termtether — web UI + remote access for your tmux

What it is

One relay between you and your machine

termtether puts a durable, mobile-first terminal in front of the box you already own — no VPN, no port-forwarding, no exposed SSH.

❯Reach anything, anywhere

A full terminal (xterm.js) in any browser — phone, tablet, or laptop. Open sh.termtether.dev/you and you're at your prompt.

❯tmux that never drops

Persistent sessions survive reboots and power loss. Close the tab on your laptop, reopen on your phone, land in the same window — layout, scrollback, and all.

❯Built for thumbs

A touch toolbar for the keys phones don't have — esc, tab, ctrl, arrows, pipe. Works in any mobile browser, and there's a native Android app. Get a push when a long job finishes.

❯Your coding agents, mobile

Run Claude Code, Codex, or any CLI in tmux and check on them from anywhere. Kick off a task at your desk, approve it from the couch.

❯Zero inbound

The connector dials out to the relay over :443 — no open ports, no NAT rules. Works behind hotel Wi-Fi, coffee-shop networks, and corporate firewalls.

❯Your compute, open core

The agent that runs on your box is open source; only the relay is hosted. Your sessions and files never live on our servers.

Security

Locked down by default

Access is gated on identity you already trust, and your credentials never travel further than they must.

✓
GitHub-gated accessEvery session is authenticated through GitHub — no shared passwords, no standing keys. You sign in with the identity you already trust. The app GitHub asks you to authorize is termtether's, owned by the Troxel.Tech organization — see who builds it.
✓
Per-device credentialsEach machine you enroll gets its own credential, hashed at rest. Revoke one device without disturbing the others.
✓
End-to-end encrypted, browser to boxYour terminal is encrypted the whole way. The relay routes by your handle (SNI) and passes the ciphertext straight through — it never decrypts your session, holds no keys to it, and keeps nothing.
✓
Your key never leaves your boxThe TLS private key is generated on your machine; the relay only signs a certificate request, never the key. So it structurally cannot read your traffic — not "we promise not to look," we can't.
✓
No exposed surfaceNothing listens for inbound connections on your machine. Dial-out only — there's no port for anyone to scan.
✓
Suspend & revokeKill a device credential or release a handle at any time from your dashboard.

Get started

Three commands to your tmux, from anywhere

Install

curl -fsSL \
 https://auth.termtether.dev/install \
 | RELAY_BASE_DOMAIN=termtether.dev bash

Linux (any major distro) or macOS. Run as your normal user — no sudo (it elevates itself only for system packages).

Enroll

termtether-dev \
 login <handle>

Approve a short code in your browser, signed in with GitHub. The box needs no browser of its own.

Reach it

open https://\
 sh.termtether.dev/<handle>

From any device's browser — you land in your tmux. On Android there's a native app too.

Runs on Linux — Ubuntu, Debian, RHEL/Rocky, Arch, Alpine, openSUSE — and macOS (Apple Silicon & Intel; headless Mac mini or desktop).

Who builds it

A Troxel.Tech project

termtether is built and run by Troxel.Tech. Same people, same name, all the way down — so nothing you meet on the way in should be a surprise:

Signing inGitHub will ask you to authorize termtether's OAuth app, owned by the Troxel.Tech organization. That's this project — not a third party.
The orgEverything termtether puts on GitHub — the OAuth app you authorize, the releases, the agent source — sits under one organization: github.com/TroxelTech.
The peopleWho we are, what else we build, and how to reach us: troxel.tech.

Your tmux sessions,
in any browser.