR code, and check each other's keys.
- [Session sharing](https://docs.zestssh.com/guides/session-sharing.md): Share a live terminal session with people in the same team vault, hand them the keyboard or let them end it, and make a vault's sessions start only with a watcher.
- [Certificates](https://docs.zestssh.com/guides/certificates.md): Sign in with OpenSSH certificates instead of copying keys to every server, from your own CA or from a team vault's certificate authority with short-lived certificates.
- [Themes](https://docs.zestssh.com/guides/themes.md): Change how the app and the terminal look, from built-in themes to your own colors and fonts.
- [Import from other apps](https://docs.zestssh.com/guides/import-from-other-apps.md): Bring your servers over from an SSH config file, PuTTY, Termius, JuiceSSH, a spreadsheet or a cloud account in a few steps.
- [Phones and tablets](https://docs.zestssh.com/guides/phones-and-tablets.md): Find your way around ZestSSH on an iPhone, iPad or Android device, type comfortably in the terminal, and keep sessions alive in the background.

## Automation API

- [API authentication](https://docs.zestssh.com/api/authentication.md): How ZestSSH automation API keys work. Creating them, passing them in links and intents, scope, expiry, rate limiting, rotation and revocation.
- [API endpoints](https://docs.zestssh.com/api/endpoints.md): Full reference for ZestSSH's automation actions and zestssh:// links. The link and Android intent form of each action, its results and its errors.
- [Automation API overview](https://docs.zestssh.com/api/overview.md): How ZestSSH's automation API works. zestssh:// links that ask first, Android intents, API keys, unattended runs, rate limiting and the run history.
- [iOS Shortcuts examples](https://docs.zestssh.com/api/shortcuts-examples.md): Using ZestSSH from the Shortcuts app and Siri on iPhone and iPad, with four example shortcuts.
- [Tasker examples](https://docs.zestssh.com/api/tasker-examples.md): Tasker tasks that run ZestSSH automation through Android intents. Five examples with filters, snippet variables, batches and webhook callbacks.

## Start

- [Changelog](https://docs.zestssh.com/changelog.md): ZestSSH release history and version notes.
- [Step-by-step guides](https://docs.zestssh.com/guides.md): One short guide per ZestSSH feature, in plain words and then in detail, with the app's exact labels.
- [ZestSSH documentation](https://docs.zestssh.com/index.md): Official documentation for ZestSSH, a cross-platform SSH client for Android, iOS, Windows, macOS, and Linux, with teams.

## Features

- [FIDO2 hardware keys](https://docs.zestssh.com/features/authentication/fido2-hardware-keys.md): Use FIDO2/security-key SSH credentials (sk- key types, e.g. YubiKey) and other agent-held keys with ZestSSH through your system's ssh-agent, 1Password or Bitwarden.
- [Keyboard-interactive authentication](https://docs.zestssh.com/features/authentication/keyboard-interactive.md): How ZestSSH answers server-driven sign-in prompts, including one-time codes, push approvals and PAM challenges.
- [OpenSSH certificates](https://docs.zestssh.com/features/authentication/openssh-certificates.md): Authenticate with OpenSSH user certificates in ZestSSH. Import a CA-signed certificate or make one in the app, attach it to a key, and connect without touching authorized_keys.
- [Password authentication](https://docs.zestssh.com/features/authentication/password.md): Authenticate to SSH servers using password credentials stored securely in the platform keychain.
- [Public key authentication](https://docs.zestssh.com/features/authentication/public-key.md): Authenticate using SSH key pairs with support for key generation, importing, passphrase-protected keys, and multiple key types.
- [SSH agent forwarding](https://docs.zestssh.com/features/authentication/ssh-agent.md): Forward your SSH keys to remote servers for onward authentication using ZestSSH's in-memory SSH agent.
- [API keys](https://docs.zestssh.com/features/automation/api-keys.md): Creating, managing, and securing automation API keys.
- [iOS Shortcuts](https://docs.zestssh.com/features/automation/ios-shortcuts.md): ZestSSH's actions for Siri and the Shortcuts app on iOS 16 and later, and zestssh:// links from Shortcuts.
- [MacroDroid integration](https://docs.zestssh.com/features/automation/macrodroid-integration.md): Trigger SSH commands from MacroDroid using the zestssh:// URL scheme.
- [Automation engine](https://docs.zestssh.com/features/automation/overview.md): Run commands, snippets, batches and workflows on your saved hosts from links, other apps and schedules, with API keys, output filters and webhooks.
- [Scheduled tasks](https://docs.zestssh.com/features/automation/scheduled-tasks.md): Run commands, snippets, or workflows on a schedule with Android WorkManager.
- [Tasker integration](https://docs.zestssh.com/features/automation/tasker-integration.md): Trigger SSH commands from Tasker by sending ZestSSH an Android intent.
- [Eternal Terminal](https://docs.zestssh.com/features/connections/eternal-terminal.md): Remote shell sessions that survive network drops, sleep and roaming, using the Eternal Terminal (et) protocol.
- [Install a key on hosts and import hosts from CSV](https://docs.zestssh.com/features/connections/install-key-and-csv-import.md): Add a key's public key to the authorized keys of many servers at once from the app, and bring a spreadsheet of hosts into ZestSSH with a preview of what each line does.
- [Local shell](https://docs.zestssh.com/features/connections/local-shell.md): Open a local terminal shell directly on your device without connecting to a remote server.
- [Mosh (mobile shell)](https://docs.zestssh.com/features/connections/mosh.md): Roaming-friendly remote shell using the Mosh protocol for persistent connections over unreliable networks.
- [Serial console (serial over SSH)](https://docs.zestssh.com/features/connections/serial.md): Access network equipment serial consoles remotely through SSH-based console servers.
- [SSH (Secure Shell)](https://docs.zestssh.com/features/connections/ssh.md): Connect to remote servers using the SSH 2.0 protocol with full cipher suite support, key exchange negotiation, and multiple authentication methods.
- [Telnet](https://docs.zestssh.com/features/connections/telnet.md): Connect to legacy devices and services using the Telnet protocol with basic option negotiation.
- [Wake-on-LAN](https://docs.zestssh.com/features/connections/wake-on-lan.md): Save a host's MAC address and send the packet that powers the machine on, from a phone or a computer.
- [Accent colors](https://docs.zestssh.com/features/customization/accent-colors.md): Recolor the app's brand colors (primary, secondary and accent) with the free Brand colors pickers on Android and iOS, or with the theme designer on a computer.
- [Custom terminal theme import](https://docs.zestssh.com/features/customization/custom-theme-import.md): Build your own terminal themes, import color schemes from other terminals, and import, export and share .zestheme files.
- [Terminal fonts](https://docs.zestssh.com/features/customization/fonts.md): Choose from 6 terminal font families, set the font size from 8 to 28, pick a cursor style (block, underline, vertical bar), and turn programming ligatures on or off.
- [Keyboard customization](https://docs.zestssh.com/features/customization/keyboard-customization.md): The 26 rebindable desktop shortcuts and how to change them, the keys that work inside a terminal, the Mac's Control and Cmd keys, the mobile key row, and how pasting works (bracketed paste, line endings, paste questions).
- [App themes](https://docs.zestssh.com/features/customization/themes.md): 17 built-in app themes and 19 terminal themes, every one free, with Follow system theme, a terminal that follows the app theme, and per-host terminal themes.
- [Drag and drop](https://docs.zestssh.com/features/file-transfer/drag-and-drop.md): Drag and drop file and folder transfers in the desktop SFTP browser.
- [Folder sync](https://docs.zestssh.com/features/file-transfer/folder-sync.md): Push a local folder to a server and send only what changed, with a preview before anything moves.
- [Parallel transfers](https://docs.zestssh.com/features/file-transfer/parallel-transfers.md): Transfer multiple files simultaneously with ZestSSH
- [Resume transfers](https://docs.zestssh.com/features/file-transfer/resume-transfers.md): Resume interrupted file transfers in ZestSSH
- [SFTP browser](https://docs.zestssh.com/features/file-transfer/sftp-browser.md): Browse and manage remote files with ZestSSH SFTP
- [Server monitor](https://docs.zestssh.com/features/monitoring/server-monitor.md): A live health view of your saved servers: CPU, memory, disk, uptime, load and latency, colored by warn and crit thresholds you can set, over SSH or from Prometheus.
- [Networks](https://docs.zestssh.com/features/networks/overview.md): Networks in ZestSSH
- [Per-host overrides](https://docs.zestssh.com/features/networks/per-host-overrides.md): What a network can change for one host: address, port, username, key, jump route and port forwards.
- [Triggers and matching](https://docs.zestssh.com/features/networks/triggers.md): How ZestSSH tells which network you are on: the trigger types, their order and forcing a network.
- [Alerts](https://docs.zestssh.com/features/notifications/alerts.md): Watch what your terminals print for a pattern, then get a notice, a sound or a highlight when a line matches.
- [Notifications](https://docs.zestssh.com/features/notifications/notification-center.md): The in-app notification center: the bell and its history, notices on screen, the system notifications a phone posts, and the settings that choose what you are told.
- [Android home screen widget](https://docs.zestssh.com/features/platform-specific/android-widgets.md): The Android home screen widget that lists up to four of your hosts and asks before it connects, and the app icon shortcuts.
- [Android background automation](https://docs.zestssh.com/features/platform-specific/android-workmanager.md): How Android runs ZestSSH scheduled tasks with WorkManager, the notification that asks you to run one, battery limits, and the foreground service that keeps sessions open.
- [iOS backgrounding](https://docs.zestssh.com/features/platform-specific/ios-backgrounding.md): Why iOS kills SSH connections after ~30 seconds, and what to do about it.
- [macOS Keychain integration](https://docs.zestssh.com/features/platform-specific/macos-keychain.md): How ZestSSH uses the macOS Keychain via FlutterSecureStorage, plus sandbox and Hardened Runtime entitlements.
- [Windows native integration](https://docs.zestssh.com/features/platform-specific/windows-native-pipes.md): URL scheme registration, background connections and the system tray, the SSH agent pipe, and the Inno Setup installer.
- [Broadcast input](https://docs.zestssh.com/features/productivity/broadcast.md): Type once and have it typed into several terminals at the same time, with a question that names every host before a risky command runs on them.
- [Environment variables](https://docs.zestssh.com/features/productivity/environment-variables.md): Per-host environment variables, exported in the shell each time you connect, with names checked and values quoted.
- [History suggestions](https://docs.zestssh.com/features/productivity/history-suggestions.md): While you type a command, the newest matching command from your history appears dimmed after the cursor, and Right arrow takes it.
- [Pane layouts](https://docs.zestssh.com/features/productivity/layouts.md): How the terminals of a tab share its room by themselves, how an arrangement you made is kept, the 19 arrangements in the Layout menu, undoing combined tabs, and the Inspector beside the panes on a computer.
- [Run on hosts](https://docs.zestssh.com/features/productivity/run-on-hosts.md): Run one command on several hosts at once without opening a terminal, and see what each host printed and how the command ended there.
- [Scrollback search](https://docs.zestssh.com/features/productivity/scrollback-search.md): Find text in a terminal's output and scrollback, step through the matches, and set how many lines each session keeps.
- [Session logs](https://docs.zestssh.com/features/productivity/session-logs.md): Write everything a session shows to a plain text file as it happens, with optional timestamps on every line.
- [Session transcripts](https://docs.zestssh.com/features/productivity/session-transcripts.md): Save what a terminal holds, record a session from a point onward, and keep the result encrypted on this device or as plain text.
- [Snippets](https://docs.zestssh.com/features/productivity/snippets.md): Saved commands with variables, lists filled from the server, and a question before risky commands run.
- [Split terminal](https://docs.zestssh.com/features/productivity/split-terminal.md): Two terminal sessions on one screen, on tablets and unfolded foldable phones.
- [tmux auto-attach](https://docs.zestssh.com/features/productivity/tmux-auto-attach.md): A host's startup command attaches to tmux each time you connect, and tmux control mode shows tmux windows and panes as ZestSSH tabs and panes.
- [Workflows](https://docs.zestssh.com/features/productivity/workflows.md): Steps that run one after another on your hosts, with what to do when a step fails, notices, and links that start them from other apps.
- [Workspaces](https://docs.zestssh.com/features/productivity/workspaces.md): Save the tabs and panes you have open, then reopen every host in them with one click.
- [Automation history](https://docs.zestssh.com/features/security/audit-logs.md): Every automation request that ran on this device, with its command, output, exit code and time, kept for the last 500 runs.
- [Biometric lock](https://docs.zestssh.com/features/security/biometric-lock.md): Unlock ZestSSH with Face ID, a fingerprint, Touch ID or Windows Hello, on top of the app lock PIN.
- [Data at rest](https://docs.zestssh.com/features/security/data-at-rest.md): Where ZestSSH keeps your hosts, keys and passwords on each device, how they are encrypted there, and what "Encrypt data at rest" and hardware-backed encryption add.
- [Encrypted backups](https://docs.zestssh.com/features/security/encrypted-backups.md): The .zest backup file, how its password encrypts it (Argon2id and AES-256-GCM), what it holds, and how a restore works.
- [Host key verification](https://docs.zestssh.com/features/security/host-key-verification.md): How ZestSSH checks each server's host key, asks before it trusts a new one, and stops the connection when a trusted key changes.
- [Key log](https://docs.zestssh.com/features/security/key-log.md): The Trust page of a team lists every signed change to its members, roles and keys as your device checked it; check it again, open an entry to see what was signed, and save it for an audit.
- [PIN lock](https://docs.zestssh.com/features/security/pin-lock.md): Lock ZestSSH behind a PIN, choose when it locks, and see how the PIN is stored and how wrong guesses are slowed down.
- [Recording mode](https://docs.zestssh.com/features/security/recording-mode.md): Mask host names, addresses, usernames, key names and fingerprints in the app's own screens before you take a screenshot or share your screen.
- [Recovery key and recovery kit](https://docs.zestssh.com/features/security/recovery-kit.md): Make the recovery key that opens your synced vault when you forget your master password, save it as a recovery kit, check that it still works, and use it on a new device.
- [Signed-in devices](https://docs.zestssh.com/features/security/signed-in-devices.md): See every device signed in to your ZestSSH account, sign one out, sign out everywhere if a device is lost, and approve a new device for sync by comparing three words.
- [Two-step sign-in](https://docs.zestssh.com/features/security/two-step-sign-in.md): Protect your ZestSSH account with a code from an authenticator app, and keep recovery codes for the day you lose it.
- [Sync encryption](https://docs.zestssh.com/features/security/zero-knowledge-encryption.md): How ZestSSH encrypts your personal space on your device before sync sends it anywhere, which keys exist, and exactly what ZestSSH Cloud or your own storage can see.
- [Import hosts from a cloud](https://docs.zestssh.com/features/sync/cloud-import.md): Read the machines of an AWS, DigitalOcean, Hetzner Cloud, Azure, Tailscale (or Headscale) or Proxmox VE account on your device and add them as hosts, once or kept in sync.
- [Cloud sync](https://docs.zestssh.com/features/sync/cloud-sync.md): End-to-end encrypted sync, free on every plan with storage you run, with Juiced as the hosted ZestSSH Cloud option. What syncs, what is encrypted and how, what the storage sees, and how changes from two devices are merged.
- [Local backups](https://docs.zestssh.com/features/sync/local-backups.md): Manual .zest export, auto-backup with retention, and platform-specific storage locations.
- [Nextcloud setup](https://docs.zestssh.com/features/sync/nextcloud.md): Step-by-step Nextcloud configuration for ZestSSH WebDAV backups.
- [Pause sync and choose when it runs](https://docs.zestssh.com/features/sync/pause-and-intervals.md): Pause sync on one device for an hour, a day or until you resume it, choose how often it runs by itself, and see how a change made on two devices is settled.
- [WebDAV backup destination](https://docs.zestssh.com/features/sync/webdav.md): Back up encrypted .zest files to any WebDAV-compatible server using raw HTTP operations.
- [Jump host](https://docs.zestssh.com/features/tunneling/jump-host.md): Configure jump host and bastion connections in ZestSSH
- [Local forwards](https://docs.zestssh.com/features/tunneling/local-forwards.md): Set up local port forwarding in ZestSSH
- [Port forwarding](https://docs.zestssh.com/features/tunneling/port-forwarding.md): SSH port forwarding overview in ZestSSH
- [Remote forwards](https://docs.zestssh.com/features/tunneling/remote-forwards.md): Set up remote port forwarding in ZestSSH
- [SOCKS5 proxy](https://docs.zestssh.com/features/tunneling/socks-proxy.md): Configure dynamic SOCKS5 proxy in ZestSSH

## Getting started

- [First connection](https://docs.zestssh.com/getting-started/first-connection.md): Create your first SSH connection in ZestSSH with password or key authentication and understand host key verification.
- [Importing from other apps](https://docs.zestssh.com/getting-started/importing-from-other-apps.md): Bring hosts into ZestSSH from an SSH config file, PuTTY, MobaXterm, SecureCRT, Termius, a CSV file, a pasted list, a shared host file or a cloud account, and import PuTTY .ppk keys.
- [Installation](https://docs.zestssh.com/getting-started/installation.md): Install ZestSSH on Windows, macOS, Linux, Android, or iOS. System requirements, download options, the first-launch checklist, and how the desktop update check works.
- [Key management](https://docs.zestssh.com/getting-started/key-management.md): Generate, import, store, and export SSH keys in ZestSSH. Covers Ed25519, RSA, ECDSA key types and passphrase handling.
- [Security basics](https://docs.zestssh.com/getting-started/security-basics.md): ZestSSH security features including PIN lock with Argon2id, biometric auth, host key verification, and encrypted backups.
- [Troubleshooting setup](https://docs.zestssh.com/getting-started/troubleshooting-setup.md): Fix common ZestSSH setup issues including failed connections, rejected keys, LAN access problems, and database errors.
- [Verify your download](https://docs.zestssh.com/getting-started/verify-your-download.md): Check the SHA-256 checksum of a ZestSSH installer on Windows, macOS, or Linux, and fix the common "no such file or directory" error.

## Walkthroughs

- [Automating SSH with Tasker](https://docs.zestssh.com/guides/automating-ssh-tasker.md): Step-by-step guide to running ZestSSH commands from Tasker with Android intents. Backups, deploys, health checks, batches, workflows and webhook callbacks.
- [Homelab setup with ZestSSH](https://docs.zestssh.com/guides/homelab-setup.md): Use ZestSSH as a mobile control plane for your homelab. Jump hosts, port forwarding, Wake-on-LAN, and local DNS.
- [Migrating from JuiceSSH](https://docs.zestssh.com/guides/migrating-from-juicessh.md): How to bring your JuiceSSH hosts and keys into ZestSSH, and where JuiceSSH's features are in ZestSSH.
- [Migrating from Termius](https://docs.zestssh.com/guides/migrating-from-termius.md): How to move your SSH setup from Termius to ZestSSH. Bring hosts and keys over with termius-export, map Termius features to ZestSSH, and note the differences.
- [Replacing PuTTY with ZestSSH](https://docs.zestssh.com/guides/replacing-putty.md): Move your PuTTY setup to ZestSSH on a computer. Import PuTTY's saved sessions and .ppk keys, and find PuTTY's features in ZestSSH.
- [Setting up jump hosts](https://docs.zestssh.com/guides/setting-up-jump-hosts.md): Configure ZestSSH to reach private servers through a WAN-exposed bastion host. Multi-hop SSH, port forwarding through jumps, and chaining.
- [tmux workflow with ZestSSH](https://docs.zestssh.com/guides/tmux-workflow.md): Persistent terminal sessions that survive disconnects. Install tmux, pair it with ZestSSH's per-connection startup commands, and never lose work again.

## Reference

- [Account and purchases](https://docs.zestssh.com/reference/account-and-purchases.md): What the ZestSSH account is, how you sign in, how one purchase carries across every platform, restoring purchases, refunds, signing out, deleting the account, and privacy requests.
- [File formats](https://docs.zestssh.com/reference/file-formats.md): File formats used by ZestSSH. Encrypted backups, shared host files, theme files, CSV host lists, PuTTY and OpenSSH keys, SSH config, and the files ZestSSH writes.
- [Getting help](https://docs.zestssh.com/reference/getting-help.md): The Help panel, writing to support, what leaves your device when you report a bug or suggest a feature, your tickets and their answers, the limits, and where a report is kept.
- [Keyboard shortcuts](https://docs.zestssh.com/reference/keyboard-shortcuts.md): Every keyboard shortcut in ZestSSH on Windows, macOS and Linux, and the keys a hardware keyboard has on a phone or tablet.
- [Plans and limits](https://docs.zestssh.com/reference/plans-and-limits.md): What ZestSSH costs, what is free, what Squeezed and Juiced add, and what the Team and Business plans for teams include.
- [SSH protocol support](https://docs.zestssh.com/reference/ssh-protocol-support.md): SSH protocol versions, relevant RFCs, and extensions supported by ZestSSH.
- [Supported ciphers](https://docs.zestssh.com/reference/supported-ciphers.md): Full list of symmetric encryption algorithms and MAC algorithms supported by ZestSSH, with notes on each.
- [Supported key exchange algorithms](https://docs.zestssh.com/reference/supported-kex-algorithms.md): Full list of key exchange (KEX) algorithms supported by ZestSSH, including the post-quantum hybrids.
- [Supported key types](https://docs.zestssh.com/reference/supported-key-types.md): SSH host key and user key types supported by ZestSSH. Generation, import, and recommendations.

## Teams

- [Access on request](https://docs.zestssh.com/teams/access-on-request.md): Ask for a vault, or more in one you already open, for a set time; someone who manages it gives it on their device, and it ends by itself.
- [Certificate authority](https://docs.zestssh.com/teams/certificate-authority.md): Give a vault its own SSH certificate authority, so members reach its hosts with short-lived certificates instead of a shared password or key.
- [Company sign-in (SSO)](https://docs.zestssh.com/teams/company-sign-in.md): Prove your company's domains, connect its SAML or OIDC identity provider to a team, and let members sign in with their work accounts.
- [Create a team and invite people](https://docs.zestssh.com/teams/create-and-invite.md): Make a team, invite people by email or with a one-time code, and add each one only once their keys are checked.
- [Directory sync (SCIM)](https://docs.zestssh.com/teams/directory-sync.md): Connect Microsoft Entra ID, Okta or any SCIM 2.0 directory to a team, so that people your directory turns off lose access at once and every other change waits for an owner or admin.
- [Event export](https://docs.zestssh.com/teams/event-export.md): Send your team's record changes and activity, each event signed, to a SIEM, log collector or webhook of your own.
- [Guests](https://docs.zestssh.com/teams/guests.md): Invite people from outside your company's proven domains into a team, always with an end date that only owners set.
- [Trash, history and activity](https://docs.zestssh.com/teams/history-and-activity.md): Bring back what was deleted from a vault, look through and put back earlier versions, and see what members do with the team's items when the owners choose to record it.
- [Team-pinned host keys](https://docs.zestssh.com/teams/host-keys.md): Pin a host's key once for everyone in a vault, so members connect without a prompt and a different key stops them.
- [Join a team with a code](https://docs.zestssh.com/teams/join-by-code.md): Invite someone with a one-time code, a link or a QR code, join a team with one, and know what the code checks and what the owner still approves.
- [Suspend, remove and leave](https://docs.zestssh.com/teams/members-leaving.md): Take someone's access to a team away for a while or for good, leave a team yourself, hand over ownership, and replace the keys a person held.
- [Teams overview](https://docs.zestssh.com/teams/overview.md): How your personal space, a team and its vaults fit together, what each role may do, what is end-to-end encrypted, and what a team needs to get started.
- [Password managers](https://docs.zestssh.com/teams/password-managers.md): Keep a key's password in 1Password, Bitwarden or KeePassXC, so that ZestSSH fetches it each time you connect and never keeps it.
- [Team recovery](https://docs.zestssh.com/teams/recovery.md): Two owners together give a member who lost every device, and with them their account keys, their access to a team back under new keys.
- [Team rules](https://docs.zestssh.com/teams/rules.md): Set what members need to join a team and keep syncing it, and know what a member who falls short sees and can still do.
- [Seats and billing](https://docs.zestssh.com/teams/seats-and-billing.md): How a team's seats are counted, what Team and Business include, and how owners pay by card, by invoice or with a seat code.
- [Team session logs](https://docs.zestssh.com/teams/session-logs.md): Log the sessions to a vault's hosts for its owners and managers, with every member told before and during each logged session.
- [Session sharing and moderation](https://docs.zestssh.com/teams/session-sharing-and-moderation.md): Share a live terminal session with people in the same vault, choose who may type or end it, and make a vault's sessions start only with a watcher.
- [Setup as code](https://docs.zestssh.com/teams/setup-as-code.md): Describe a team's vaults, roles, rules, members and hosts in a JSON file, then check it and apply it from the Team page or from a terminal.
- [Approved devices](https://docs.zestssh.com/teams/trusted-devices.md): Let members into a team only from devices the team approved, by comparing three words between the new device and one that is already approved.
- [Vaults, access and roles](https://docs.zestssh.com/teams/vaults-and-roles.md): How vaults hold a team's items, what each access level allows, and how roles, extra vaults and owners-only vaults decide who opens what.

## Troubleshooting

- [Android background connections](https://docs.zestssh.com/troubleshooting/android-background-connections.md): Keep SSH sessions alive on Android. The foreground notification, battery settings, keepalive, auto reconnect and scheduled tasks.
- [Common errors](https://docs.zestssh.com/troubleshooting/common-errors.md): Error code reference table with cause and resolution for each ZestSSH error, plus what to do when the app closes right after launch.
- [Connection issues](https://docs.zestssh.com/troubleshooting/connection-issues.md): Troubleshooting SSH connection failures. Connection refused, host unreachable, permission denied, host key verification, and firewall/NAT issues.
- [Import failures](https://docs.zestssh.com/troubleshooting/import-failures.md): What to do when a key, an SSH config file, a CSV file, PuTTY's sessions or a shared host file does not import into ZestSSH, with the messages the app shows.
- [iOS sessions disconnecting](https://docs.zestssh.com/troubleshooting/ios-sessions-disconnecting.md): Why iOS closes background SSH connections, how ZestSSH connects them again when you come back, and how tmux keeps your work.
- [Reading connection logs](https://docs.zestssh.com/troubleshooting/reading-connection-logs.md): Read a ZestSSH connection log stage by stage and find exactly where a connection failed.
- [Sync not working](https://docs.zestssh.com/troubleshooting/sync-not-working.md): Troubleshooting ZestSSH sync. Paused sync, the master password and recovery key, the 7-device limit of ZestSSH Cloud, conflicts, WebDAV and S3 errors, and backup files.
- [Windows black screen when resizing](https://docs.zestssh.com/troubleshooting/windows-black-screen-on-resize.md): ZestSSH goes black and stops responding when you resize, maximize, or fullscreen the window on Windows. Why it happens and how to fix it.

## Optional

- [Every page in one file](https://docs.zestssh.com/llms-full.txt)
- [The guides index as JSON](https://docs.zestssh.com/guides/index.json)