Everything you need to know before you connect.
What makes Sudo different from other SSH apps?
Sudo combines SSH, Mosh, a full Git client, an SFTP file browser, a local code editor, Remote Code for user-installed code-server on your SSH host, and a Files.app provider in one place. The goal is one workflow: connect to a server, browse files, clone a repo, edit code, commit with an optional AI-suggested message, and push without switching apps.
Is Sudo free to use?
Yes. The free tier gives you a full SSH terminal, one saved host, one terminal session, and one Git repository — no credit card needed. Pro unlocks unlimited hosts and repos, SFTP, Git, Mosh, port forwarding, server health monitoring, App Lock, and Secure Enclave keys. Pro is available as a monthly ($3.99) or annual ($19.99) subscription, managed through your Apple ID.
What happens if I cancel Pro?
Your Pro features stay active until Apple's subscription entitlement expires. After expiry, Sudo returns to the Free limits. If you have more than one saved host or more than one Git repository, Sudo keeps your records and local repo folders but blocks host connections and repo opening until you delete down to the Free limits or restore Pro. Files.app host locations are removed while Pro is inactive.
Are my SSH keys and passwords stored securely?
Yes. Credentials live in the iOS Keychain with device-only accessibility where applicable, not in app documents or iCloud host sync. Secure Enclave keys are generated in hardware and the private key cannot be exported. App Lock adds a local PIN/biometric gate over the app; it helps slow offline guessing on a compromised device but does not replace a strong device passcode.
Does Sudo work on unreliable or mobile networks?
Sudo supports Mosh (Mobile Shell), which uses UDP and survives network changes, sleep/wake cycles, and brief dropouts without dropping your session. Enable it per host in the host settings. For reliable wired or Wi-Fi connections, standard SSH is the default.
Does Sudo support file transfer?
Yes. The built-in SFTP browser lets you navigate remote directories, preview text files and images, upload files from your device, and batch-download or delete multiple files. Each SSH host also appears as a location in the system Files.app sidebar (Pro), so you can drag files from Finder or other apps directly to your server. For Files.app browsing, connect in Sudo first to verify unknown or changed SSH host keys; the FileProvider will not silently trust them.
How do optional AI features work?
If you add your own Anthropic or OpenAI API key in Settings, Sudo sends requests directly from your device to the selected provider. Commit suggestions send staged diffs. Terminal command assistance sends your prompt and the connected host name or IP address after first-use consent. Sudo does not proxy or store these AI requests. Review AI output before using it.
Does Sudo include code-server or VS Code?
No. Remote Code connects to code-server that you install on your own SSH server. Sudo starts it on the remote loopback interface, creates a private SSH tunnel, and opens the local tunnel in a WebView. Sudo does not bundle or redistribute Visual Studio Code, code-server, Node.js, extensions, language servers, or compilers.
Can I connect through a jump host or bastion server?
Yes. Sudo supports ProxyJump: configure a jump host in the host settings and Sudo transparently tunnels through it to reach the target server. This works the same way as the standard ProxyJump option, with full key authentication support on both hops.
How do I lock the app with a PIN or Face ID?
Go to Settings → App Lock, enable it, and set a 4-digit PIN. The PIN is stored as a PBKDF2-SHA256 hash in the Keychain — the raw PIN is never saved. Once enabled, Sudo locks when it is backgrounded and requires the PIN or Face ID / Touch ID to unlock. If you forget the PIN, your device passcode can reset it.
Does Sudo sync my hosts across devices?
Host configuration (names, addresses, usernames, auth type) syncs via your personal iCloud account when iCloud Drive is enabled. SSH passwords and private keys are Keychain-only and never sync — you re-enter credentials on each device for security. Keys generated on one device cannot be transferred to another; generate a separate key on each device and add both to your server's authorized keys list.
Is there a way to run commands automatically when connecting?
Yes — use Snippets. Save frequently-used commands in Settings → Snippets, then tap the Snippets button in the terminal keyboard bar to send any of them with one tap. You can also use the Shortcuts app to automate connecting to a specific host via the Connect to Host App Intent.