Security & privacy

Secure by construction,
not by afterthought.

A terminal touches your credentials, your servers and your source. ZynxTerminal treats every one of those as sensitive by default — with explicit permissions, OS-level secret storage, and confirmation before anything risky happens.

Strict Tauri allowlists

No wildcard shell permissions anywhere. Every capability the app is granted is explicitly allowlisted and scoped.

OS credential storage

API keys, tokens, SSH passwords and passphrases live in the operating system credential manager — never in plaintext config.

Secret redaction

Secrets are automatically redacted from logs, and commands matching sensitive patterns are filtered out of history.

AI confirmation gate

Nothing reaches a remote AI provider without explicit confirmation, shown behind a persistent remote-provider indicator.

Destructive-command guardrails

Recursive deletes, force pushes, destructive SQL, disk formats and prod deploys are detected; the riskiest need typed confirmation.

SSH fingerprint verification

First-connect fingerprints are reviewed and a changed fingerprint raises a prominent warning — with no silent bypass.

Nothing leaves without a yes.

Generated commands are inserted, never auto-run. Before repository content reaches a remote provider you confirm explicitly, and a remote-provider indicator stays visible the whole time. Dangerous commands — recursive deletes, force pushes, destructive SQL, disk formats, prod deploys — are detected, and the riskiest require typed confirmation.

$ rm -rf ./dist --no-preserve-root
✦ Risk detected — recursive delete.
Type confirm to run, or Esc to cancel.
◈ remote providerconfirmation required

No silent fingerprint changes.

First-connect fingerprints are surfaced for review, not quietly accepted. If a known host's fingerprint changes, you get a prominent warning with no way to bypass it silently. Passwords, passphrases and identity files stay in the OS credential manager, and ProxyJump is fully supported.

Fingerprint changed — prod-01
was SHA256:9f2c…a1
now SHA256:71e0…d4
Review & acceptAbort
Privacy

Your machine stays yours.

No telemetry is collected by default.
Crash reporting is opt-in and scrubbed — and no external vendor is even connected yet.
No raw stack traces or plaintext secrets appear in production errors.
Sensitive commands are filtered from history with configurable regex exclusions.
Accessibility & reliability

Built to be usable and predictable.

ARIA labels on icon-only controls, proper dialog roles, logical tab order and full keyboard reachability, visible focus states, and consistent empty, error, loading and toast states throughout — plus reduced-motion and Windows high-contrast support.

Confidence, by default.

Free during early access. Windows x64.