Secure by construction,
not by afterthought.
A terminal touches your credentials, your servers and your source. ZynxTerminal treats every one of those as sensitive by default — with explicit permissions, OS-level secret storage, and confirmation before anything risky happens.
Strict Tauri allowlists
No wildcard shell permissions anywhere. Every capability the app is granted is explicitly allowlisted and scoped.
OS credential storage
API keys, tokens, SSH passwords and passphrases live in the operating system credential manager — never in plaintext config.
Secret redaction
Secrets are automatically redacted from logs, and commands matching sensitive patterns are filtered out of history.
AI confirmation gate
Nothing reaches a remote AI provider without explicit confirmation, shown behind a persistent remote-provider indicator.
Destructive-command guardrails
Recursive deletes, force pushes, destructive SQL, disk formats and prod deploys are detected; the riskiest need typed confirmation.
SSH fingerprint verification
First-connect fingerprints are reviewed and a changed fingerprint raises a prominent warning — with no silent bypass.
Nothing leaves without a yes.
Generated commands are inserted, never auto-run. Before repository content reaches a remote provider you confirm explicitly, and a remote-provider indicator stays visible the whole time. Dangerous commands — recursive deletes, force pushes, destructive SQL, disk formats, prod deploys — are detected, and the riskiest require typed confirmation.
Type confirm to run, or Esc to cancel.
No silent fingerprint changes.
First-connect fingerprints are surfaced for review, not quietly accepted. If a known host's fingerprint changes, you get a prominent warning with no way to bypass it silently. Passwords, passphrases and identity files stay in the OS credential manager, and ProxyJump is fully supported.
now SHA256:71e0…d4
Your machine stays yours.
Built to be usable and predictable.
ARIA labels on icon-only controls, proper dialog roles, logical tab order and full keyboard reachability, visible focus states, and consistent empty, error, loading and toast states throughout — plus reduced-motion and Windows high-contrast support.