Comparison of SSH clients
{{short description|None}}
{{further|Secure Shell}}
An SSH client is a software program which uses the secure shell protocol to connect to a remote computer. This article compares a selection of notable clients.
General
class="wikitable sortable" style="font-size: small; text-align: center; width: auto;" |
rowspan="2" | Name
! rowspan="2" | Developer ! rowspan="2" | Initial release ! rowspan="2" | Platform ! colspan="2" | Latest release ! rowspan="2" | License ! rowspan="2" | GUI |
---|
Version
! Date |
{{rh}}| AbsoluteTelnet
| Celestial Software (Brian Pence) | 1996 | Windows | {{wikidata|property|preferred|references|edit|Q4669754|P348|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q4669754|P348|P548=Q2804309|P577}} | {{Proprietary}} | {{ya}} | {{na}} |
{{rh}}| Bitvise SSH Client
| Bitvise Limited | 2001 | Windows | {{wikidata|property|preferred|references|edit|Q97357043|P348|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q97357043|P348|P548=Q2804309|P577}} | {{Proprietary}} | {{ya}} | {{ya}} |
{{rh}}| ConnectBot
| Kenny Root | 2007-11{{efn|Based on Trilead SSH-2 for Java.}} | Android | {{wikidata|property|preferred|references|edit|Q209841|P348|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q209841|P348|P548=Q2804309|P577}} | {{open source|Apache-2.0}} | {{dunno}} | {{dunno}} |
{{rh}} rowspan="9" | Dropbear
| rowspan="9" | Matt Johnston | rowspan="9" | 2003-04-06 | AIX | rowspan="9" | {{wikidata|property|preferred|references|edit|Q1669778|P348|P548=Q2804309}} | rowspan="9" | {{wikidata|qualifier|raw|preferred|single|Q1669778|P348|P548=Q2804309|P577}} | rowspan="9" {{open source|MIT}} | rowspan="9" {{na}} | rowspan="9" {{ya}} |
BSD |
Cygwin |
Linux |
HP-UX |
iOS |
Maemo |
macOS |
Solaris |
{{rh}} rowspan="13" | OpenSSH{{efn|name=openssh-aka|Also known as OpenBSD Secure Shell.}}
| rowspan="13" | The OpenBSD project | rowspan="13" | 1999-12-01{{efn|Based on OSSH.}} | AIX | rowspan="13" | {{wikidata|property|preferred|references|edit|Q847062|P348|P548=Q2804309}} | rowspan="13" | {{wikidata|qualifier|raw|preferred|single|Q847062|P348|P548=Q2804309|P577}} | rowspan="13" {{open source|BSD}} | rowspan="13" {{na}} | rowspan="13" {{ya}} |
Android |
BSD |
Cygwin |
Linux |
HP-UX |
iOS |
Maemo |
OpenVMS |
macOS |
Solaris |
Windows |
z/OS |
{{rh}} rowspan="5" | PuTTY
| rowspan="5" | Simon Tatham | rowspan="5" | 1999-01-22 | BSD | rowspan="5" | {{wikidata|property|preferred|references|edit|Q841685|P348|P548=Q2804309}} | rowspan="5" | {{wikidata|qualifier|raw|preferred|single|Q841685|P348|P548=Q2804309|P577}} | rowspan="5" {{open source|MIT}} | rowspan="5" {{ya}} | rowspan="5" {{ya}} |
Linux |
macOS |
Solaris |
Windows |
{{rh}} rowspan="4" | SecureCRT
| rowspan="4" | VanDyke Software | rowspan="4" | 1998–06 | Linux | {{wikidata|property|preferred|references|edit|Q7444822|P348|P400=Q388|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q7444822|P348|P400=Q388|P548=Q2804309|P577}} | rowspan="4" {{Proprietary}} | rowspan="4" {{ya}} | rowspan="4" {{na}} |
macOS
| {{wikidata|property|preferred|references|edit|Q7444822|P348|P400=Q14116|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q7444822|P348|P400=Q14116|P548=Q2804309|P577}} |
iOS
| {{wikidata|property|preferred|references|edit|Q7444822|P348|P400=Q48493|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q7444822|P348|P400=Q48493|P548=Q2804309|P577}} |
Windows
| {{wikidata|property|preferred|references|edit|Q7444822|P348|P400=Q1406|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q7444822|P348|P400=Q1406|P548=Q2804309|P577}} |
{{rh}}| Tera Term
| TeraTerm Project | 2004{{efn|Based on Tera Term Pro 2.3 (1994–1998).}} | Windows | {{wikidata|property|preferred|references|edit|Q613267|P348|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q613267|P348|P548=Q2804309|P577}} | {{open source|BSD-3-Clause}} | {{ya}} | {{na}} |
{{rh}}| TN3270 Plus
| SDI USA, Inc. | 2006 | Windows | {{wikidata|property|preferred|references|edit|Q7670806|P348|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q7670806|P348|P548=Q2804309|P577}} | {{Proprietary}} | {{ya}} | {{na}} |
{{rh}} | WinSCP
| Martin Přikryl | 2000 | Windows | 6.3.3 | 2024-04-16 | GNU GPL | {{ya}} | {{dunno}} |
{{rh}} rowspan="6" | wolfSSH
| rowspan="6" | wolfSSL | rowspan="6" | 2016-07-20{{efn|Based on wolfCrypt.}} | BSD | rowspan="6" | {{wikidata|property|preferred|references|edit|Q48743683|P348|P548=Q2804309}} | rowspan="6" | {{wikidata|qualifier|raw|preferred|single|Q48743683|P348|P548=Q2804309|P577}} | rowspan="6" {{open source|GPL-3.0-or-later{{efn|Also available under a proprietary license.}}}} | rowspan="6" {{na}} | rowspan="6" {{ya}} |
Cygwin |
Linux |
macOS |
Solaris |
Windows |
{{rh}} rowspan="3" | ZOC Terminal
| rowspan="3" | EmTec, Innovative Software | rowspan="3" | 1995-07-01 | macOS | {{wikidata|property|preferred|references|edit|Q17051027|P348|P400=Q14116|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q17051027|P348|P400=Q14116|P548=Q2804309|P577}} | rowspan="3" {{Proprietary}} | rowspan="3" {{ya}} | rowspan="3" {{ya}} |
OS/2
| {{wikidata|property|preferred|references|edit|Q17051027|P348|P400=Q189794|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q17051027|P348|P400=Q189794|P548=Q2804309|P577}} |
Windows
| {{wikidata|property|preferred|references|edit|Q17051027|P348|P400=Q1406|P548=Q2804309}} | {{wikidata|qualifier|raw|preferred|single|Q17051027|P348|P400=Q1406|P548=Q2804309|P577}} |
{{notelist}}
Platform
The operating systems or virtual machines the SSH clients are designed to run on without emulation include several possibilities:
- Partial indicates that while it works, the client lacks important functionality compared to versions for other OSs but may still be under development.
The list is not exhaustive, but rather reflects the most common platforms today.
{{sort-under}}
class="wikitable sortable sort-under" style="font-size: smaller; text-align: center; width: auto;" |
Name
! macOS ! Windows ! Cygwin ! BSD ! Linux ! Solaris ! OpenVMS ! z/OS ! AIX ! HP-UX ! iOS ! Android ! Maemo |
---|
{{rh}}| AbsoluteTelnet
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| Bitvise SSH Client
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} |
{{rh}}| ConnectBot
| {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{no}} | {{no}} |
{{rh}}| Dropbear
| {{yes}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{dunno}} | {{dunno}} | {{yes}} | {{yes}} | {{yes}}{{efn|name=iosjailbreak|Only for jailbroken devices.}} | {{no}} | {{yes}} | {{dunno}} |
{{rh}}| lsh
| {{yes}} | {{no}} | {{no}} | {{partial}}{{efn|name=freebsdonly|lsh supports only one BSD platform officially, FreeBSD.}} | {{yes}} | {{yes}} | {{dunno}} | {{dunno}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| OpenSSH{{efn|name=openssh-aka|Also known as OpenBSD Secure Shell.}}
| {{included}} | {{included}}{{efn|name=win32openssh|Included and enabled by default since windows 10 version 1803. Win32-OpenSSH can be installed as an optional component in the Windows versions before Windows 10 version 1803 to Windows 10 version 1709. Portable version can be download from [https://github.com/PowerShell/Win32-OpenSSH Win32-OpenSSH] for other versions.}} | {{included}} | {{included}} | {{included}}{{efn|name=opensshlinux|The majority of Linux distributions have OpenSSH as an official package, but a few do not.}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}}{{efn|name=iosjailbreak}} | {{yes}} | {{yes}} | {{dunno}} |
{{rh}}| PuTTY
| {{partial}} | {{yes}} | {{dunno}} | {{yes}} | {{yes}} | {{yes}} | {{dunno}} | {{dunno}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{beta}} |
{{rh}}| SecureCRT
| {{yes}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| SmartFTP
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| Tera Term
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| TN3270 Plus
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| WinSCP
| {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}}{{efn|name=iosjailbreak}} | {{no}} | {{no}} | {{dunno}} |
{{rh}}| wolfSSH
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} |
{{rh}}| ZOC Terminal
| {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{dunno}} |
class="sortbottom"
! Name ! macOS ! Windows ! Cygwin ! BSD ! Linux ! Solaris ! OpenVMS ! z/OS ! AIX ! HP-UX ! iOS ! Android ! Maemo |
{{notelist}}
Technical
{{sort-under}}
class="wikitable sortable sort-under" style="font-size: smaller; text-align: center; width: auto;" |
rowspan="2" | Name
! rowspan="2" | SSH1 ! rowspan="2" | SSH2 ! colspan="2" | Additional protocols ! colspan="3" | Port forwarding and Tunneling ! rowspan="2" | Session ! rowspan="2" | Kerberos ! rowspan="2" | IPv6 ! rowspan="2" | Terminal ! rowspan="2" | Proxy client{{efn|name=connectViaProxy|Can the SSH client connect itself through a proxy? This is distinct from offering a SOCKS proxy or port forwarding.}} |
---|
TELNET
! rlogin ! SOCKS ! VPN |
{{rh}}| AbsoluteTelnet
| {{no | yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes|SOCKS 4, 5; HTTP}} |
{{rh}}| Bitvise SSH Client
| {{yes|no}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes|SOCKS 4, 5}} |
{{rh}}| Dropbear
| {{yes|no}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{dunno}} |
{{rh}}| lsh
| {{yes|no}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{dunno}} |
{{rh}}| OpenSSH{{efn|name=openssh-aka|Also known as OpenBSD Secure Shell.}}
| {{yes|no}}{{efn|name=openssh-drops-ssh1|OpenSSH deleted SSH protocol version 1 support in [https://www.openssh.com/txt/release-7.6 version 7.6 (2017-10-03)]}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{partial| ProxyCommand }} |
{{rh}}| PuTTY
| {{no|yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}}{{efn|name=putty_kerberos|[http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html The version 0.63 supports GSSAPI. Successfully tested on Win 8 using Active Directory]}} | {{yes}} | {{yes}} | {{yes}}{{efn|name=scp_bin|The PuTTY developers provide SCP and SFTP functionality as binaries for separate download.}} | {{yes|SOCKS 4, 5; HTTP; Telnet; Local}} |
{{rh}}| SecureCRT
| {{no|yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes|SOCKS 4, 5; HTTP; Telnet; Generic}} |
{{rh}}| SmartFTP
| {{yes|no}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes|SOCKS 4, 5; HTTP}} |
{{rh}}| Tera Term
| {{no|yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{partial|SCP}} | {{yes|SOCKS 4, 5; HTTP; Telnet}} |
{{rh}}| TN3270 Plus
| {{no|yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{no}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{no}} | {{partial|SOCKS 4}} |
{{rh}}| WinSCP {{efn|name=winscp_contributions|WinSCP bundles a number of software components including PuTTY. [https://winscp.net/eng/docs/contributions].}}
| {{yes|no}}{{efn|name=winscp_ssh1|[https://winscp.net/eng/docs/history WinSCP Version history].}} | {{yes}} | {{no}} | {{no}} | {{partial|limited}}{{efn|name=winscp_tunneling|[https://winscp.net/eng/docs/tunneling WinSCP connection tunneling].}} | {{no}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{partial|simple}} | {{yes}} | {{yes|SOCKS 4, 5; HTTP; Telnet; Local}} {{no}} {{no|yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}}{{efn|SCP and SFTP through terminal.}}{{efn|name=zoc_scp_and_sftp_through_terminal|[https://www.emtec.com/zoc/features.html SCP and SFTP according to ZOC features page].}} | {{yes|SOCKS 4; 5; HTTP; Jumpserver}} |
rowspan="2" | Name
! rowspan="2" | SSH1 ! rowspan="2" | SSH2 ! colspan="2" | Additional protocols ! colspan="3" | Tunneling ! rowspan="2" | Session ! rowspan="2" | Kerberos ! rowspan="2" | IPv6 ! rowspan="2" | Terminal ! rowspan="2" | Proxy client{{efn|name=connectViaProxy}} |
TELNET
! rlogin ! SOCKS ! VPN |
{{notelist}}
Features
{{sort-under}}
class="wikitable sortable sort-under"
! Name ! Keyboard mapping ! {{verth|Session tabs}} ! {{verth|ZMODEM ! {{verth|Find text ! {{verth|Mouse input ! {{verth|Unicode ! URL hyperlinking ! {{verth|Public key ! {{verth|Smart card ! Hardware encryption ! {{verth|FIPS 140-2 ! {{verth|Scripting}} ! {{verth|Shared ! {{verth|Auto-reconnect}} ! {{verth|CA Certificates}} |
{{rh}}| AbsoluteTelnet
| {{yes|full}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{dunno}} |{{yes}} |{{yes}} |{{dunno}} | {{dunno}} |{{dunno}} |
{{rh}}| Bitvise SSH Client
|{{dunno}} |{{no}} |{{no}} |{{no}} |{{yes}} |{{yes}} |{{no}} |{{yes}} |{{no}} |{{dunno}} |{{partial}} |{{yes}} |{{no}} |{{yes}} |{{no}} |
{{rh}}| OpenSSH{{efn|name=openssh-aka|Also known as OpenBSD Secure Shell.}}
|{{dunno}} |{{no}} |{{no}} |{{dunno}} |{{yes}}{{efn|name=openssh_mouse_input|Only when the terminal itself supports mouse input. Most graphical ones do, e.g. xterm.}} |{{yes}} |{{partial|not native}}{{efn|name=openssh_url_highlight|No native URL highlighting; however most graphical consoles support URL highlighting.}} |{{yes}} |{{yes}} |{{yes}} |{{partial}}{{efn|name=openssh_fips|[http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#1791 Validated when running OpenSSH 2.1 on Red Hat Enterprise Linux 6.2 in FIPS mode] or [http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#1385 when running OpenSSH 1.1 on Red Hat Enterprise Linux 5 in FIPS mode]}} |{{No}} |{{No}} | {{dunno}} |{{yes}}{{efn|name=opensshCA|OpenSSH supports the minimal certificate format since v5.4. {{cite web |url=https://www.openssh.com/releasenotes.html#5.4 |title=OpenSSH Release Notes: 5.4 |publisher=OpenBSD Project |date=2010-03-08 |access-date=2021-08-30}}}} |
{{rh}}| PuTTY
| {{no}} | {{no}}{{efn|name=puttyTabs|PuTTY does not support tabs directly, but many wrappers are available that do.}} | {{no}} | {{no}} | {{yes}} | {{yes}} | {{no}}{{efn|name=puttyHyperlink|PuTTY does not support hyperlinks, but some forks of PuTTY do.}} | {{yes}} | {{no}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} | {{no}}{{efn|name=puttyCA|Putty v71.0 does not support OpenSSH certificates. See Ben Harris' 2016-04-21 wish.{{cite web|url=https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ssh2-openssh-certkeys.html|title=ssh2-openssh-certkeys.html}}{{cite web|url=https://git.tartarus.org/?p=simon/putty-wishlist.git;a=history;f=data/ssh2-openssh-certkeys;hb=refs/heads/master|title=ssh2-openssh-certkeys}}}} |
{{rh}}| SecureCRT
|{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{no}} |{{yes}} |{{yes}} |{{no}} | {{dunno}} |{{dunno}} |
{{rh}}| SmartFTP
| {{partial}} |{{yes}} |{{no}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{yes|AES-NI}} |{{yes}} |{{no}} |{{dunno}} | {{dunno}} |{{dunno}} |
{{rh}}| Tera Term
|{{yes}} |{{yes}} |{{yes}} |{{no}} |{{yes}} |{{yes}} |{{yes}} |{{yes}} |{{no}} |{{no}} |{{no}} |{{yes}} |{{no}} | {{dunno}} |{{dunno}} |
{{rh}}| TN3270 Plus
|{{yes}} |{{yes}} |{{no}} |{{no}} |{{no}} |{{no}} |{{yes}} |{{yes}} |{{no}} |{{no}} |{{no}} |{{yes}} |{{dunno}} | {{dunno}} |{{dunno}} |
{{rh}}| wolfSSH
|{{no}} |{{no}} |{{no}} |{{no}} |{{no}} |{{yes}} |{{no}} |{{yes}} |{{no}} |{{yes}} |{{yes}} |{{no}} |{{no}} | {{no}} |{{yes}} |
{{rh}}| ZOC Terminal
| {{yes|full}} | {{yes}} | {{yes}} | {{yes|Yes}} | {{yes}} | {{yes|Yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{yes}} | {{dunno}} | {{dunno}} |{{dunno}} |
{{notelist}}
Authentication key algorithms
This table lists standard authentication key algorithms implemented by SSH clients. Some SSH implementations include both server and client implementations and support custom non-standard authentication algorithms not listed in this table.
{{sort-under}}
class="wikitable sortable sort-under" style="font-size: smaller; text-align: center; width: auto;" |
rowspan="2" | Name
! rowspan="2" | ssh-dss{{efn|name=ssh-dss| ! rowspan="2" | ssh-rsa ! colspan="2" | RSA with SHA-2 ! colspan="3" | ECDSA with SHA-2 ! colspan="2" | EdDSA ! colspan="2" | Security keys |
---|
rsa-sha2-256
! rsa-sha2-512 ! ecdsa-sha2-nistp256 ! ecdsa-sha2-nistp384 ! ecdsa-sha2-nistp521 ! ssh-ed25519 ! ssh-ed448 ! sk-ecdsa-sha2-nistp256 ! sk-ssh-ed25519 |
{{rh}}| AbsoluteTelnet
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} |
{{rh}}| Bitvise SSH Client
| ? | ? | ? | ? | ? | ? | ? | ? | ? | | |
{{rh}}| Dropbear
| {{yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | ? | | |
{{rh}}| lsh
| ? | ? | ? | ? | ? | ? | ? | ? | ? | | |
{{rh}}| OpenSSH{{efn|name=openssh-aka|Also known as OpenBSD Secure Shell.}}
| {{yes}}{{efn|name=openssh_ssh-dss|By default, disabled at run-time since OpenSSH 7.0 released in 2015.}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{yes}} | {{yes}} |
{{rh}}| PuTTY
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}}{{efn|name=putty_fido|PuTTY does not support security keys / FIDO tokens, but is supported in [https://github.com/NoMoreFood/putty-cac/ PuTTY-CAC]}} | {{no}}{{efn|name=putty_fido}} |
{{rh}}| SecureCRT
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | ? | | |
{{rh}}| SmartFTP
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} |
{{rh}}| Tera Term
| ? | ? | ? | ? | ? | ? | ? | ? | ? | | |
{{rh}}| TN3270 Plus
| ? | ? | ? | ? | ? | ? | ? | ? | ? | | |
{{rh}}| WinSCP
| {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | ? | ? | | |
{{rh}}| wolfSSH
| {{no}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | {{no}} | {{no}} | {{no}} |
{{rh}}| ZOC Terminal{{efn|name=openssh-based|ZOC' SSH is based on OpenSSH and supports the same encryptions.}}
| {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{yes}} | {{no}} | | |
rowspan="2" | Name
! rowspan="2" | ssh-dss ! rowspan="2" | ssh-rsa ! rsa-sha2-256 ! rsa-sha2-512 ! ecdsa-sha2-nistp256 ! ecdsa-sha2-nistp384 ! ecdsa-sha2-nistp521 ! ssh-ed25519 ! ssh-ed448 ! sk-ecdsa-sha2-nistp256 ! sk-ssh-ed25519 |
colspan="2" | RSA with SHA-2
! colspan="3" | ECDSA with SHA-2 ! colspan="2" | EdDSA ! colspan="2" | Security keys |
{{notelist}}