Windows · macOS · Linux · Android · iOS / iPadOS

Download BURSU Connection Manager

The full connection manager for SSH, WinRM, RDP, VNC, AppleRD, Telnet, Serial, Web, FTP and SFTP, with local SQLite, PostgreSQL or BURSUcloud storage.

Windows

Version 5.5.0 · released 2026-10-29

Windows installer (x64 / x86 / ARM64)

x64 / x86 / ARM64 · 193.2 MB · updated 2026-10-29

Download

SHA-256 ac15afb7e5d8e9a41870f0d1188378edf9bbff2dbdfc10cb976dc8be8d3e6b5c

Windows Package Manager (winget) built into Windows Nothing to add: winget ships with Windows 10 (1809 and later) and Windows 11. Run the command in PowerShell, Terminal or Command Prompt.

Install winget install bursucm

Update winget upgrade bursucm

Run the installer and follow the setup wizard. No separate .NET install is required. The installer and the application binaries are Authenticode-signed, so Windows verifies the publisher before anything runs.

macOS

Version 3.3.5 · released 2026-10-29

macOS — Apple Silicon (.dmg)

arm64 · 174.1 MB · updated 2026-10-29

Download

SHA-256 04720ae7de57b3c21b73de797fa5ddca4e6b2331255bf59dfac7530a9aa22185

macOS — Intel (.dmg)

x86_64 · 184.4 MB · updated 2026-10-29

Download

SHA-256 36ce572a5a097010633343cadc83008cbe3d1bef23e3e49f1e060f5bef7c7e2d

Open the .dmg and drag BURSU Connection Manager into your Applications folder. Choose Intel or Apple Silicon to match your Mac. Images are Developer ID signed and notarised by Apple.

Linux

Version 3.3.5 · released 2026-10-29

Debian / Ubuntu / Linux Mint / Pop!_OS (.deb)

x86_64 · 148.6 MB · updated 2026-10-29

Download

SHA-256 954764fcc9530f01ea0a35abeaca6e9a64363ac3524b58bf3b8ee49950c441e2

Install sudo apt install ./bursucm_3.3.5_amd64.deb

APT repository auto-updates Add the repository once — new versions arrive with your regular system updates.

1. Key sudo wget -qO /usr/share/keyrings/bursucm.gpg https://bursucm.com/repo/bursucm.gpg

2. Source

sudo tee /etc/apt/sources.list.d/bursucm.sources >/dev/null <<'EOF'
Types: deb
URIs: https://bursucm.com/repo/apt
Suites: stable
Components: main
Architectures: amd64 arm64
Signed-By: /usr/share/keyrings/bursucm.gpg
EOF

3. Install sudo apt update && sudo apt install bursucm

Arch / CachyOS / Manjaro / EndeavourOS (.pkg.tar.xz)

x86_64 · 148.6 MB · updated 2026-10-29

Download

SHA-256 65dedd7b08349593b4284530878683d7a40ccf07e1eec631a871984a1aaf71ac

Install sudo pacman -U bursucm-3.3.5-1-x86_64.pkg.tar.xz

Pacman repository auto-updates Add the repository once — new versions arrive with your regular system updates.

1. Key

curl -fsSL https://bursucm.com/repo/bursucm.asc | sudo pacman-key --add - && sudo pacman-key --lsign-key BA53B57D047CE8F14610C02A037A882DB839E2E0

2. Source echo -e '\n[bursucm]\nServer = https://bursucm.com/repo/arch' | sudo tee -a /etc/pacman.conf

3. Install sudo pacman -Syu bursucm

Fedora / RHEL / AlmaLinux / Rocky Linux (.rpm)

x86_64 · 146.5 MB · updated 2026-10-29

Download

SHA-256 3dc1f08ea7481fabb3e9c1532c6821c0e90cd22518537d93c16334b46c5a31cd

Install sudo dnf install ./bursucm-3.3.5.x86_64.rpm

DNF / YUM repository auto-updates Add the repository once — new versions arrive with your regular system updates.

1. Key sudo rpm --import https://bursucm.com/repo/bursucm.asc

2. Source

sudo tee /etc/yum.repos.d/bursucm.repo >/dev/null <<'EOF'
[bursucm]
name=BURSUcm
baseurl=https://bursucm.com/repo/rpm
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://bursucm.com/repo/bursucm.asc
metadata_expire=6h
EOF

3. Install sudo dnf install bursucm

Or open the package with your software centre.

Android

Version 2.1.1 · released 2026-10-21

Android app (APK)

Android · 86.8 MB · updated 2026-10-21

Download

SHA-256 a9ad2eaef7372941782e05697d6e49a122997c5500f0ddf798de48294b3d8d22

Also on Google Play Install from the Store and updates arrive on their own.

Download the APK, then open it on your device and allow installation from this source if prompted.

iOS / iPadOS

Version 2.1.1 · released 2026-10-21

App Store

Version 2.1.1 for iPhone and iPad. Requires iOS or iPadOS 17 or newer.

Changelogs

Supported systems

Windows 10 / 11 and Windows Server 2012–2025; WinRM targets: any Windows Server or Windows 10 / 11 with PowerShell Remoting enabled
macOS on Intel and Apple Silicon; AppleRD targets: any Mac with Screen Sharing or Remote Management enabled — High Performance needs macOS 14 or later (Apple documents it for Apple silicon; an Intel Mac streams it too)
Linux: Debian/Ubuntu (.deb), Arch/CachyOS (.pkg.tar.xz), Fedora/RHEL (.rpm)
Android 8.0 or newer
iOS and iPadOS 17 or newer

How to install

Pick your platform above and download.
Run the installer or package.
Launch BURSUcm and sign in. For a local database, use admin / admin on first run; for BURSUcloud, sign in with your account.
Pick storage: Local, PostgreSQL or BURSUcloud.

On Windows, steps 1–2 can be one command in PowerShell, Terminal or Command Prompt: winget install bursucm

What's included

SSH / WinRM / RDP / VNC / AppleRD / Telnet / Serial / Web / FTP / SFTP in tabs
Jump hosts, -L / -R / -D tunnels, tmux sessions and SSH keys from the agent or the vault
BURSUlink: computers behind NAT through a free agent — no port forwarding, no VPN
Split view, broadcast input and command snippets
SFTP file panel, remote desktop and a web browser tab with downloads
Encrypted credential vault
Import from PuTTY, WinSCP, mRemoteNG, KeePass, 1Password, Bitwarden and more
Optional AI assistant — inactive without your key, disabled entirely with one checkbox
Team access with per-folder permissions
Light / Dark themes · 8 languages on the desktop

New to BURSUcm? Take the product tour →

Changelog

Version 5.5.0

The sidebar can be made wider or narrower: drag its right edge. The width is remembered, and a double-click on the edge gives back the standard width — before, the only way to give a session more room was Full Window.
Sidebar buttons show their labels whole or not at all: instead of cut-off words such as “Fav…”, a narrow sidebar shows icons and counts, and each button names itself in a tooltip.
The text cursor in input fields is drawn in the accent colour: on the dark theme it used to be black and practically invisible — for example in the RDP “Credentials for …” window.
Settings: the sections in the left column have more room, and the chosen one is marked by colour alone, without the bar and the frame.
Georgian interface: corrected wording around the RDP engine.
Libraries updated to their latest versions, with their security fixes.

Version 5.3.9

Apple Screen Sharing is simpler: every connection uses High Performance and the Mac says itself what it is — the “Mac type” field is gone from the connection editor.
Someone else signed in at the Mac: the app offers to request their screen, and they click Allow on the Mac.
A Mac gives High Performance to one connection at a time: when it is already taken, the app says so and does not connect, instead of quietly showing a slower picture.
Intel Macs: a smooth, clean picture — the bottom of the screen no longer smears — and on every Mac the pointer takes the Mac’s own shapes (I-beam, resize arrows). Screen darkening works on Macs with Apple silicon; on an Intel Mac the app says once that its screen stays on.
High-density screens: the Mac’s interface is drawn at this screen’s scale — sharp instead of enlarged.
Apple Screen Sharing details: the Mac’s sound follows Windows’ default output device, F13–F24 reach the Mac, and a connection the Mac closes says so in your language.
Settings is laid out as sections in a left column, with search; choosing another BURSUcloud database switches to it after one question. A Quick Connect tab can be saved as a connection.
Libraries updated to their latest versions, with their security fixes: the RDP engine’s encryption library (now its long-term-support series) and the video decoders used by Apple Screen Sharing.

Version 5.3.8

Sidebar: drag folders, connections and credentials with the mouse — reorder them, move an item into or out of a folder, or nest one folder in another, in both the connections and the credentials tree. A move to another folder asks first and shows who gains or loses access; a move that is not allowed is refused at once.
Password credentials have a Comment field, like SSH-key ones. Notes brought in by a KeePass, 1Password or Bitwarden import now show there — before, they were stored but nowhere on screen, and the first save of the record erased them.
Renaming, deleting or moving a folder in a local database is instant again — before, the window froze for about 30 seconds and the folder layout was not saved.
A renamed or moved folder keeps its layout: the manual order of its items, folded folders and the General folder stay as they were — before, the items fell back to alphabetical order and General moved to the end, unfolded.
Sidebar: the up/down arrows shown on hover no longer cover the BURSUlink globe and the favourite star at the end of a connection row.
Libraries updated to their latest versions, with their security fixes: the RDP engine and its encryption library, SQLite, the video and audio decoders used by Apple Screen Sharing, and the runtime.

Version 5.3.7

Import from KeePass: a KeePass 2.x or KeePassXC database (.kdbx), a KeePass 1.x database (.kdb) — opened with its master password and key file — or a KeePass XML or CSV export becomes connections and credentials in one step. Groups become folders, the one-time code (TOTP) and notes come along, and an entry’s URL, port or title tells whether it is SSH, RDP, Telnet or VNC.
Import from 1Password and Bitwarden / Vaultwarden: a 1Password .1pux archive or CSV, and a Bitwarden JSON export — password-protected too — or CSV. Vaults and folders become folders, SSH keys become SSH-key credentials; cards, identities and secure notes are skipped and counted in the summary.
A large import into a cloud database runs straight through, with a progress window counting connections and credentials. Before, it paused every minute and showed a “No connection” banner although nothing was wrong.
Large catalogues: with thousands of connections and credentials, the sidebar, search, Expand all and the connection pickers respond at once — before, each of them took seconds at that size.
Full Window and Full Screen no longer stay on top of everything: a program you switch to — a messenger, a browser — comes in front, as with Remote Desktop Connection. Before, it opened behind the session until you left the mode.
Terminal: selecting text copies it only in the “Copy selection, paste on right-click” mode, as its name says. In the other modes, selecting a line to read it no longer replaces what you had just copied.
Sidebar: row tooltips follow the interface language, the “Connections | Credentials” switch gives each label the room it needs, and the thin scrollbar is easy to catch on a long list.

Version 5.2.5

The web tab is now a full browser: an address bar with a lock, Back, Forward and Reload, zoom, Find, Print and developer tools. Links that open a new page open in a new tab, sign-in pop-ups work, and a site asks before it uses the camera, microphone or location — with “Remember for this site”.
Downloads window: every file downloaded in a web tab, with its progress — pause, resume, cancel, open and show in folder. Opening a program, script, installer or disk image asks first.
Device sign-in stays with the device: saved credentials answer a sign-in only while the tab shows that device itself — never for a site it links to or a window such a site opens. The browser no longer offers to save passwords; they belong in the vault.
Limits for web pages: a page opens at most 10 tabs in 10 seconds and 5 pop-up windows, and pages open at most 20 tabs and 10 pop-ups in all. Before, a page could fill the screen with windows; now a notice says when tabs were not opened.
“+” on the tab strip opens a connection picker with search — on the Full Screen panel too — so another server is one click away without leaving the session.
Full Screen panel: it now spans the top of the screen with every session tab on it, comes down when the mouse rests at the middle of the top edge, and leaves the corners to the remote screen. It reacts to the mouse instead of checking it all the time, lands on the right monitor when monitors have different scales, and a pinned panel comes back after Minimize.
RDP shows the server’s own cursor shapes — resize arrows, the hand over links, the text cursor — instead of one plain arrow.

Version 5.2.3

Sharp RDP on high-resolution screens: on a monitor scaled to 125–200%, remote sessions now ask Windows for the screen’s real pixels together with its scale, so text keeps its usual size and is sharp. Before, the picture was sharp but every font was a third smaller. Both engines — BURSUrdp and Microsoft RDP.
New option “Sharp picture on Retina / HiDPI screens”: in a connection’s RDP options and in Settings → RDP, which Quick Connect follows; on by default. Turn it off for a server that ignores the scale and draws everything tiny.
Two monitors with different scales: the whole app is now sharp on both — moving the window re-renders it instead of stretching a picture. RDP and VNC sessions follow the monitor they are on, and the window reopens where you closed it.
RDP engine choice: picking a different engine in a connection’s RDP options now asks again on the next connect, with that engine already selected; the question always preselects the connection’s own engine, and its checkbox says what it does — “Remember for this connection”.
Folder layout across devices: folds and folder order changed on two devices of one account are now merged — the “Folder layout” conflict card no longer appears, and old ones clear themselves. Windows takes the shared layout after a sync instead of writing its own older view back, and a change made just as the connection drops is kept and sent later.
BURSUlink: when the tunnel closes while the server certificate is being checked, RDP and WinRM now say so instead of asking “connect anyway?”, and the connection library is updated.

Version 5.2.2

FTP and web rows through BURSUlink: with agent 1.0.0, FTP and FTPS panels and web tabs now go through the agent — before, these rows could not use one. Every FTP data channel takes the tunnel, and a web tab gets a browser profile of its own pointed at the agent, pop-ups included; when the agent is the way to everything, local addresses and WebRTC no longer slip past it.
AppleRD High Performance through BURSUlink: a Mac row set to High Performance now gets it through agent 1.0.0, also when the agent runs on the Mac itself. When the agent refuses — busy, or High Performance over a relay switched off — the session takes the standard mode and says why once per agent instead of on every connect, and a session the agent ends no longer just freezes: the card says why and the automatic reconnect takes over.
Agent on the target computer: a connection through an agent running on that same computer now shows the agent’s name where the stored host used to be — in the tree, on Home, in the details and on the tab — and the search finds rows by agent name.
Waking from sleep: the red “offline” stripe no longer flashes for the few seconds Wi‑Fi takes to come back; a lost network is checked once more 15 seconds later before the banner turns red. Anything you save meanwhile is still queued as before.
Get MAC address through an agent: when the editor’s agent is not the one the saved connection names — a new or copied connection, or another agent picked — the editor now says to save first instead of failing with “Not allowed.”
Tabs through an agent: Reconnect and Duplicate keep a web, FTP, SFTP or AppleRD tab in its place, a double-click opens one tab, and a web tab reopened after its agent restarted no longer stays blank for ten seconds.
Bundled libraries: the JPEG decoder VNC uses is updated to libjpeg-turbo 3.2.0 (it was 2.0.6), and every library in the program folder now shows its version and copyright under Properties → Details.

Version 5.2.1

AppleRD typing: Shift+letter used to reach the Mac as a small letter, and a dead key such as ´ or ^ typed its plain key instead of “é” or “ê”. The Mac now gets the character your keyboard layout produces — capitals, Caps Lock, symbols and accents — while shortcuts still go as the plain key, so a copy shortcut is the same on every layout.
AppleRD and the Win key: Win+C, Win+V, Win+Tab and other Win combinations used to be taken by Windows and never reached the Mac; while the Mac’s picture has the keyboard they now arrive as Command combinations, and Win pressed alone no longer opens the Start menu. Win+L still locks this computer.
AppleRD keyboard: letting go of both Shift keys at once no longer leaves one of them held down on the Mac.
WinRM through BURSUlink: closing a tab now deletes the remote shell before the tunnel closes — before, the shell stayed open on the server until its idle timeout.
BURSUlink after signing out or switching account: each account now gets its own tunnels, and the previous account’s tunnels and pending agent lookups are closed instead of staying open under the next one.
RDP through a BURSUlink tunnel or an SSH port forward: when the server redirects the session elsewhere, it now stays on the tunnel — or stops with an explanation — instead of dialling the other address directly, and a chain of redirects ends after four hops.
SSH options: a jump host that goes through a BURSUlink agent used to show as a bare “ID” number; it is now shown by name, and the window says why a connection through it is refused.

Version 5.2.0

BURSUlink — reach a computer behind NAT. A connection can now go “Through BURSUlink”: choose the agent in the connection window, under Host and Port, and SSH, SFTP, Telnet, RDP, VNC, WinRM and AppleRD open to a machine with no public address — no port forwarding, no VPN. Host keys and certificates are still checked against the real host name, and a relayed connection carries a mark in the tree.
BURSUlink messages: an offline agent says so with its last contact time, a refused pass shows the portal’s own words, a removed agent is named as such, and when the portal asks for a two-factor code the app offers to sign in again from wherever the connection was started.
Eight interface languages: German, Spanish, Portuguese (Brazil) and Portuguese (Portugal) join English, Russian, Ukrainian and Georgian — one list for Settings, the setup window and the AI assistant’s replies.
RD Gateway with a port: “gateway:8443” is now dialled on that port instead of being looked up whole on 443 and refused, and with the Microsoft engine the gateway settings reach the session together with the connection’s credentials — before, they were silently dropped and the session dialled the target directly.
Full screen: the toolbar rises only after the mouse rests on the top edge for a moment, and the remote screen’s tab strip, minimise and close buttons take clicks again — the window frame used to swallow them.
RDP scrolling: a precision touchpad and a free-spinning wheel send tiny deltas, and each one became a whole-notch scroll on the server, so two-finger scrolling raced and jerked; the deltas are now summed into whole notches, as mstsc sends them, and sideways scrolling works too.

Version 5.1.5

Two-factor sign-in: when your BURSUcloud account has two-factor authentication on, the app asks for the 6-digit code from your authenticator app — or a recovery code — in its own window right after the password, with no trip to the browser. A wrong or expired code says so and lets you type the next one; after too many attempts the window asks you to wait a few minutes.
Offline sign-in respects two-factor authentication: an account that has it on is no longer opened offline by its password alone. A password mistyped just before signing in with Google, Microsoft, Apple or GitHub is no longer remembered as your offline password, and signing in again in the first-run setup keeps offline sign-in working.
Enter signs in: in the BURSUcloud email and password fields of the sign-in window and of the first-run setup, Enter now presses Sign in instead of waiting for a mouse click. These windows also no longer draw a dotted frame around a list or an option you clicked.
First-run setup: pressing Exit after signing in to BURSUcloud now brings the setup back at the next start. Before, the next start opened a new local database and offered to sign in as admin/admin.
Apple Screen Sharing on an Intel Mac: High Performance no longer drops a second after connecting, and the screen-mode choice (goes dark / stays on) is greyed, with the reason under it — an Intel Mac keeps its screen on.
Trusted hosts in Settings: “Forget all trusted SSH host keys” no longer removes RD Gateway certificates, and “Forget all trusted RDP certificates” now removes them too.

All versions →

Version 3.3.5

The sidebar can be made wider or narrower: drag its right edge. The width is remembered, and a double-click on the edge gives back the standard width — before, the only way to give a session more room was Full Window.
Sidebar buttons show their labels whole or not at all: instead of cut-off words such as “Fav…”, a narrow sidebar shows icons and counts, and each button names itself in a tooltip.
Settings: the sections in the left column have more room, and the chosen one is marked by colour alone, without the bar and the frame.
The app no longer offers to send a report at the next start after its graphics process restarted on its own — a restart the window never showed.
Georgian interface: corrected wording around the RDP engine.
Libraries updated to their latest versions, with their security fixes.

Version 3.3.3

Apple Screen Sharing is simpler: every connection uses High Performance and the Mac says itself what it is — the “Mac type” field is gone from the connection editor.
Someone else signed in at the Mac: the app offers to request their screen, and they click Allow on the Mac.
A Mac gives High Performance to one connection at a time: when it is already taken, the app says so and does not connect, instead of quietly showing a slower picture.
Intel Macs: a smooth, clean picture — the bottom of the screen no longer smears — and on every Mac the pointer takes the Mac’s own shapes (I-beam, resize arrows). Screen darkening works on Macs with Apple silicon; on an Intel Mac the app says once that its screen stays on.
High-density screens: the Mac’s interface is drawn at this screen’s scale — sharp instead of enlarged.
Apple Screen Sharing details: the Mac’s sound plays without stutter, the picture is drawn pixel for pixel without blur, F13–F24 reach the Mac, and a connection the Mac closes says so in your language.
Settings is laid out as sections in a left column, with search; choosing another BURSUcloud database switches to it after one question. A Quick Connect tab can be saved as a connection.
Libraries updated to their latest versions, with their security fixes: the RDP engine’s encryption library (long-term-support series), the video decoders used by Apple Screen Sharing, the alternative IronRDP engine and the app shell.

Version 3.3.2

Sidebar: drag folders, connections and credentials with the mouse — reorder them, move an item into or out of a folder, or nest one folder in another, in both the connections and the credentials tree. A move to another folder asks first and shows who gains or loses access; a move that is not allowed is refused at once.
Password credentials have a Comment field, like SSH-key ones. Notes brought in by a KeePass, 1Password or Bitwarden import now show there — before, they were stored but nowhere on screen, and the first save of the record erased them.
Renaming or moving a folder onto a name that already exists is refused — before, in a local or direct PostgreSQL database, the two folders were silently merged into one.
Sidebar: the up/down arrows shown on hover no longer cover the BURSUlink globe and the favourite star at the end of a connection row.
Libraries updated to their latest versions, with their security fixes: the RDP engine and its encryption library, SQLite, the video and audio decoders used by Apple Screen Sharing, and the runtime.

Version 3.3.1

Import from KeePass: a KeePass 2.x or KeePassXC database (.kdbx), a KeePass 1.x database (.kdb) — opened with its master password and key file — or a KeePass XML or CSV export becomes connections and credentials in one step. Groups become folders, the one-time code (TOTP) and notes come along, and an entry’s URL, port or title tells whether it is SSH, RDP, Telnet or VNC.
Import from 1Password and Bitwarden / Vaultwarden: a 1Password .1pux archive or CSV, and a Bitwarden JSON export — password-protected too — or CSV. Vaults and folders become folders, SSH keys become SSH-key credentials; cards, identities and secure notes are skipped and counted in the summary.
A large import into a cloud database runs straight through, with a progress window counting connections and credentials. Before, it paused every minute and showed a “No connection” banner although nothing was wrong.
Large catalogues: with thousands of connections and credentials, the sidebar, search, Expand all and the connection pickers respond at once — before, each of them took seconds at that size.
“Open” in the file panel: changes saved in the application that opened the file go back to the server — before, they stayed in a temporary copy. A download that was cancelled or failed is no longer opened.
Terminal: a link in the output whose address the server hides (OSC 8) no longer offers to open a site the server chose.
Sidebar: the “Connections | Credentials” switch gives each label the room it needs, so a long name is no longer cut off.

Version 3.3.0

The web tab is now a full browser: an address bar with a lock, Back, Forward and Reload, zoom, Find, Print and developer tools. Links that open a new page open in a new tab, sign-in pop-ups work, and a site asks before it uses the camera, microphone or location — with “Remember for this site”.
Downloads panel: every file downloaded in a web tab, with its progress — pause, resume, cancel, open and show in folder. A program, script, installer or disk image is shown in its folder instead of being run.
Limits for web pages: a page opens at most 10 tabs in 10 seconds and 5 pop-up windows, and pages open at most 20 tabs and 10 pop-ups in all. Before, a page could fill the screen with windows; now a notice says when tabs were not opened.
“+” on the tab strip opens a connection picker with search — on the Full Screen panel too — so another server is one click away without leaving the session.
Full Screen panel: it now spans the top of the screen with every session tab on it and comes down when the mouse rests at the middle of the top edge, leaving the corners to the remote screen. On a Mac its tabs and buttons sit right in the bar macOS slides down and move with it as one piece.
RDP shows the server’s own cursor shapes — resize arrows, the hand over links, the text cursor — instead of one plain arrow.

Version 3.2.7

Sharp RDP on Retina and HiDPI screens: remote sessions now ask the server for the screen’s real pixels together with its scale, so text keeps its usual size and is sharp — before, a Retina Mac showed a half-resolution desktop stretched twice over, readable but blurry. Both engines, BURSUrdp and IronRDP, and it follows the window when you drag it to another screen.
New option “Sharp picture on Retina / HiDPI screens”: in a connection’s RDP options and in Settings → RDP, which Quick Connect follows; on by default. Turn it off for a server that ignores the scale and draws everything tiny.
RDP engine choice: picking a different engine in a connection’s RDP options now asks again on the next connect, with that engine already selected; the question always preselects the connection’s own engine, and closing it keeps that engine.
Folder layout across devices: folds and folder order changed on two devices of one account are now merged — the “Folder layout” conflict card no longer appears, and old ones clear themselves. A change made just as the connection drops is kept and sent later.

Version 3.2.5

Connections through BURSUlink work again on Linux and macOS: in 3.2.3 every RDP and SSH connection through an agent was refused (“Certificate not trusted”, “Connection reset by peer”).
When the BURSUlink tunnel closes a connection before the server answers, the RDP and WinRM tabs now say exactly that instead of a warning about an untrusted certificate.
Sync conflicts: the “Server” card of a folder-layout conflict no longer stays empty — it says the server’s version is on its way and fills in after the next sync, or that nothing is saved on the server.

Version 3.2.3

Mac sleep: after the Mac woke up, every connection answered “Not signed in yet” and Settings could not be saved until the app was restarted. The window now takes its session back — you stay signed in, every tab keeps running, and nothing sent while the lid was closed is lost: a file transfer, a pending dialog and a VNC picture included.
Waking from sleep: the red “offline” stripe no longer flashes for the few seconds Wi‑Fi takes to come back; a lost network is checked once more 15 seconds later before the banner turns red. Anything you save meanwhile is still queued as before.
FTP and web rows through BURSUlink: with agent 1.0.0, FTP and FTPS panels and web tabs now go through the agent — before, these rows could not use one. Every FTP data channel takes the tunnel, and a web tab gets a browser profile of its own pointed at the agent, pop-ups included; when the agent is the way to everything, local addresses and WebRTC no longer slip past it.
AppleRD High Performance through BURSUlink: a Mac row set to High Performance now gets it through agent 1.0.0, also when the agent runs on the Mac itself. When the agent refuses, the session takes the standard mode and says why, and a session the agent ends no longer just freezes: the card says why and the automatic reconnect takes over.
Agent on the target computer: a connection through an agent running on that same computer now shows the agent’s name where the stored host used to be — in the tree, on Home, in the details and on the tab — and the search finds rows by agent name.
Get MAC address through an agent: when the editor’s agent is not the one the saved connection names — a new or copied connection, or another agent picked — the editor now says to save first instead of failing with “Not allowed.”
Web tabs through an agent: after the agent restarted, an older tab of the same connection lost its page as soon as the newest one closed; all of the connection’s tabs now move onto the new tunnel, pop-ups open inside it, and Reset asks the agent for a fresh one.
Bundled libraries: the JPEG decoder VNC uses is updated to libjpeg-turbo 3.2.0 (it was 2.1), and the build for Apple Silicon Macs now carries it too — before, it shipped without one.

Version 3.2.2

Spanish (Latin America) on Linux: on systems set to es-MX, es-AR or another Latin-American Spanish locale, the texts of the browser engine itself — spell check, form messages and context menus — fell back to English because the package left out that language pack; they now appear in Spanish.
BURSUlink agents in the connection window: choosing a row used to start its own lookup of the agent list every time, and a lookup could keep running after you signed out or switched database. One shared lookup now serves every row, and it stops when you sign out or switch database.
Libraries updated to their latest versions, including the AI assistant’s connections to Anthropic, Google and OpenAI.

Version 3.2.1

BURSUlink — reach a computer behind NAT, now on Linux and macOS too. Choose the agent in the connection window, above Host and Port, and SSH, SFTP, Telnet, RDP, VNC, WinRM and AppleRD open to a machine with no public address — no port forwarding, no VPN. Host keys and certificates are still checked against the real host name, and a relayed connection carries a mark in the tree.
BURSUlink messages: an offline agent says so with its last contact time, a refused pass shows the portal’s own words, a removed agent is named as such, and when the portal asks for a two-factor code the app offers to sign in again from wherever the connection was started.
Eight interface languages: German, Spanish, Portuguese (Brazil) and Portuguese (Portugal) join English, Russian, Ukrainian and Georgian — one list for Settings, the setup window and the AI assistant’s replies.
On first start the app opens in your system’s language when it is one of the eight and keeps it after you sign in, and messages from the connection engine follow the interface language from the first launch — before, they stayed in English until Settings was saved.
RD Gateway with a port: “gateway:8443” is now dialled on that port instead of being looked up whole on 443 and refused.
RDP scrolling: a touchpad sends tiny steps, and each one became a whole-notch scroll on the server, so two-finger scrolling raced and jerked; the steps are now summed into whole notches, as mstsc sends them, each click of a mouse wheel stays one notch, and sideways scrolling goes the right way.
WinRM: closing a tab — or quitting the app — deletes the remote shell before the connection goes; before, the shell could stay open on the server until its idle timeout.

All versions →

Version 3.3.5

The sidebar can be made wider or narrower: drag its right edge. The width is remembered, and a double-click on the edge gives back the standard width — before, the only way to give a session more room was Full Window.
Sidebar buttons show their labels whole or not at all: instead of cut-off words such as “Fav…”, a narrow sidebar shows icons and counts, and each button names itself in a tooltip.
Settings: the sections in the left column have more room, and the chosen one is marked by colour alone, without the bar and the frame.
The app no longer offers to send a report at the next start after its graphics process restarted on its own — a restart the window never showed.
Georgian interface: corrected wording around the RDP engine.
Libraries updated to their latest versions, with their security fixes.

Version 3.3.3

Apple Screen Sharing is simpler: every connection uses High Performance and the Mac says itself what it is — the “Mac type” field is gone from the connection editor.
Someone else signed in at the Mac: the app offers to request their screen, and they click Allow on the Mac.
A Mac gives High Performance to one connection at a time: when it is already taken, the app says so and does not connect, instead of quietly showing a slower picture.
Intel Macs: a smooth, clean picture — the bottom of the screen no longer smears — and on every Mac the pointer takes the Mac’s own shapes (I-beam, resize arrows). Screen darkening works on Macs with Apple silicon; on an Intel Mac the app says once that its screen stays on.
High-density screens: the Mac’s interface is drawn at this screen’s scale — sharp instead of enlarged.
Apple Screen Sharing details: the Mac’s sound plays without stutter, the picture is drawn pixel for pixel without blur, F13–F24 reach the Mac, and a connection the Mac closes says so in your language.
Settings is laid out as sections in a left column, with search; choosing another BURSUcloud database switches to it after one question. A Quick Connect tab can be saved as a connection.
Libraries updated to their latest versions, with their security fixes: the RDP engine’s encryption library (long-term-support series), the video decoders used by Apple Screen Sharing, the alternative IronRDP engine and the app shell.

Version 3.3.2

Sidebar: drag folders, connections and credentials with the mouse — reorder them, move an item into or out of a folder, or nest one folder in another, in both the connections and the credentials tree. A move to another folder asks first and shows who gains or loses access; a move that is not allowed is refused at once.
Password credentials have a Comment field, like SSH-key ones. Notes brought in by a KeePass, 1Password or Bitwarden import now show there — before, they were stored but nowhere on screen, and the first save of the record erased them.
Renaming or moving a folder onto a name that already exists is refused — before, in a local or direct PostgreSQL database, the two folders were silently merged into one.
Sidebar: the up/down arrows shown on hover no longer cover the BURSUlink globe and the favourite star at the end of a connection row.
Libraries updated to their latest versions, with their security fixes: the RDP engine and its encryption library, SQLite, the video and audio decoders used by Apple Screen Sharing, and the runtime.

Version 3.3.1

Import from KeePass: a KeePass 2.x or KeePassXC database (.kdbx), a KeePass 1.x database (.kdb) — opened with its master password and key file — or a KeePass XML or CSV export becomes connections and credentials in one step. Groups become folders, the one-time code (TOTP) and notes come along, and an entry’s URL, port or title tells whether it is SSH, RDP, Telnet or VNC.
Import from 1Password and Bitwarden / Vaultwarden: a 1Password .1pux archive or CSV, and a Bitwarden JSON export — password-protected too — or CSV. Vaults and folders become folders, SSH keys become SSH-key credentials; cards, identities and secure notes are skipped and counted in the summary.
A large import into a cloud database runs straight through, with a progress window counting connections and credentials. Before, it paused every minute and showed a “No connection” banner although nothing was wrong.
Large catalogues: with thousands of connections and credentials, the sidebar, search, Expand all and the connection pickers respond at once — before, each of them took seconds at that size.
“Open” in the file panel: changes saved in the application that opened the file go back to the server — before, they stayed in a temporary copy. A download that was cancelled or failed is no longer opened.
Terminal: a link in the output whose address the server hides (OSC 8) no longer offers to open a site the server chose.
Sidebar: the “Connections | Credentials” switch gives each label the room it needs, so a long name is no longer cut off.

Version 3.3.0

The web tab is now a full browser: an address bar with a lock, Back, Forward and Reload, zoom, Find, Print and developer tools. Links that open a new page open in a new tab, sign-in pop-ups work, and a site asks before it uses the camera, microphone or location — with “Remember for this site”.
Downloads panel: every file downloaded in a web tab, with its progress — pause, resume, cancel, open and show in folder. A program, script, installer or disk image is shown in its folder instead of being run.
Limits for web pages: a page opens at most 10 tabs in 10 seconds and 5 pop-up windows, and pages open at most 20 tabs and 10 pop-ups in all. Before, a page could fill the screen with windows; now a notice says when tabs were not opened.
“+” on the tab strip opens a connection picker with search — on the Full Screen panel too — so another server is one click away without leaving the session.
Full Screen panel: it now spans the top of the screen with every session tab on it and comes down when the mouse rests at the middle of the top edge, leaving the corners to the remote screen. On a Mac its tabs and buttons sit right in the bar macOS slides down and move with it as one piece.
RDP shows the server’s own cursor shapes — resize arrows, the hand over links, the text cursor — instead of one plain arrow.

Version 3.2.7

Sharp RDP on Retina and HiDPI screens: remote sessions now ask the server for the screen’s real pixels together with its scale, so text keeps its usual size and is sharp — before, a Retina Mac showed a half-resolution desktop stretched twice over, readable but blurry. Both engines, BURSUrdp and IronRDP, and it follows the window when you drag it to another screen.
New option “Sharp picture on Retina / HiDPI screens”: in a connection’s RDP options and in Settings → RDP, which Quick Connect follows; on by default. Turn it off for a server that ignores the scale and draws everything tiny.
RDP engine choice: picking a different engine in a connection’s RDP options now asks again on the next connect, with that engine already selected; the question always preselects the connection’s own engine, and closing it keeps that engine.
Folder layout across devices: folds and folder order changed on two devices of one account are now merged — the “Folder layout” conflict card no longer appears, and old ones clear themselves. A change made just as the connection drops is kept and sent later.

Version 3.2.5

Connections through BURSUlink work again on Linux and macOS: in 3.2.3 every RDP and SSH connection through an agent was refused (“Certificate not trusted”, “Connection reset by peer”).
When the BURSUlink tunnel closes a connection before the server answers, the RDP and WinRM tabs now say exactly that instead of a warning about an untrusted certificate.
Sync conflicts: the “Server” card of a folder-layout conflict no longer stays empty — it says the server’s version is on its way and fills in after the next sync, or that nothing is saved on the server.

Version 3.2.3

Mac sleep: after the Mac woke up, every connection answered “Not signed in yet” and Settings could not be saved until the app was restarted. The window now takes its session back — you stay signed in, every tab keeps running, and nothing sent while the lid was closed is lost: a file transfer, a pending dialog and a VNC picture included.
Waking from sleep: the red “offline” stripe no longer flashes for the few seconds Wi‑Fi takes to come back; a lost network is checked once more 15 seconds later before the banner turns red. Anything you save meanwhile is still queued as before.
FTP and web rows through BURSUlink: with agent 1.0.0, FTP and FTPS panels and web tabs now go through the agent — before, these rows could not use one. Every FTP data channel takes the tunnel, and a web tab gets a browser profile of its own pointed at the agent, pop-ups included; when the agent is the way to everything, local addresses and WebRTC no longer slip past it.
AppleRD High Performance through BURSUlink: a Mac row set to High Performance now gets it through agent 1.0.0, also when the agent runs on the Mac itself. When the agent refuses, the session takes the standard mode and says why, and a session the agent ends no longer just freezes: the card says why and the automatic reconnect takes over.
Agent on the target computer: a connection through an agent running on that same computer now shows the agent’s name where the stored host used to be — in the tree, on Home, in the details and on the tab — and the search finds rows by agent name.
Get MAC address through an agent: when the editor’s agent is not the one the saved connection names — a new or copied connection, or another agent picked — the editor now says to save first instead of failing with “Not allowed.”
Web tabs through an agent: after the agent restarted, an older tab of the same connection lost its page as soon as the newest one closed; all of the connection’s tabs now move onto the new tunnel, pop-ups open inside it, and Reset asks the agent for a fresh one.
Bundled libraries: the JPEG decoder VNC uses is updated to libjpeg-turbo 3.2.0 (it was 2.1), and the build for Apple Silicon Macs now carries it too — before, it shipped without one.

Version 3.2.2

Spanish (Latin America) on Linux: on systems set to es-MX, es-AR or another Latin-American Spanish locale, the texts of the browser engine itself — spell check, form messages and context menus — fell back to English because the package left out that language pack; they now appear in Spanish.
BURSUlink agents in the connection window: choosing a row used to start its own lookup of the agent list every time, and a lookup could keep running after you signed out or switched database. One shared lookup now serves every row, and it stops when you sign out or switch database.
Libraries updated to their latest versions, including the AI assistant’s connections to Anthropic, Google and OpenAI.

Version 3.2.1

BURSUlink — reach a computer behind NAT, now on Linux and macOS too. Choose the agent in the connection window, above Host and Port, and SSH, SFTP, Telnet, RDP, VNC, WinRM and AppleRD open to a machine with no public address — no port forwarding, no VPN. Host keys and certificates are still checked against the real host name, and a relayed connection carries a mark in the tree.
BURSUlink messages: an offline agent says so with its last contact time, a refused pass shows the portal’s own words, a removed agent is named as such, and when the portal asks for a two-factor code the app offers to sign in again from wherever the connection was started.
Eight interface languages: German, Spanish, Portuguese (Brazil) and Portuguese (Portugal) join English, Russian, Ukrainian and Georgian — one list for Settings, the setup window and the AI assistant’s replies.
On first start the app opens in your system’s language when it is one of the eight and keeps it after you sign in, and messages from the connection engine follow the interface language from the first launch — before, they stayed in English until Settings was saved.
RD Gateway with a port: “gateway:8443” is now dialled on that port instead of being looked up whole on 443 and refused.
RDP scrolling: a touchpad sends tiny steps, and each one became a whole-notch scroll on the server, so two-finger scrolling raced and jerked; the steps are now summed into whole notches, as mstsc sends them, each click of a mouse wheel stays one notch, and sideways scrolling goes the right way.
WinRM: closing a tab — or quitting the app — deletes the remote shell before the connection goes; before, the shell could stay open on the server until its idle timeout.

All versions →

Version 2.1.1

Deleting a connection takes you straight back to the list.
Updated RDP engine.
Stability and performance improvements.

Version 2.1.0

BURSUlink: SSH, Telnet, RDP, VNC, AppleRD, SFTP and FTP reach a computer behind a router through its BURSUlink agent — no open ports, no VPN. The connection editor has a “BURSUlink connection” row, and such rows carry a mark in the catalog.
Remote Desktop: text copied on the computer is on the phone’s clipboard, and “Paste into session” sends the phone’s text the other way. The computer’s sound plays on the phone, the pointer takes the server’s own shapes, and the desktop is sharp on high-density screens. Clipboard, sound and sharpness are set per connection.
Sessions reconnect by themselves: when the network drops, SSH, Telnet, SFTP, FTP, RDP, VNC and AppleRD sessions are redialled in place — before, the session simply ended. A red chip shows which one is reconnecting; SFTP and FTP come back to the folder you were in.
Four more languages: German, Spanish and Portuguese for Portugal and for Brazil.
Catalog: Move up / Move down in a row’s long-press menu, and a comment field on password records, as on the desktop.
Libraries updated to their latest versions.

Version 2.0.1

Two-factor sign-in: when your BURSUcloud account has two-factor authentication on, the app asks for the 6-digit code from your authenticator, or a recovery code, right after the password — before, such an account could not sign in on the phone by password at all.
Mac via AppleRD: a fast two-finger flick no longer makes the next scroll jump.
Clearer sign-in messages: too many attempts are explained plainly, and a code you are typing is kept when the phone turns.

Version 2.0.0

Open a Mac from Android. AppleRD connections start here now instead of saying they open on the desktop: on an Apple silicon Mac with High Performance the video is decoded in hardware and the Mac's sound plays here, and the Mac's own screen either goes dark for a private session or stays on as a mirror. On an Intel Mac that choice is greyed, with the reason under it — that Mac keeps its screen on. A plain VNC connection can now sign in to a Mac with its user name and password, too.
RDP through an RD Gateway. The gateway's certificate is checked the way the server's is, and a changed one is asked about, never accepted silently. The desktop's RDP domain and SSH keep-alive are honoured, and file transfers and RDP or VNC sessions keep running when the app goes to the background — before, only a terminal did.
The terminal catches up with the desktop: its colour schemes and font size; F1–F12, Home/End, PgUp/PgDn and Alt on the key row; Find in the output; session logs recorded as the desktop records them, with Share; the database's snippets — sent with a tap, and added or edited here, offline too; and a per-connection “Send LANG=en_US.UTF-8”.
The catalog works as on the desktop: Favorites and Recent as flat lists by name, tags, quick connect and Copy As; folders shown even when empty, with new subfolder, rename, move, delete and the folder's default credential; Wake on LAN from a row's menu; and “Last used by …” on the connection card.
Files: select several and download, move or delete them at once; download or delete a whole folder; view and edit a text file on the server; sort by name, size or date, and show or hide dot-files. FTP times were shifted by the phone's time zone — they are read as UTC now, as servers send them.
Credentials and keys: TOTP codes from a record's two-factor secret, a password generator, a private key imported from a file (a file that is not a key is refused), Ed25519 keys and host keys, and trusted hosts and certificates forgotten per protocol in Settings.
Your account and problem reports: delete the account from inside the app — it takes this device's session logs and crash records with it — and report a problem from the app; a crash is offered for a report at the next start, and nothing is sent without your tap.
Fixes found on real devices: a server with only an RSA host key connects again after the first time; Google and Microsoft sign-in finds the browser on Android 11 and later; the master-password field stays above the keyboard, and the keyboard's Done unlocks; Backspace on the remote keyboard erases text that was already there; Find and Share keep a typed command longer than the screen in one piece; rows toggle along their whole width, and the session panel's buttons are named for TalkBack.

Version 1.8.8

Keep an SSH session in tmux, from the phone too. A checkbox and a session name in the editor's SSH section make the connection attach to that tmux session when the shell opens — the same line the desktop clients type, byte for byte, so a session started here is ready for the desktop and the other way round. The title shows “(tmux)” while the shell is inside, a dropped connection returns you to the same screen with the same programs still running, and a server without tmux says so and carries on without it.
A SOCKS5 proxy set up on the desktop survives a save from the phone. A dynamic (-D) forward has no target host or port by design — the SOCKS client names one per connection — and this screen used to keep only forwards that had both, so merely renaming such a connection here wrote the tunnels back with the proxy gone. It is drawn now as a sentence with a delete button rather than as two red “fix me” boxes, and it is kept as it is; the phone itself does not start it, because on Android a proxy on 127.0.0.1 could serve no other app.
The desktop's settings are never lost in a save from the phone. A protocol-options value of a shape this app did not expect — a key of a new kind, a wrong-typed one written by another client — made the whole block unreadable, and the next save wrote exactly that back: the desktop's tunnels, proxy and tmux choice gone, silently. The editor now knows when it could not read the block, says so in the advanced section, and keeps it untouched on save.
WinRM connections show up as themselves. A WinRM row from the catalog had SSH's blue and SSH's icon, tapping it did nothing, and the type picker could not create one — or change a row back once its type was changed by mistake. The row now carries the desktop's WinRM colour and glyph, SSH and WinRM are told apart at a glance, the picker offers WinRM so a row can be prepared here for the desktop, and tapping a WinRM row says plainly that it opens on the desktop — this app cannot start one yet.
Terminal details. The echo filter hid every line carrying its marker, so a line in a file you read with cat could keep its tail from you; it now hides only the one line this side typed. A server that printed “tmux=on” in its banner could put “(tmux)” in the title of a session that never asked for tmux; the marks are read only in a session that did. And the tmux line sets the mouse for the session it joins rather than for every session on the server.

Version 1.8.7

A connection now says HOW it logs in — with a password or with a private key — and asks for that one only. Until now both boxes stood open at once and the app decided for itself by looking for a key on file, so a connection the desktop logs into with a password, keeping a key on file for something else, logged in here with the key. The choice is stored with the connection, in the same field the desktop has always written, so both agree about the same row.
Choosing a saved record settles that choice with it. Pointing a connection at a “login and password” record used to leave a private-key box on screen underneath it, with nothing on the form able to turn it off — and a key record still supplies its own key, as before.
Removing a stored key, its passphrase or the password is a button now, with a confirmation and an undo. It was a checkbox, and a ticked box said nothing about whether anything had happened — it has not, until you save. Once pressed, the row says what will happen on Save and offers to take it back.
A password this app cannot read can now be removed. Emptying the box is how a password is deleted, and the box is empty anyway while the vault is locked or the server withholds the secret — so until now such a password could not be removed from the phone at all. The key and its passphrase have worked that way for a while; the password had been left behind.
A private key left on a connection you have since switched to password login stays removable. The key boxes go, because the connection is not asking for a key any more; the delete buttons stay, and the form says why they are there.
Smaller fixes: the two authentication choices are told apart at a glance — the one in force is filled, the other outlined — and the app is a little smaller on disk.

Version 1.8.5

An SSH private key can now be saved in the credential store and used by any SSH connection, its passphrase included. Both are sealed on your device like every other secret, and a connection pointed at a stored key no longer fails with “key not found” while that key sits in the list beside it.
Choosing a credential is now the folder tree itself — its folders, their order, the way you left them folded — instead of a flat list forced open. A fold made here is a fold everywhere: it is the same state the desktop and iPhone clients write, so the tree comes up as you left it on whichever client you left it.
Private-key and passphrase fields appear only where a key can be used. An RDP, VNC, telnet, FTP or serial row was drawn with boxes no session of that kind could ever present, while the credential picker beside them already refused to offer key records for the same row.
RDP and VNC: dragging with a finger moves the pointer instead of drawing a selection rectangle. Whether a touch was the second tap of a double-tap was decided from “did any gesture end recently?” — which is just as true after a drag, a right click or a two-finger scroll as after a tap.
The folder now sits beside the name, and the username and the password stay together. Both editors and both detail cards used to wedge “where does this live” and “whose is it” between the username and the password, splitting the one pair on the screen that belongs together.
A connection whose key this session may not read now refuses to connect, and so does one whose jump host has an unreadable secret. Until now an empty password went to the target and to every jump host instead, so a withheld, deleted or locked-away key arrived at the server as a wrong password.
When the server refuses a save you see what it said. The portal answers in a sentence — that a connection uses a credential you cannot see, that a field is too long — and all of it used to arrive as “Save failed (400)”. Key fields also have a size limit now, so pasting a whole file no longer freezes the app while it is encrypted.
Smaller fixes: the notification permission is asked once at first launch instead of at the moment you connect; a stored key can be removed while the vault is locked; replacing a key clears the passphrase that belonged to the old one; an exported connection remembers which credential it logs in from; a database with no master password no longer describes itself as “locked”; and key fields ask for a plain keyboard, so autocorrection cannot rewrite a key or keep it in the keyboard's learning cache.

Version 1.8.4

Sign in with Apple or GitHub, alongside Google and Microsoft.
An RDP server now has to prove it holds the private key for the certificate it presents. Until now a matching fingerprint was accepted on its own, so anyone able to place themselves between you and the server could copy that server's certificate and pass the check with it.
The app opens your remembered database immediately on start. It used to show the databases list for the length of a network round trip — about a second on every cold start — even though the database to open and its contents were already on the device.
A database that keeps secrets in the vault now always asks for the master password. Whether sealing applies is decided from the database itself rather than from a single field in the server’s reply, so a reply that says nothing can no longer be read as “no vault here”.
Text pasted into a terminal is cleaned of control characters, and if it would run a command by itself you are asked first.
On a shared device, signing in as a different account starts every session clean — no scrollback, file listing or remote screen left from the previous account, in all five kinds of session.
Connections through a jump host no longer pass through a local port that any app on the phone with internet permission could reach; they are dialled inside the SSH connection itself.
Smaller fixes: rdp:// links can no longer smuggle in settings you did not choose, such as turning off network-level authentication or sharing your drives; the app lock asks for the same kind of unlock that armed it; masked fields no longer teach the keyboard your secrets; and a folder named “,-1” no longer breaks the saved order of your connections.

Version 1.8.2

A vault saved with older security settings now opens instead of reporting a wrong master password. Such vaults are still served on purpose, and every other client already explained the real reason — only here a correct password was called wrong.
Changes made offline survive an offline copy that cannot be read. That copy used to be treated as no copy at all, and the queue of edits the server has never seen went with it; it is now set aside rather than overwritten, and a copy that cannot be written is reported instead of passing unnoticed.
Changing the master password can no longer leave queued changes locked under the old one if the app stops midway through the change.
Connections keep the order you arrange them in by hand.

Version 1.8.1

Pinch-to-zoom and panning work again in a VNC session: the gesture used to advance one step and then freeze until you lifted both fingers off the screen.
A correct master password now opens the vault even when you dismiss the fingerprint prompt. It used to leave the vault closed without saying anything, which read as a wrong password.
After you edit a connection, its card shows the new name and address straight away instead of the values from before the edit.
An FTPS session is now marked as encrypted, so a connection running in clear text is recognisable at a glance, and FTP transfers show which file is moving and how far it has got.
A running session shows its notification again on Android 13 and newer. Without it a session could hold the device awake with nothing on screen to say so.
A connection that fails no longer leaves anything behind it: an SFTP session that could not open its channel used to keep the SSH connection, and every jump host along the way, open until the app was closed.
The app now installs on 32-bit devices as well.
Security and reliability: the master password is wiped from memory as soon as the vault key is derived, a malformed image from a VNC server can no longer end the session, and the synchronisation banner no longer reports success when the catalog could not be refreshed.

All versions →

Version 2.1.1

Edit and Delete are now in a connection’s long-press menu.
Deleting a connection takes you straight back to the list.
Updated RDP engine.
Stability and performance improvements.

Version 2.1.0

BURSUlink: SSH, Telnet, RDP, VNC, AppleRD, SFTP and FTP reach a computer behind a router through its BURSUlink agent — no open ports, no VPN. The connection editor has a “BURSUlink connection” row, and such rows carry a mark in the catalog.
Remote Desktop: text copied on the computer is on the iPhone’s or iPad’s clipboard, and “Paste into session” sends your text the other way. The computer’s sound plays on the device, the pointer takes the server’s own shapes, and the desktop is sharp on Retina screens. Clipboard, sound and sharpness are set per connection.
Sessions reconnect by themselves: when the network drops, SSH, Telnet, SFTP, FTP, RDP, VNC and AppleRD sessions are redialled in place — before, the session simply ended. A red chip shows which one is reconnecting; SFTP and FTP come back to the folder you were in.
Four more languages: German, Spanish and Portuguese for Portugal and for Brazil.
A password record has a comment field, as on the desktop.
Libraries updated to their latest versions.

Version 2.0.1

Two-factor sign-in: when your BURSUcloud account has two-factor authentication on, the app asks for the 6-digit code from your authenticator, or a recovery code, in its own window right after the password — before, such an account could not sign in on the iPhone or iPad by password at all.
Clearer sign-in messages: after too many attempts the app tells you, in your language, to wait a few minutes.

Version 2.0.0

Open a Mac from the iPhone and iPad. AppleRD connections start here now: on an Apple silicon Mac with High Performance the video is decoded in hardware and the Mac’s sound plays here, the Mac’s own screen either goes dark for a private session or stays on as a mirror, and the Mac’s virtual display turns with the device. On an Intel Mac that choice is greyed, with the reason under it — that Mac keeps its screen on. A Mac connection can be created, edited and quick-connected here, and a plain VNC connection can now sign in to a Mac with its user name and password, too.
RDP through an RD Gateway. The gateway’s certificate is checked the way the server’s is, and a changed one is asked about, never accepted silently. The desktop’s RDP domain and SSH keep-alive are honoured; a live session asks iOS for the extra half-minute it allows when you switch apps, so a transfer or a command in progress no longer drops the moment you glance away; and two-finger scroll in RDP follows the fingers smoothly — before, it went the wrong way, in jerks.
Work offline. Edits made while the portal cannot be reached are kept on the device and sent when it is back — connections, credentials, manual order and folder state alike; folders themselves change only online. A strip above the catalog says where things stand: offline with the number of waiting edits and a Retry button, sending, or conflicts to resolve, with this device’s version beside the server’s. Signing out with unsent edits warns you first.
The terminal catches up with the desktop: its colour schemes and font size; Find in the output; session logs recorded as the desktop records them, with Share; the database’s snippets — sent with a tap, and added or edited here; a per-connection “Send LANG=en_US.UTF-8”; and remote port forwarding (-R). Paste is safe now: control characters are stripped and a multi-line paste asks first — before, a hidden trailing newline ran a command the moment it was pasted. On iPad the desktop’s tab shortcuts switch between sessions.
The catalog works as on the desktop: Favorites and Recent as flat lists by name, tags, quick connect and Copy As; folders shown even when empty, with new subfolder, rename, move, delete and the folder’s default credential; Wake on LAN from a row’s menu, with the MAC address in the connection editor; and “Last used by …” on the connection card.
Files: select several and download, move or delete them at once; download or delete a whole folder; view and edit a text file on the server; sort by name, size or date, and show or hide dot-files. FTP times were shifted by the device’s time zone — they are read as UTC now, as servers send them.
Credentials, keys and the app lock: TOTP codes from a record’s two-factor secret, a password generator, a private key imported from a file (a file that is not a key is refused), and trusted hosts and certificates forgotten per protocol in Settings. The app can lock itself on start and after ten idle minutes; typing on a hardware keyboard counts as activity.
Problem reports: report a problem from inside the app; a crash is offered for a report at the next start, and nothing is sent without your tap. Deleting your account now also takes this device’s session logs and crash records with it.

Version 1.2.8

Keep an SSH session in tmux, from the iPhone and iPad too. A toggle and a session name in the editor's SSH section make the connection attach to that tmux session when the shell opens — the same line the desktop clients type, byte for byte, so a session started here is ready for the desktop and the other way round. The screen title shows “(tmux)” while the shell is inside, a dropped connection returns you to the same screen with the same programs still running, and a server without tmux says so and carries on without it.
A SOCKS5 proxy set up on the desktop survives a save from the phone. A dynamic (-D) forward has no target host or port by design — the SOCKS client names one per connection — and this app used to keep only forwards that had both, so merely renaming such a connection here wrote the tunnels back with the proxy gone. It is drawn now as a sentence with a delete button rather than as two “incomplete” boxes, the detail card shows it as “-D 1080 (SOCKS5)” instead of a broken local forward, and it is kept as it is; the app itself does not start it, because on iOS a proxy on 127.0.0.1 could serve no other app.
WinRM connections show up as themselves. A WinRM row from the catalog was drawn with SSH's glyph and SSH's blue, tapping it did nothing, and the type picker could not create one — or change a row back once its type was changed by mistake. The row now carries the desktop's WinRM colour and the command-prompt glyph, SSH and WinRM are told apart at a glance, the picker offers WinRM so a row can be prepared here for the desktop, and tapping a WinRM row says plainly that it opens on the desktop — this app cannot start one yet.
Terminal details. The echo filter hid every line carrying its marker for the whole session, so a line in a file you read with cat could keep its tail from you; it now hides only the one line this side typed, and an echo that never came back no longer hides a later line. And the tmux line sets the mouse for the session it joins rather than for every session on the server.

Version 1.2.7

RSA keys work with modern servers again. An RSA key that read perfectly was refused by every OpenSSH 8.8 and newer — the key was being offered with a SHA-1 signature, which those servers stopped accepting in 2021. It is now offered as rsa-sha2-512, then rsa-sha2-256, then the old name, one per attempt, the way OpenSSH's own client does. Ed25519 and ECDSA keys were never affected, which is why the same catalog worked row by row and not for this one.
The keys people actually have now open. A key with Windows line endings — the ordinary result of copying one through the clipboard — was reported as damaged, and so was a PKCS#8 Ed25519 key, the shape OpenSSL and Go write. Anything outside one container shape got a message naming a cause it did not have: “ECDSA keys are not supported yet”, for keys that were not ECDSA. Every refusal now names its own reason, and each key is proved usable rather than merely readable — it signs a message and is checked against its own public half.
A connection now says how it logs in — with a password or with a private key — and shows one box at a time, as the desktop and Android do. Before, both boxes stood open and the app decided for itself by asking whether the row had a key, so a connection the desktop logs into with a password could log in here with a key it was keeping for something else. Connections saved before this keep behaving exactly as they did.
Your own stored key is visible again. The editors fill in the key and its passphrase for an account the server lets see them — what the desktop and Android have always done, while the phone showed nothing at all, so there was no way to get your own key back out of it. A box you do not touch is left alone rather than re-sealed, so opening an editor no longer marks a key as changed when nothing changed.
Removing a stored key — or a stored password — is a button with a confirmation instead of a switch. A switch describes a state the row is in; removing is something you do once, and it has not happened until you press Save. The row now says what will happen and offers to take it back, and taking it back really does put the key back in the box.
A session that fails says why. “The operation couldn’t be completed. (Citadel.SSHClientError error 4.)” was a number in English naming a list nobody can see. Every failure a person can actually meet now has a sentence, in all four languages, shared by the terminal, the file browser and port forwarding — and a server that cannot be reached says so instead of reporting an error code.
Three faults in the connection editor, all reported from a phone. A key belonging to a saved credential could be written onto the connection as its own when the link was dropped; the hint “the password comes from the saved credential” stayed under the box after unlinking; and the username sat above the credential picker that fills it.
Credentials read like the catalog does. The picker is the catalog's own tree, folded the way the database says, and the detail cards follow the editors: where the connection lives first, then who logs in. The folder now sits with the name instead of between the username and the password.

Version 1.2.4

BURSU Connection Manager is on the App Store. It installs on iPhone and iPad like any other app — no invitation, no build that stops working after ninety days, and updates arrive the ordinary way instead of through a separate testing app.
An account can now be closed from the phone: Settings — Delete account removes the account, every database in it, and every connection and credential those databases hold. Until now the whole operation lived on the website only, so a device could sign out but never close the account it was signed in to.
The delete button sits in a section of its own below Sign out and the confirmation names exactly what goes, so a mis-tap cannot end an account by accident. For an account created with Sign in with Apple the app also withdraws its Apple authorisation, so the app stops appearing in the list of apps you have signed in to with Apple.

Version 1.2.1 (28)

An RDP server proves that it holds the private key for the certificate it presents, so the fingerprint you trusted on the first connection identifies the machine itself and not merely a copy of its certificate. A peer that cannot prove it is refused before anything is sent.
Whether your secrets are sealed is decided on the device. The app judges by the sealed data it is already holding rather than by what a server tells it, so a saved password or a private key always leaves the phone encrypted. Unlocking is also checked against the master password in force at the moment it finishes, so one changed on another device mid-unlock is noticed.
A VNC connection's encryption setting — off, prefer or require — is now read on iPhone and iPad exactly as it is on the desktop. Connections that never carried one keep behaving as they did.
Agreeing to reach a VNC server without encryption covers only the kind of session you were asked about. A weaker one — no authentication at all, or an older version of the protocol — is a separate question and is asked separately.
Large catalogs are quick again: a tree of 6,000 folders took over eight seconds to order and now takes under a tenth of a second. Text arriving from a server is capped before the app tidies it for display, so a connection screen cannot be slowed down by what the other end sends.
Status lines the app writes into the terminal itself are shown as plain text, so a name carried by a connection cannot act on the terminal. What the shell prints is untouched — its escape sequences are the terminal doing its job.
The private-key field is a proper secure editor: no autocorrect, no spell check, no autocapitalisation and no smart punctuation. It keeps the key out of the system keyboard's learning cache, and it stops a smart dash or a capitalised letter from quietly corrupting a pasted key.

Version 1.2.0 (27)

Sign in with Apple and with GitHub, next to Google and Microsoft. Apple's sign-in runs through the system sheet, so an account already on the device needs nothing typed.
Face ID is asked for the moment the catalog appears from the cache, instead of one round trip to the portal later — the prompt now arrives with the tree rather than a beat behind it.

Version 1.1.22 (24)

A connection's folder is picked from the tree instead of typed. Typing it meant knowing a separator the app never shows, and a single different character quietly created a second folder beside the intended one; a new connection now also starts in the folder you added it from.
Manual ordering survives two devices at once: rearranging on one device while the other saved its own order — or seconds after a folder was renamed — used to destroy the other's work without a word.