airshell

[ WHY AIRSHELL ]

Always works on every network.

Sub-50ms when you're on the same Wi-Fi. Rock-solid on cellular, hotel Wi-Fi, behind CGNAT. No port forwarding. No VPN. No third-party install.

REMOTE

Anywhere with internet

Outbound connections only. Works from your phone on cellular, on a hotel Wi-Fi sign-in page, on an airport flight.

FAST ON WI-FI

Sub-50ms when nearby

When iPhone and Mac are on the same Wi-Fi, the connection is direct via Bonjour. No relay hop, no latency penalty.

RESILIENT

Sessions survive reconnects

Drop a session and pick it back up where you left off. Shells keep running on your Mac through Wi-Fi changes and brief drops.

PRIVATE

End-to-end encrypted

Every byte is encrypted on your iPhone before reaching our relay. We pass through ciphertext we can't decrypt.

[ HOW IT WORKS ]

Three steps. About a minute.

Install the Mac companion

airshell-server is a tiny menu-bar app. Install once and forget it. Free.

Scan to pair

Open airshell on your Mac. A QR code appears with a 6-digit confirmation. Scan it from the iPhone app. Pairing is local — your devices meet on Wi-Fi, never via our servers.

Connect from anywhere

Tap the device in the iPhone app. You're at a shell prompt — at home, on cellular, in a coffee shop.

[ SECURITY ]

The relay can't read your sessions.

Pair on local Wi-Fi. Pin your Mac's key. Encrypt every byte end-to-end. We can't decrypt your traffic even if we wanted to.

KEY EXCHANGEX25519 (Curve25519 Diffie-Hellman)

CIPHERChaCha20-Poly1305 (NaCl secretbox)

FWD SECRECYSession keys regenerated on every reconnect

KEY PINNINGMac pubkey locked at pair time, never accepted from wire

PAIRINGLAN-only with TOTP confirmation

IDENTITYEd25519 signing key, biometric-protected in Keychain