Terminal-native SSH vault with encrypted, keyboard-first workflows
Wharf stores an encrypted vault of hosts, SSH keys, and projects and exposes a terminal user interface for keyboard-driven search, filter, and one-command connections. Created by Janne6565 as a developer-focused utility, the app syncs that local-first vault across machines while keeping sensitive data encrypted. It suits system administrators, DevOps engineers, and developers who manage many servers and prefer fast, terminal-based workflows over graphical clients.
What does wharf actually do?
Wharf centralizes SSH access by keeping hosts, identities, and project groupings in a single, searchable repository and by launching SSH sessions from the terminal. The tool presents a TUI that supports tagging and filtering so you can narrow hosts by label or project. It also offers browser-based authentication to unlock the vault and then return you to the terminal environment for uninterrupted work.
Does it affect system performance during normal use?
Wharf runs as a standalone binary and is designed for low overhead: the distribution is available as a single executable and through package managers, which makes it lightweight to install and run on desktop machines. Because it operates inside the terminal and uses local encryption before any sync, background CPU and RAM impact stays minimal compared with GUI alternatives that spawn multiple processes.
Is wharf safe to use with sensitive keys?
Security is local-first and cryptographic: the vault is encrypted on the device using Argon2id for key derivation and XChaCha20-Poly1305 for encryption before any data is synced. The developer states private keys remain on the user device, and projects can be shared without exposing keys, which reduces the risk of readable credentials leaving the machine.
Do I need technical knowledge to operate it across machines and teams?
Terminal proficiency helps but the workflow is explicit. The TUI targets keyboard-centric users who are comfortable with SSH and terminal navigation; project sharing lets teams exchange host lists while private keys stay local. Browser-based sign-in handles authentication steps, while tagging and filtering scale the interface for large inventories without graphical controls.
Who should adopt wharf and when
Wharf is a practical tool for administrators and developers who manage multiple SSH endpoints and prefer to stay inside the terminal. It protects private keys with local-first encryption and reduces context switching by combining search, filter, and connect flows in one TUI. Expect a short learning curve for non-terminal users but stable, predictable operation for keyboard-oriented workflows. Recommended.
