Comparison of SSH clients

From Wikipedia, the free encyclopedia

An SSH client is a software program which uses the secure shell protocol to connect to a remote computer. This article compares a selection of notable clients.

General

More information Name, Developer ...
Name Developer Initial release Platform Latest release License GUI TUI/CLI
Version Date
AbsoluteTelnet Celestial Software (Brian Pence) 1996 Windows 13.14 Edit this on Wikidata 2025-11-07 Proprietary Yes No
Bitvise SSH Client Bitvise Limited 2001 Windows 9.47[1] Edit this on Wikidata 2025-09-02 Proprietary Yes Yes
ConnectBot Kenny Root
Jeffrey Sharkey		 2007-11[a] Android 1.9.10[2] Edit this on Wikidata 2023-12-21 Apache-2.0 ? ?
Dropbear Matt Johnston 2003-04-06 AIX 2025.88[3] Edit this on Wikidata 2025-05-07 MIT No Yes
BSD
Cygwin
Linux
HP-UX
iOS
Maemo
macOS
Solaris
OpenSSH[b] The OpenBSD project 1999-12-01[c] AIX 10.2[4] Edit this on Wikidata 2025-10-10 BSD No Yes
Android
BSD
Cygwin
Linux
HP-UX
iOS
Maemo
OpenVMS
macOS
Solaris
Windows
z/OS
PuTTY Simon Tatham 1999-01-22 BSD 0.83[5] Edit this on Wikidata 2025-02-08 MIT Yes Yes
Linux
macOS
Solaris
Windows
SecureCRT VanDyke Software 1998–06 Linux 9.6.4[6] Edit this on Wikidata 2025-09-16 Proprietary Yes No
macOS 9.6.4[6] Edit this on Wikidata 2025-09-16
iOS 4.0.0[7] Edit this on Wikidata 2025-10-21
Windows 9.6.4[6] Edit this on Wikidata 2025-09-16
Tera Term TeraTerm Project 2004[d] Windows 5.6.0[8] Edit this on Wikidata 2026-02-28 BSD-3-Clause Yes No
TN3270 Plus SDI USA, Inc. 2006 Windows 4.0.7[9] Edit this on Wikidata 2019-02 Proprietary Yes No
WinSCP Martin Přikryl 2000 Windows 6.3.3 2024-04-16 GNU GPL Yes ?
wolfSSH wolfSSL 2016-07-20[e] BSD 1.4.21[10] Edit this on Wikidata 2025-10-20 GPL-3.0-or-later[f] No Yes
Cygwin
Linux
macOS
Solaris
Windows
ZOC Terminal EmTec, Innovative Software 1995-07-01 macOS 9.02.9[11] Edit this on Wikidata 2026-02-25 Proprietary Yes Yes
OS/2 4.15[12] Edit this on Wikidata 2004-08-26
Windows 9.02.9[11] Edit this on Wikidata 2026-02-25
Close
  1. [a]
    Based on Trilead SSH-2 for Java.
  2. [b]
    Also known as OpenBSD Secure Shell.
  3. [c]
    Based on OSSH.
  4. [d]
    Based on Tera Term Pro 2.3 (1994–1998).
  5. [e]
    Based on wolfCrypt.
  6. [f]
    Also available under a proprietary license.

Platform

The operating systems or virtual machines the SSH clients are designed to run on without emulation include several possibilities:

  • Partial indicates that while it works, the client lacks important functionality compared to versions for other OSs but may still be under development.

The list is not exhaustive, but rather reflects the most common platforms today.

More information Name, macOS ...
Name macOS Windows Cygwin BSD Linux Solaris OpenVMS z/OS AIX HP-UX iOS Android Maemo Windows Phone
AbsoluteTelnet No Yes No No No No No No No No No No No ?
Bitvise SSH Client No Yes No No No No No No No No No No No No
ConnectBot No No No No No No No No No No No Yes No No
Dropbear Yes No Yes Yes Yes Yes ? ? Yes Yes Yes[a] No Yes ?
lsh Yes No No Partial[b] Yes Yes ? ? No No No No No ?
OpenSSH[c] Included Included[d] Included Included Included[e] Yes Yes Yes Yes Yes Yes[a] Yes Yes ?
PuTTY Partial Yes ? Yes Yes Yes ? ? No No No No No Beta
SecureCRT Yes Yes No No Yes No No No No No Yes No No ?
SmartFTP No Yes No No No No No No No No No No No ?
Tera Term No Yes No No No No No No No No No No No ?
TN3270 Plus No Yes No No No No No No No No No No No ?
WinSCP No Yes No No No No No No No No Yes[a] No No ?
wolfSSH Yes Yes Yes Yes Yes Yes No No No No No No No No
ZOC Terminal Yes Yes No No No No No No No No No No No ?
Name macOS Windows Cygwin BSD Linux Solaris OpenVMS z/OS AIX HP-UX iOS Android Maemo Windows Phone
Close
  1. [a]
    Only for jailbroken devices.
  2. [b]
    lsh supports only one BSD platform officially, FreeBSD.
  3. [c]
    Also known as OpenBSD Secure Shell.
  4. [d]
    Included and enabled by default since windows 10 version 1803. Win32-OpenSSH can be installed as an optional component in the Windows versions before Windows 10 version 1803 to Windows 10 version 1709. Portable version can be download from Win32-OpenSSH for other versions.
  5. [e]
    The majority of Linux distributions have OpenSSH as an official package, but a few do not.

Technical

More information Name, SSH1 (insecure) ...
Name SSH1
(insecure)		 SSH2 Additional protocols Port forwarding and Tunneling Session
multiplexing
[a]		 Kerberos IPv6 Terminal SFTP/SCP Proxy client[b]
TELNET rlogin Port
forwarding		 SOCKS
[c]		 VPN
[d]
AbsoluteTelnet Yes Yes Yes No Yes Yes No Yes Yes Yes Yes Yes SOCKS 4, 5; HTTP
Bitvise SSH Client No Yes No No Yes Yes Yes Yes Yes Yes Yes Yes SOCKS 4, 5
Dropbear No Yes No No Yes No No No No Yes Yes Yes ?
lsh No Yes Yes No Yes Yes No Yes No Yes Yes Yes ?
OpenSSH[e] No[f] Yes No No Yes Yes Yes Yes Yes Yes Yes Yes ProxyCommand
PuTTY Yes Yes Yes Yes Yes Yes No Yes Yes[g] Yes Yes Yes[h] SOCKS 4, 5; HTTP; Telnet; Local
SecureCRT Yes Yes Yes Yes Yes Yes No Yes Yes Yes Yes Yes SOCKS 4, 5; HTTP; Telnet; Generic
SmartFTP No Yes Yes No No No No No Yes Yes Yes Yes SOCKS 4, 5; HTTP
Tera Term Yes Yes Yes No Yes No No No No Yes Yes SCP SOCKS 4, 5; HTTP; Telnet
TN3270 Plus Yes Yes Yes No No Yes No Yes No Yes Yes No SOCKS 4
WinSCP [i] No[j] Yes No No limited[k] No No No Yes Yes simple Yes SOCKS 4, 5; HTTP; Telnet; Local
wolfSSH No Yes No No Yes No No No No Yes simple Yes No
ZOC Terminal Yes Yes Yes Yes Yes Yes No No Yes Yes Yes Yes[l][m] SOCKS 4; 5; HTTP; Jumpserver
Name SSH1
(insecure)		 SSH2 Additional protocols Tunneling Session
multiplexing
[a]		 Kerberos IPv6 Terminal SFTP/SCP Proxy client[b]
TELNET rlogin Port
forwarding		 SOCKS
[c]		 VPN
[d]
Close
  1. [a]
    Accelerating OpenSSH connections with ControlMaster.
  2. [b]
    Can the SSH client connect itself through a proxy? This is distinct from offering a SOCKS proxy or port forwarding.
  3. [c]
    The ability for the SSH client to perform dynamic port forwarding by acting as a local SOCKS proxy.
  4. [d]
    The ability for the SSH client to establish a VPN, e.g. using TUN/TAP.
  5. [e]
    Also known as OpenBSD Secure Shell.
  6. [f]
    OpenSSH deleted SSH protocol version 1 support in version 7.6 (2017-10-03)
  7. [g]
    The version 0.63 supports GSSAPI. Successfully tested on Win 8 using Active Directory
  8. [h]
    The PuTTY developers provide SCP and SFTP functionality as binaries for separate download.
  9. [i]
    WinSCP bundles a number of software components including PuTTY. .
  10. [j]
    WinSCP Version history.
  11. [k]
    WinSCP connection tunneling.
  12. [l]
    SCP and SFTP through terminal.
  13. [m]
    SCP and SFTP according to ZOC features page.

Features

More information Name, Keyboard mapping ...
Name Keyboard mapping
Session tabs
ZMODEM
transfers
Find text
in buffer
Mouse input
support[a]
Unicode
support
 URL hyperlinking
Public key
authentication
Smart card
support
 Hardware encryption
FIPS 140-2
validation
Scripting
Shared
Database
Auto-reconnect
CA Certificates
AbsoluteTelnet full Yes Yes Yes Yes Yes Yes Yes Yes Yes[b] Yes Yes ? ? ?
Bitvise SSH Client ? No No No Yes Yes No Yes No ? Partial Yes No Yes No
OpenSSH[c] ? No No ? Yes[d] Yes not native[e] Yes Yes Yes Partial[f] No No ? Yes[g]
PuTTY No No[h] No No Yes Yes No[i] Yes No Yes No No No No No[j]
SecureCRT Yes Yes Yes Yes Yes Yes Yes Yes Yes No Yes Yes No ? ?
SmartFTP Partial Yes No Yes Yes Yes Yes Yes Yes AES-NI Yes No ? ? ?
Tera Term Yes Yes Yes No Yes Yes Yes Yes No No No Yes No ? ?
TN3270 Plus Yes Yes No No No No Yes Yes No No No Yes ? ? ?
wolfSSH No No No No No Yes No Yes No Yes Yes No No No Yes
ZOC Terminal full Yes Yes Yes Yes Yes Yes Yes Yes Yes[k] No Yes ? ? Yes[l]
Close
  1. [a]
    The ability to transmit mouse input to text mode applications such as Midnight Commander
  2. [b]
    AbsoluteTelnet/SSH supports hardware-backed Secure Keys via FIDO2/WebAuthn (ed25519-sk and ecdsa-sk) beginning with Version 13.14. [13]
  3. [c]
    Also known as OpenBSD Secure Shell.
  4. [d]
    Only when the terminal itself supports mouse input. Most graphical ones do, e.g. xterm.
  5. [e]
    No native URL highlighting; however most graphical consoles support URL highlighting.
  6. [f]
    Validated when running OpenSSH 2.1 on Red Hat Enterprise Linux 6.2 in FIPS mode or when running OpenSSH 1.1 on Red Hat Enterprise Linux 5 in FIPS mode
  7. [g]
    OpenSSH supports the minimal certificate format since v5.4. "OpenSSH Release Notes: 5.4". OpenBSD Project. 2010-03-08. Retrieved 2021-08-30.
  8. [h]
    PuTTY does not support tabs directly, but many wrappers are available that do.
  9. [j]
    Putty v71.0 does not support OpenSSH certificates. See Ben Harris' 2016-04-21 wish.[14][15]
  10. [k]
    ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.[16][17]
  11. [l]
    ZOC supports OpenSSSH style CA Keys, see ZOC feature list (SSH features).[18]

Authentication key algorithms

This table lists standard authentication key algorithms implemented by SSH clients. Some SSH implementations include both server and client implementations and support custom non-standard authentication algorithms not listed in this table.

More information Name, ssh-dss ...
Name ssh-dss[a] ssh-rsa RSA with SHA-2 ECDSA with SHA-2 EdDSA Security keys
rsa-sha2-256 rsa-sha2-512 ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521 ssh-ed25519 ssh-ed448 sk-ecdsa-sha2-nistp256 sk-ssh-ed25519
AbsoluteTelnet Yes Yes Yes Yes Yes Yes Yes Yes No Yes Yes
Bitvise SSH Client ? ? ? ? ? ? ? ? ?
Dropbear Yes Yes Yes No Yes Yes Yes Yes ?
lsh ? ? ? ? ? ? ? ? ?
OpenSSH[b] Yes[c] Yes Yes Yes Yes Yes Yes Yes No Yes Yes
PuTTY Yes Yes Yes Yes Yes Yes Yes Yes Yes No[d] No[d]
SecureCRT Yes Yes Yes Yes Yes Yes Yes Yes ?
SmartFTP Yes Yes Yes Yes Yes Yes Yes Yes No No No
Tera Term ? ? ? ? ? ? ? ? ?
TN3270 Plus ? ? ? ? ? ? ? ? ?
WinSCP No Yes Yes Yes Yes Yes Yes ? ?
wolfSSH No Yes Yes Yes Yes Yes Yes No No No No
ZOC Terminal[e] Yes Yes Yes Yes Yes Yes Yes Yes No Yes[f] Yes[f]
Close


  1. [a]
    ssh-dss is based on Digital Signature Algorithm which is sensitive to entropy, secrecy, and uniqueness of its random signature value.
  2. [b]
    Also known as OpenBSD Secure Shell.
  3. [c]
    By default, disabled at run-time since OpenSSH 7.0 released in 2015.
  4. [d]
    PuTTY does not support security keys / FIDO tokens, but is supported in PuTTY-CAC
  5. [e]
    ZOC' SSH is based on OpenSSH and supports the same encryptions.
  6. [f]
    ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.[16][17]

See also

References

Related Articles

Wikiwand AI