How secure is TermPair for sharing sensitive terminal data like passwords?

TermPair uses end-to-end AES-128-GCM encryption, so data is encrypted before leaving your machine. However, anyone with the share link can access the session, so keep links confidential and consider using read-only mode for highly sensitive inputs.

Can I record a TermPair session to review later?

No, TermPair does not have built-in recording or playback features; it's designed for live sharing only. You would need to use external tools like screen recorders or terminal loggers if persistence is required.

TermPair vs tmate: which is better for quick terminal sharing?

TermPair offers stronger security with client-side encryption and self-hosting options, ideal for sensitive environments. Tmate is easier for ad-hoc use as it provides a public relay server, but may expose data to third parties.

How to set up TermPair with HTTPS using a reverse proxy like Nginx?

Configure Nginx to proxy WebSocket connections to the TermPair server on port 8000, with SSL certificates for HTTPS. The README provides example configs, but you must handle TLS and domain setup manually.

Does TermPair support multiple viewers typing into the same terminal?

Yes, by default, all viewers with the link can type if not set to read-only, but inputs are merged without attribution, which can lead to confusion in collaborative sessions.

What happens if my internet connection drops during a TermPair session?

The client will attempt to automatically reconnect when the connection is restored, and the session resumes, though there might be a brief delay or missed output depending on server settings.

Open-Awesome

TermPair

MITRustv1.2.0

Share and control remote terminals from a browser with end-to-end encryption using a single static binary.

GitHub

1.7k stars74 forks0 contributors

What is TermPair?

TermPair is a tool for securely sharing live terminal sessions via a web browser. It enables real-time collaboration and remote assistance by allowing others to view and optionally type into your terminal, all while maintaining strong privacy through end-to-end encryption. The server acts as a blind relay, ensuring it never has access to the unencrypted terminal data.

Target Audience

Developers, system administrators, and technical support staff who need to share terminal sessions for collaboration, debugging, or remote assistance while prioritizing security and ease of deployment.

Value Proposition

Developers choose TermPair for its zero-knowledge security model with client-side encryption, its simplicity as a single static binary with no dependencies, and its resilience with automatic reconnection and cross-platform compatibility.

Overview

View and control terminals from your browser with end-to-end encryption 🔒

Use Cases

Best For

Securely sharing terminal sessions for remote pair programming or debugging with end-to-end encryption.
Providing live technical support or assistance where the helper needs to view or control a user's terminal.
Collaborating on terminal-based tasks in real-time without exposing sensitive data to a third-party server.
Self-hosting a terminal sharing solution with minimal dependencies and easy deployment via a single binary.
Sharing terminal sessions publicly for demonstrations or teaching, using the public session feature.
Integrating terminal sharing into workflows that require resilience to server restarts and automatic reconnection.

Not Ideal For

Teams wanting a fully managed, cloud-based service with built-in user authentication and audit logs.
Use cases requiring session recording, playback, or persistent storage of terminal interactions.
Scenarios where sub-second latency is critical, as the relay server adds overhead compared to direct peer-to-peer solutions.
Projects needing deep integrations with other tools (e.g., Slack, Jira) or custom APIs for workflow automation.

Pros & Cons

Pros

Zero-Knowledge Security

Uses AES-128-GCM encryption with keys managed client-side, making the server a blind relay that never sees plaintext terminal data, ensuring strong privacy.

Single Binary Simplicity

Bundles server, client, and web frontend into a static binary with no external dependencies, allowing easy installation and deployment across platforms.

Automatic Session Recovery

Clients automatically reconnect and resume sessions after server restarts, providing resilience and continuity without manual intervention.

Cross-Platform Compatibility

Works on Linux, macOS, and Windows, supporting any TTY-based terminal application like shells, vim, or htop without platform-specific tweaks.

Cons

Link-Only Security Model

Access control relies solely on secret URLs; if a link is leaked, anyone can join the session, with no built-in user authentication, revocation, or audit trails.

Self-Hosting Overhead

Requires deploying and maintaining your own server, including TLS setup for HTTPS, which adds complexity compared to hosted alternatives like tmate or teleconsole.

Limited Feature Scope

Focuses on live sharing only, lacking features such as session recording, advanced logging, or integrations with monitoring or collaboration platforms.

Frequently Asked Questions

Related Projects

Polar

Polar — A billing platform for the intelligence era

Stars10,082

Forks750

Last commit5 hours ago

Dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

Stars6,500

Forks675

Last commit10 months ago

RealWorld Example App - postgres

Backend logic implementation for https://github.com/gothinkster/realworld with awesome FastAPI

Stars3,113

Forks731

Last commit3 years ago

Awesome FastAPI Projects

List of FastAPI projects! :sunglasses: :rocket:

Stars1,612

Forks142

Last commit1 day ago

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub