Comparison of SSH clients

An SSH client is a software program which uses the secure shell protocol to connect to a remote computer. This article compares a selection of notable clients.

General

Name	Developer	Initial release	Platform	Latest release		License	GUI	TUI/CLI
Name	Developer	Initial release	Platform	Version	Date	License	GUI	TUI/CLI
AbsoluteTelnet	Celestial Software (Brian Pence)	1996	Windows	13.14	2025-11-07	Proprietary
Bitvise SSH Client	Bitvise Limited	2001	Windows	9.47	2025-09-02	Proprietary
ConnectBot	Kenny Root Jeffrey Sharkey	2007-11	Android	1.9.10	2023-12-21	Apache-2.0	?	?
Dropbear	Matt Johnston	2003-04-06	AIX	2026.90	2026-05-03	MIT
			BSD
			Cygwin
			Linux
			HP-UX
			iOS
			Maemo
			macOS
			Solaris
OpenSSH	The OpenBSD project	1999-12-01	AIX	10.6	2026-10-06	BSD
			Android
			BSD
			Cygwin
			Linux
			HP-UX
			iOS
			Maemo
			OpenVMS
			macOS
			Solaris
			Windows
			z/OS
PuTTY	Simon Tatham	1999-01-22	BSD	0.85	2026-08-16	MIT
			Linux
			macOS
			Solaris
			Windows
SecureCRT	VanDyke Software	1998–06	Linux	9.6.4	2025-09-16	Proprietary
			macOS	9.6.4	2025-09-16
			iOS	4.0.0	2025-10-21
			Windows	9.6.4	2025-09-16
Tera Term	TeraTerm Project	2004	Windows	5.7.1	2026-10-09	BSD-3-Clause
TN3270 Plus	SDI USA, Inc.	2006	Windows	4.0.8	2025-07	Proprietary
WinSCP	Martin Přikryl	2000	Windows	6.3.3	2024-04-16	GNU GPL		?
wolfSSH	wolfSSL	2016-07-20	BSD	1.6.0	2026-10-06	GPL-3.0-or-later
			Cygwin
			Linux
			macOS
			Solaris
			Windows
ZOC Terminal	EmTec, Innovative Software	1995-07-01	macOS	9.04.3	2026-10-13	Proprietary
			OS/2	4.15	2004-08-26
			Windows	9.04.3	2026-10-13

↑ Based on Trilead SSH-2 for Java.
↑ Also known as OpenBSD Secure Shell.
↑ Based on OSSH.
↑ Based on Tera Term Pro 2.3 (1994–1998).
↑ Based on wolfCrypt.
↑ Also available under a proprietary license.

Platform

The operating systems or virtual machines the SSH clients are designed to run on without emulation include several possibilities:

Partial indicates that while it works, the client lacks important functionality compared to versions for other OSs but may still be under development.

The list is not exhaustive, but rather reflects the most common platforms today.

Name	macOS	Windows	Cygwin	BSD	Linux	Solaris	OpenVMS	z/OS	AIX	HP-UX	iOS	Android	Maemo	Windows Phone
AbsoluteTelnet	No	Yes	No	No	No	No	No	No	No	No	No	No	No	?
Bitvise SSH Client	No	Yes	No	No	No	No	No	No	No	No	No	No	No	No
ConnectBot	No	No	No	No	No	No	No	No	No	No	No	Yes	No	No
Dropbear	Yes	No	Yes	Yes	Yes	Yes	?	?	Yes	Yes	Yes	No	Yes	?
lsh	Yes	No	No	Partial	Yes	Yes	?	?	No	No	No	No	No	?
OpenSSH	Included	Included	Included	Included	Included	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	?
PuTTY	Partial	Yes	?	Yes	Yes	Yes	?	?	No	No	No	No	No	Beta
SecureCRT	Yes	Yes	No	No	Yes	No	No	No	No	No	Yes	No	No	?
SmartFTP	No	Yes	No	No	No	No	No	No	No	No	No	No	No	?
Tera Term	No	Yes	No	No	No	No	No	No	No	No	No	No	No	?
TN3270 Plus	No	Yes	No	No	No	No	No	No	No	No	No	No	No	?
WinSCP	No	Yes	No	No	No	No	No	No	No	No	Yes	No	No	?
wolfSSH	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No	No	No	No	No	No
ZOC Terminal	Yes	Yes	No	No	No	No	No	No	No	No	No	No	No	?
Name	macOS	Windows	Cygwin	BSD	Linux	Solaris	OpenVMS	z/OS	AIX	HP-UX	iOS	Android	Maemo	Windows Phone

1 2 3 Only for jailbroken devices.
↑ lsh supports only one BSD platform officially, FreeBSD.
↑ Also known as OpenBSD Secure Shell.
↑ Included and enabled by default since windows 10 version 1803. Win32-OpenSSH can be installed as an optional component in the Windows versions before Windows 10 version 1803 to Windows 10 version 1709. Portable version can be download from Win32-OpenSSH for other versions.
↑ The majority of Linux distributions have OpenSSH as an official package, but a few do not.

Technical

Name	SSH1 (insecure)	SSH2	Additional protocols		Port forwarding and Tunneling			Session multiplexing	Kerberos	IPv6	Terminal	SFTP/SCP	Proxy client
Name	SSH1 (insecure)	SSH2	TELNET	rlogin	Port forwarding	SOCKS	VPN	Session multiplexing	Kerberos	IPv6	Terminal	SFTP/SCP	Proxy client
AbsoluteTelnet	Yes	Yes	Yes	No	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	SOCKS 4, 5; HTTP
Bitvise SSH Client	No	Yes	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	SOCKS 4, 5
Dropbear	No	Yes	No	No	Yes	No	No	No	No	Yes	Yes	Yes	?
lsh	No	Yes	Yes	No	Yes	Yes	No	Yes	No	Yes	Yes	Yes	?
OpenSSH	No	Yes	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	ProxyCommand
PuTTY	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	SOCKS 4, 5; HTTP; Telnet; Local
SecureCRT	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	SOCKS 4, 5; HTTP; Telnet; Generic
SmartFTP	No	Yes	Yes	No	No	No	No	No	Yes	Yes	Yes	Yes	SOCKS 4, 5; HTTP
Tera Term	Yes	Yes	Yes	No	Yes	No	No	No	No	Yes	Yes	SCP	SOCKS 4, 5; HTTP; Telnet
TN3270 Plus	Yes	Yes	Yes	No	No	Yes	No	Yes	No	Yes	Yes	No	SOCKS 4
WinSCP	No	Yes	No	No	limited	No	No	No	Yes	Yes	simple	Yes	SOCKS 4, 5; HTTP; Telnet; Local
wolfSSH	No	Yes	No	No	Yes	No	No	No	No	Yes	simple	Yes	No
ZOC Terminal	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes	Yes	Yes	Yes	SOCKS 4; 5; HTTP; Jumpserver
Name	SSH1 (insecure)	SSH2	Additional protocols		Tunneling			Session multiplexing	Kerberos	IPv6	Terminal	SFTP/SCP	Proxy client
Name	SSH1 (insecure)	SSH2	TELNET	rlogin	Port forwarding	SOCKS	VPN	Session multiplexing	Kerberos	IPv6	Terminal	SFTP/SCP	Proxy client

1 2 Accelerating OpenSSH connections with ControlMaster.
1 2 Can the SSH client connect itself through a proxy? This is distinct from offering a SOCKS proxy or port forwarding.
1 2 The ability for the SSH client to perform dynamic port forwarding by acting as a local SOCKS proxy.
1 2 The ability for the SSH client to establish a VPN, e.g. using TUN/TAP.
↑ Also known as OpenBSD Secure Shell.
↑ OpenSSH deleted SSH protocol version 1 support in version 7.6 (2017-10-03)
↑ The version 0.63 supports GSSAPI. Successfully tested on Win 8 using Active Directory
↑ The PuTTY developers provide SCP and SFTP functionality as binaries for separate download.
↑ WinSCP bundles a number of software components including PuTTY. .
↑ WinSCP Version history.
↑ WinSCP connection tunneling.
↑ SCP and SFTP through terminal.
↑ SCP and SFTP according to ZOC features page.

Features

Name	Keyboard mapping	Session tabs	ZMODEM transfers	Find text in buffer	Mouse input support	Unicode support	URL hyperlinking	Public key authentication	Smart card support	Hardware encryption	FIPS 140-2 validation	Scripting	Shared Database	Auto-reconnect	CA Certificates
AbsoluteTelnet	full	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	?	?	?
Bitvise SSH Client	?	No	No	No	Yes	Yes	No	Yes	No	?	Partial	Yes	No	Yes	No
OpenSSH	?	No	No	?	Yes	Yes	not native	Yes	Yes	Yes	Partial	No	No	?	Yes
PuTTY	No	No	No	No	Yes	Yes	No	Yes	No	Yes	No	No	No	No	Yes
SecureCRT	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	No	?	?
SmartFTP	Partial	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes	AES-NI	Yes	No	?	?	?
Tera Term	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	No	No	No	Yes	No	?	?
TN3270 Plus	Yes	Yes	No	No	No	No	Yes	Yes	No	No	No	Yes	?	?	?
wolfSSH	No	No	No	No	No	Yes	No	Yes	No	Yes	Yes	No	No	No	Yes
ZOC Terminal	full	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	?	?	Yes

↑ The ability to transmit mouse input to text mode applications such as Midnight Commander
↑ AbsoluteTelnet/SSH supports hardware-backed Secure Keys via FIDO2/WebAuthn (ed25519-sk and ecdsa-sk) beginning with Version 13.14.
↑ Also known as OpenBSD Secure Shell.
↑ Only when the terminal itself supports mouse input. Most graphical ones do, e.g. xterm.
↑ No native URL highlighting; however most graphical consoles support URL highlighting.
↑ Validated when running OpenSSH 2.1 on Red Hat Enterprise Linux 6.2 in FIPS mode or when running OpenSSH 1.1 on Red Hat Enterprise Linux 5 in FIPS mode
↑ OpenSSH supports the minimal certificate format since v5.4. "OpenSSH Release Notes: 5.4". OpenBSD Project. 2010-03-08. Retrieved 2021-08-30.
↑ PuTTY does not support tabs directly, but many wrappers are available that do.
↑ PuTTY does not support hyperlinks, but some forks of PuTTY do.
↑ PuTTY has supported OpenSSH certificates since version 0.78, released in 2022.
↑ ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.
↑ ZOC supports OpenSSSH style CA Keys, see ZOC feature list (SSH features).

Authentication key algorithms

This table lists standard authentication key algorithms implemented by SSH clients. Some SSH implementations include both server and client implementations and support custom non-standard authentication algorithms not listed in this table.

Name	ssh-dss	ssh-rsa	RSA with SHA-2		ECDSA with SHA-2			EdDSA		Security keys
Name	ssh-dss	ssh-rsa	rsa-sha2-256	rsa-sha2-512	ecdsa-sha2-nistp256	ecdsa-sha2-nistp384	ecdsa-sha2-nistp521	ssh-ed25519	ssh-ed448	sk-ecdsa-sha2-nistp256	sk-ssh-ed25519
AbsoluteTelnet	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes
Bitvise SSH Client	?	?	?	?	?	?	?	?	?
Dropbear	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	?
lsh	?	?	?	?	?	?	?	?	?
OpenSSH	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes
PuTTY	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	No
SecureCRT	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	?
SmartFTP	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No
Tera Term	?	?	?	?	?	?	?	?	?
TN3270 Plus	?	?	?	?	?	?	?	?	?
WinSCP	No	Yes	Yes	Yes	Yes	Yes	Yes	?	?
wolfSSH	No	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No	No
ZOC Terminal	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes

↑ ssh-dss is based on Digital Signature Algorithm which is sensitive to entropy, secrecy, and uniqueness of its random signature value.
↑ Also known as OpenBSD Secure Shell.
↑ By default, disabled at run-time since OpenSSH 7.0 released in 2015.
1 2 PuTTY does not support security keys / FIDO tokens, but is supported in PuTTY-CAC
↑ ZOC' SSH is based on OpenSSH and supports the same encryptions.
1 2 ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.

References

↑ "Bitvise SSH Server Version History".
↑ "Release 1.9.10". 21 December 2023. Retrieved 19 January 2024.
↑ "Dropbear SSH".
↑ https://www.openssh.org/txt/release-10.6. Retrieved 6 October 2026. {{cite web}}: Missing or empty |title= (help)
↑ Simon Tatham (16 August 2026). "PuTTY 0.85 is released. Also MAILING LIST DISCONTINUED!". Retrieved 16 August 2026.
↑ "Download PuTTY: release 0.85". 16 August 2026. Retrieved 16 August 2026.
1 2 3 "SecureCRT 9.6.4".
↑ "SecureCRT on the App Store".
↑ "Release 5.7.1". 9 October 2026. Retrieved 10 October 2026.
↑ "TN3270 Plus Version History". July 2025.
↑ "Release 1.6.0". 6 October 2026. Retrieved 7 October 2026.
1 2 "ZOC Version History".
↑ "ZOC V4.15". 25 August 2004.
↑ "AbsoluteTelnet/SSH Release Notes".
↑ "ssh2-openssh-certkeys.html".
1 2 "ZOC Version History".
1 2 "Using FIDO2/SK Keys with ZOC Terminal on Windows for Access to Linux Servers".
↑ "ZOC Feature List (SSH)".

[2] Based on Trilead SSH-2 for Java.

[openssh-aka-5] Also known as OpenBSD Secure Shell.

[6] Based on OSSH.

[12] Based on Tera Term Pro 2.3 (1994–1998).

[15] Based on wolfCrypt.

[17] Also available under a proprietary license.

[iosjailbreak-20] 1 2 3 Only for jailbroken devices.

[freebsdonly-21] sh supports only one BSD platform officially, FreeBSD.

[openssh-aka-22] Also known as OpenBSD Secure Shell.

[win32openssh-23] Included and enabled by default since windows 10 version 1803. Win32-OpenSSH can be installed as an optional component in the Windows versions before Windows 10 version 1803 to Windows 10 version 1709. Portable version can be download from Win32-OpenSSH for other versions.

[opensshlinux-24] The majority of Linux distributions have OpenSSH as an official package, but a few do not.

[mux-25] 1 2 Accelerating OpenSSH connections with ControlMaster.

[connectViaProxy-26] 1 2 Can the SSH client connect itself through a proxy? This is distinct from offering a SOCKS proxy or port forwarding.

[SOCKS-27] 1 2 The ability for the SSH client to perform dynamic port forwarding by acting as a local SOCKS proxy.

[VPN-28] 1 2 The ability for the SSH client to establish a VPN, e.g. using TUN/TAP.

[openssh-aka-29] Also known as OpenBSD Secure Shell.

[openssh-drops-ssh1-30] OpenSSH deleted SSH protocol version 1 support in version 7.6 (2017-10-03)

[putty_kerberos-31] The version 0.63 supports GSSAPI. Successfully tested on Win 8 using Active Directory

[scp_bin-32] The PuTTY developers provide SCP and SFTP functionality as binaries for separate download.

[winscp_contributions-33] WinSCP bundles a number of software components including PuTTY. .

[winscp_ssh1-34] WinSCP Version history.

[winscp_tunneling-35] WinSCP connection tunneling.

[36] SCP and SFTP through terminal.

[zoc_scp_and_sftp_through_terminal-37] SCP and SFTP according to ZOC features page.

[mouse_input-38] The ability to transmit mouse input to text mode applications such as Midnight Commander

[absoluteFIDO-40] AbsoluteTelnet/SSH supports hardware-backed Secure Keys via FIDO2/WebAuthn (ed25519-sk and ecdsa-sk) beginning with Version 13.14.

[openssh-aka-41] Also known as OpenBSD Secure Shell.

[openssh_mouse_input-42] Only when the terminal itself supports mouse input. Most graphical ones do, e.g. xterm.

[openssh_url_highlight-43] No native URL highlighting; however most graphical consoles support URL highlighting.

[openssh_fips-44] Validated when running OpenSSH 2.1 on Red Hat Enterprise Linux 6.2 in FIPS mode or when running OpenSSH 1.1 on Red Hat Enterprise Linux 5 in FIPS mode

[opensshCA-45] OpenSSH supports the minimal certificate format since v5.4. "OpenSSH Release Notes: 5.4". OpenBSD Project. 2010-03-08. Retrieved 2021-08-30.

[puttyTabs-46] PuTTY does not support tabs directly, but many wrappers are available that do.

[puttyHyperlink-47] PuTTY does not support hyperlinks, but some forks of PuTTY do.

[puttyCA-49] PuTTY has supported OpenSSH certificates since version 0.78, released in 2022.

[zocFIDO2-52] ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.

[zocCA-54] ZOC supports OpenSSSH style CA Keys, see ZOC feature list (SSH features).

[ssh-dss-55] ssh-dss is based on Digital Signature Algorithm which is sensitive to entropy, secrecy, and uniqueness of its random signature value.

[openssh-aka-56] Also known as OpenBSD Secure Shell.

[openssh_ssh-dss-57] By default, disabled at run-time since OpenSSH 7.0 released in 2015.

[putty_fido-58] 1 2 PuTTY does not support security keys / FIDO tokens, but is supported in PuTTY-CAC

[openssh-based-59] ZOC' SSH is based on OpenSSH and supports the same encryptions.

[zocFIDO2-60] 1 2 ZOC supports FIDO/sk keys with Version 9, see Version history and FIDO2 Instructions.

[wikidata-1fd722c8f690511c61c65a8e7d10bc6f1c0ccc39-v20-1] "Bitvise SSH Server Version History".

[wikidata-8bf004456064294862150ccabacda5697ca55421-v20-3] "Release 1.9.10". 21 December 2023. Retrieved 19 January 2024.

[wikidata-8e38fdf79329e71bbdde7f58775af3a87e750018-v20-4] "Dropbear SSH".

[wikidata-4ec36658bb582440c456ed95a02e2fd8bdf4d41b-v20-7] ttps://www.openssh.org/txt/release-10.6. Retrieved 6 October 2026. {{cite web}}: Missing or empty |title= (help)

[wikidata-af1b087ec6c069e0d3fe37e005c63d045a911d26-v20-8] Simon Tatham (16 August 2026). "PuTTY 0.85 is released. Also MAILING LIST DISCONTINUED!". Retrieved 16 August 2026.

[wikidata-f59bf1fbf6743b217cff9540172bf3239cfa2d3a-v20-9] "Download PuTTY: release 0.85". 16 August 2026. Retrieved 16 August 2026.

[wikidata-3c9e287684dbb1210fe143695f2201720fab90e6-v20-10] 1 2 3 "SecureCRT 9.6.4".

[wikidata-72f9ebf35308108d0640b5ffbaee4187dfe810b5-v20-11] "SecureCRT on the App Store".

[wikidata-e146cb1638f3b30d913b96eed547e99e41fcb249-v20-13] "Release 5.7.1". 9 October 2026. Retrieved 10 October 2026.

[wikidata-c6760479c15b610817e99b5afd52733a218d65b7-v20-14] "TN3270 Plus Version History". July 2025.

[wikidata-73baecfe65993729e5394608112d2fe0422d669c-v20-16] "Release 1.6.0". 6 October 2026. Retrieved 7 October 2026.

[wikidata-4b13e7bdcf901c55636dd9096feb0090ea3f55b3-v20-18] 1 2 "ZOC Version History".

[wikidata-b15f48b31e8c9e5a63db30daecf00d1cf873eb1a-v20-19] "ZOC V4.15". 25 August 2004.

[abs_release-39] "AbsoluteTelnet/SSH Release Notes".

[48] "ssh2-openssh-certkeys.html".

[zoc_versions-50] 1 2 "ZOC Version History".

[zoc_using_fido-51] 1 2 "Using FIDO2/SK Keys with ZOC Terminal on Windows for Access to Linux Servers".

[ZOC_features-53] "ZOC Feature List (SSH)".