Purchases & FAQ
One app, one entitlement, two ways to pay — and everything handled by Apple, with no uSSH account anywhere.
The trial and the two licenses
- 7-day free trial — every feature, no purchase and no account needed. It starts on first launch.
- After the trial, unlock with either a monthly subscription or a one-time lifetime purchase. Both grant exactly the same features — the lifetime option is simply “pay once, done”.
- A lapsed trial only gates starting new sessions; nothing is taken away, and the purchase screen is never forced on you beyond that.
- Purchases are handled entirely by Apple through the App Store. There is no uSSH licensing server and we never see your payment details.
Common questions
I bought on my Mac — do I pay again on my iPad?
No. The license is tied to your Apple Account and covers Mac, iPhone, and iPad. If a device doesn’t pick it up automatically, open uSSH → License & Purchases… (or Settings → License) and tap Restore Purchases.
How do I cancel the subscription?
In your App Store account’s subscription list — the license screen has a Manage Subscription… link that takes you straight there. Cancelling stops future renewals; the current period runs to its end.
Does uSSH need an account or send my data anywhere?
No accounts, no analytics, no telemetry. Connections go directly from your device to your servers. The full story is two paragraphs long: the Privacy Policy.
Why does uSSH ask for Local Network access?
uSSH needs it to reach devices on your own network: connecting to a server by its local address (a machine on your home or office LAN, or a .local hostname), and the optional Key-Agent Relay finding the paired Mac that holds your keys. macOS and iOS require this permission for any app that talks to a device on the local network. Connections to servers out on the internet don’t use it, and uSSH never scans your network for anything else.
Which SSH keys and servers are supported?
Ed25519, ECDSA, and RSA keys (RSA always signed with modern rsa-sha2), with or without a passphrase — a protected key is decrypted once at import and kept in the Keychain. Servers: anything speaking SSH 2 with modern ciphers — from OpenSSH to dropbear on a travel router. Devices that only offer deprecated suites (CBC/SHA-1) work too, behind an explicit consent prompt.
Does my server need DNSSEC for uSSH to work?
No — every host works. DNSSEC-signed SSHFP records are what earn the green verified tier with no trust prompt; hosts without them use ordinary trust-on-first-use pinning, shown honestly in yellow. See Host Verification for how to publish records for your own servers.
Something looks wrong — how do I report it?
Email support@ussh.au. For connection issues, a debug log from Settings → Diagnostics helps enormously — it records connection and DNS-validation events, never the contents of your terminal.