Azalea

SSH client · encrypted sync

Your servers,
in your pocket.
Nobody else's.

Azalea syncs your hosts, keys, and snippets across every device — end-to-end encrypted, so not even we can read them.

Zero-knowledge,
not zero effort.

1

Your passphrase never leaves the device

A master passphrase — separate from your account password — derives your encryption key with Argon2id. It is never transmitted, anywhere.

2

Everything is sealed before upload

Hosts, private keys, passwords, and snippets are encrypted with AES-256-GCM on your machine. The server only ever stores ciphertext.

3

Any device, same vault

Sign in on a new machine, enter your passphrase, and your entire setup is there. Lose the passphrase? Your one-time recovery key gets you back in.

One vault. Every machine.

Free while in beta. Your data stays encrypted either way.