# Keyway

> Keyway is a free, open-source (MIT), self-hosted web client for SSH, VNC and SFTP. It combines an SSH terminal, a remote screen (VNC), a file manager (SFTP), an encrypted credential vault and offline command help in one browser tab. It runs as a single Docker container (linux/amd64, linux/arm64) on your own hardware, without a cloud service or third-party account, and works on desktop and phone. Developed by IoTUeli (iotueli.ch). Formerly called "SSH-App".

Keyway is aimed at people who maintain mixed IT and OT fleets: Linux servers, VMs, PLC gateways, HMI panels, IoT gateways, wallboxes, inverters and Raspberry Pis. Think of a complete terminal suite, but in the browser and self-hosted. Keyway does not support RDP or X11 forwarding.

Key facts:
- Current version: 0.3.0 (October 2026); license: MIT; price: free
- Images: `iotuelich/keyway` (Docker Hub) and `ghcr.io/uiff/keyway` (GitHub Container Registry)
- Start: `curl -fsSLO https://raw.githubusercontent.com/uiff/ssh-app/main/compose.yml && docker compose up -d`, then open `https://<address>:8443` and complete the setup immediately
- Technology: Go backend, embedded web UI, SQLite, xterm.js, noVNC
- Security: vault with AES-256-GCM, key derived with Argon2id and kept only in memory; automatic lock after 30 minutes; sign-in lockout after 5 failed attempts for 15 minutes; host key verification; VNC tunneled over SSH by default with the VNC password kept on the server; container without shell, user 65532, read-only file system, no capabilities; images with provenance attestation and SBOM
- Limits: meant for your own network – do not expose it to the internet unprotected (use a VPN or a reverse proxy); direct VNC mode is unencrypted between Keyway and the device
- Languages: English and German

## Pages

- [Keyway product page (English)](https://keyway.iotueli.com/): features, video, security, installation, FAQ
- [Keyway Produktseite (Deutsch)](https://keyway.iotueli.com/de/): German version of the product page
- [Full text for language models](https://keyway.iotueli.com/llms-full.txt): all product facts in one plain-text file

## Documents

- [Whitepaper (English, PDF)](https://keyway.iotueli.com/downloads/keyway-whitepaper-en.pdf): Secure browser-based remote access for IT and OT – architecture, security model, deployment, OT placement
- [Whitepaper (German, PDF)](https://keyway.iotueli.com/downloads/keyway-whitepaper-de.pdf): Sicherer Fernzugriff im Browser für IT und OT

## Source and downloads

- [Source code and README on GitHub](https://github.com/uiff/ssh-app): documentation, configuration (environment variables), reverse proxy setup, development
- [Container image on Docker Hub](https://hub.docker.com/r/iotuelich/keyway)
- [Container image on GitHub Container Registry](https://github.com/uiff/ssh-app/pkgs/container/keyway)

## Optional

- [IoTUeli](https://iotueli.ch): the company behind Keyway
- [OT security learning site (IEC 62443)](https://ot.iotueli.com): zones, conduits and network segmentation in industrial networks