Self-host WebSSH
v2.6.0Self-hosted SSH and SFTP browser workspace
- Stars
- 224
- Port
- 5000 (HTTP/WebSocket server)
ghcr.io/bifrost0x/webssh
What is WebSSH?
WebSSH is a browser-based SSH and SFTP workspace you host yourself. It gives you multiple terminal sessions in tabs or split panes, a dual-pane file manager for SFTP (and optionally SMB) with server-to-server transfers, saved connections with jump hosts, a command library, session notes, and Linux diagnostics like processes and systemd services. Each user gets isolated profiles with encrypted key storage and per-host trust. Authentication starts with local accounts and can add Passkeys, TOTP, OIDC, GitHub App, or LDAP/Active Directory. The UI works on mobile and desktop. Admin features include user management, audit logs, native backup/restore, and health checks. Deploy with Docker Compose (persistent data volume) or from source (Python 3.11+). A production overlay adds HTTPS, secure cookies, and internal-target blocking. MIT licensed, no telemetry, no hosted control plane.
Should you self-host WebSSH?
WebSSH scores 50/100 on selfhost.directory (how scoring works) and ranks #2 of 6 in SSH. It has 224 GitHub stars.
It shipped 10 stable releases in the past year. The latest, v2.6.0, came out on 23 October 2026. New versions land roughly every 9 days.
Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is MIT-licensed and written mostly in Python.
Its closest alternative on selfhost.directory is Bastillion (58/100, 3 552 stars). It scores higher overall, so compare the two before you pick. See WebSSH vs Bastillion side by side.
Features
- Audit logging and export
- Command library and sets
- Encrypted SSH key storage
- Linux diagnosticsDepends on remote system and account permissions
- Multi-session SSH terminals
- Multi-user with isolated profiles
- Native backup and restore
- Passkeys (WebAuthn)Requires WEBAUTHN_ENABLED and exact RP ID/origin configuration
- Persistent remote shells (tmux)Requires tmux on the target server
- Saved connections and jump hosts
- Session notes
- SFTP file manager
- SMB file sourcesDisabled by default; requires SMB_ENABLED=true and SMB_ALLOWED_TARGETS
- SSH host key verification
- TOTP authenticationAdmin must enable before users can enroll
WebSSH README
More in SSH
WeTTYSelf-hosted open-source web terminal with SSH access in the browser via xterm.js and websockets; runs file downloads, exposes metrics, installs from npm or Docker.
winktermSelf-hosted AI terminal where an LLM writes commands directly into your PTY. Supports SSH, file transfer, BYO LLM, Docker and desktop apps.
xpipe-webtopSelf-hosted, open-core desktop connection hub for SSH, Docker, Kubernetes, and VM connections from your local machine, with no remote agent setup needed.
BastillionSelf-hosted bastion host with browser-based SSH terminal, centralized key management, and full session recording. Supports 2FA, SAML SSO, LDAP, runs as a single Java JAR.
BifröstBifröst is a self-hosted, open-source SSH server with OIDC, Docker/Kubernetes sessions, SSH gatewaying, and verifiable recording — a drop-in OpenSSH replacement.
C-SSHCross-platform SSH client with terminal, file management, monitoring, and AI. Optional self-hostable Creation Cloud for encrypted config sync.
electerm-webelecterm-web is a self-hosted, open-source web terminal and SSH/SFTP client with AI assistance, multi-language support, cloud sync, and responsive mobile design.
ShellHubSelf-hosted, open-source SSH gateway to reach Linux and IoT devices from a web terminal or any SSH client, with session recording, audit logs and firewall rules.
skiffSkiff is a self-hosted, open-source SSH manager with searchable command memory, persistent sessions, and encrypted vault. Runs via Docker or Node.js with SQLite.
SSH & Web TerminalAdvanced SSH & Web Terminal is a self-hosted Home Assistant add-on providing secure SSH access and a web terminal with Mosh, SFTP, ZSH, and CLI tools.
TermixThis open-source, self-hosted server manager turns SSH access, remote desktop, file transfers, container control and monitoring into toggleable plugins.
UniSSHCross-platform SSH client with encrypted vaults that run locally. Optional self-hosted sync server for multi-device and team sharing. Built with Rust and Tauri.
0 comments