Core Tunnel
Effortless SSH tunneling
Only for Mac
Free · In-App Purchases
The missing SSH tunnel manager for macOS — automatic, intuitive, and fully compatible with OpenSSH.
Stop wasting time managing tunnels manually. Stay focused and productive.
## Features
OpenSSH Compatible
• Full compatibility with OpenSSH, including local / remote / dynamic port forwarding, agent forwarding, certificates, ProxyJump, and more.
• Read your existing `ssh_config` file to reuse advanced configurations — especially useful for experienced users.
• Works with GnuPG Agent, Authy, and Google Authenticator.
• Supports OpenSC and smart card devices such as YubiKey and Nitrokey.
Keychain Integration
• Deep integration with macOS Keychain — no need to repeatedly enter passwords or passphrases.
• Completely optional. Enable or disable it at any time.
Advanced Options Editor
• Convenient per-host advanced configuration editor.
• Every SSH directive includes contextual help, so you can find information instantly without searching online.
Automatic Reconnect
• Automatically restores connections after network interruptions or waking from sleep.
• Tunnels can be configured to connect automatically when the app launches.
Menu Bar Control
• Control and monitor tunnels directly from the menu bar without leaving your current workspace.
Tags
• Organize hundreds or even thousands of tunnels with tags.
• Easily tag tunnels using drag and drop.
Premium Features
• Unlimited connections
• Import and export tunnels
• Sync tunnels and tags across all your Macs
• Automate workflows with the Shortcuts app
• Priority customer support
Go Premium to support development and unlock the full power of Core Tunnel.
## Premium License
Optional in-app purchases are available for premium features. Pricing may vary by region:
- USD 9.99 — 1-Year License
- USD 29.99 — 4-Year License (up to 25% savings before taxes)
-------
We’d love to answer your questions or hear your feedback about Core Tunnel.
Our Community:
https://community.codinn.com/c/core-tunnel
Join the community to request support, report bugs, discuss ideas, and help shape the future of Core Tunnel.
more This release includes several improvements and fixes for macOS 27 compatibility.
Special thanks to Bart Busschots (@bart.busschots) and @qinhong.wang for their feedback and help with this release.
5.1.1 3 days ago
Version 5.1 includes various improvements and bug fixes.
5.1 15 Sept
Version 4.1.1 includes the following changes:
1. Improved Tab and arrow-key navigation between views
2. Fixed an issue where typing numbers in the tunnel list didn't trigger search
4.1.1 23 Jul
Version 4.1 includes the following changes:
1. Restored AppleScript support
2. Other minor bug fixes
Special thanks to Alex bo (@bosha) for helping with this release.
4.1 18 Jul
4.0.2 is a hotfix release for fixing:
1. Pressing any alphanumeric key in the profiles list window activates the search field
2. Entering escape characters in the search box causes a crash
3. Executing connect and disconnect operations triggered from the Shortcuts app in the background
Special thanks to @vatsan, Eric Henderson (@henderea) and Dan (@danhopkins) for helping with this release.
## Version 4.0.1 - 2026-05-12
Version 4.0.1 introduces a completely redesigned UI and a more stable experience by resolving many potential crash issues.
New features in Core Tunnel 4.0.1:
1. Redesigned user interface
2. Launch automatically at login
3. Automate workflows with the Shortcuts app
4. Added support for macOS Tahoe 26 and later
Special thanks to @franciscojrivash, Hobai Riku (@HobaiRiku) and @chlankof for helping with this release.
4.0.2 1 Jun
Version 4.0.1 introduces a completely redesigned UI and a more stable experience by resolving many potential crash issues.
New features in Core Tunnel 4.0.1:
1. Redesigned user interface
2. Launch automatically at login
3. Automate workflows with the Shortcuts app
4. Added support for macOS Tahoe 26 and later
Special thanks to @franciscojrivash, Hobai Riku (@HobaiRiku) and Dan (@danhopkins) for helping with this release.
4.0.1 19 May
Version 3.10.4 is a hotfix release for fixing:
- SSH XPC component terminated unexpectedly when using dynamic port forwarding.
Special thanks to Fabian Heusel for helping this release.
3.10.4 28/08/2024
Version 3.10.3 is a hotfix release for fixing:
- Crash if remote authentication prompt contains "@".
Special thanks to @jamespauly for helping this release.
3.10.3 23/08/2024
Core Tunnel 3.10 employs a more reliable iCloud synchronization method, and allows automatic profiles backup.
Moreover, the codebase of embedded OpenSSH has been updated to version 9.8. See https://community.codinn.com/t/4652/3 for the OpenSSH changes.
NOTE: Due to changes in the synchronization method, data cannot be synchronized between 3.10 and 3.8.9 (or earlier versions).
### Added
- New backup file format `.coretunnel`.
- Add a `RequiredRSASize` directive to set a minimum RSA key length.
- Add a `ChannelTimeout` directive specifies how long an inactive channel should remain open before it is automatically closed.
- Add a `EnableEscapeCommandline` directive used to enable or disable the ability for users to enter escape commands on the command line.
- Add a `ObscureKeystrokeTiming` directive used to add random delays between keystrokes to make it more difficult for an attacker to infer the content of typed data based on the timing of keystrokes.
### Removed
- Remove support for `.coressh` backup file format.
### Changed
- A more reliable iCloud synchronization method.
### Fixed
- Fixed randomly crash issues
Special thanks David Olrik (@davidolrik) for helping this release.
[Version 3.8.9] - 2024-06-03
Version 3.8.9 is a hotfix release for fixing:
- Can not import private key to Identity Container
Special thanks to Andrey Ketov (@Andrey) for helping this release.
3.10 11/08/2024
Version 3.8.9 is a hotfix release for fixing:
- Can not import private key to Identity Container
Special thanks to Andrey Ketov (@Andrey) for helping this release.
3.8.9 03/06/2024
Version 3.8.8 is a hotfix release for fixing:
- Add `PKCS11Provider` support (work with OpenSC, YubiKey and Nitrokey)
- Fix Premium license transfer from App Store version to Codinn Store version
Special thanks to @lauris, @Yuriy, @priller and @uthyr for helping this release.
3.8.8 30/05/2024
Starting with 3.8.6, App Store version of Core Tunnel abandons Core Helper.
Use Codinn Store version of Core Tunnel following features are mandatory:
- Access authentication agent
- Obtain configuration data from ~/.ssh/config and /etc/ssh/ssh_config
- Use `ProxyCommand`, `ForwardX11`, `LocalCommand` and other advanced directives
To learn about Codinn Store and App Store versions, please visit: https://community.codinn.com/t/4590
3.8.6 21/05/2024
- Add site and community links in Help menu.
- Security enhancements and minor bug fixes.
## Updates in Version 3.6.1
Version 3.6.1 is a hotfix release for fixing:
- Could not use embedded OpenSSH (@priller).
## Updates in Version 3.6
The codebase of embedded OpenSSH has been updated to version 8.8. See https://community.codinn.com/t/3652/2 for the OpenSSH changes.
### Added
- Add a new `LogVerbose` configuration directive, this option is intended for OpenSSH debugging and is not enabled by default.
- Add a `PermitRemoteOpen` option that allows the client to restrict the destination when reverse dynamic forwarding is used with SOCKS.
- Add a `KnownHostsCommand` option that allows the client to obtain `known_hosts` data from a command in addition to the usual files.
### Changed
- Rename the `PubkeyAcceptedKeyTypes` directive to `PubkeyAcceptedAlgorithms` in advanced options.
- Similarly, rename `HostbasedKeyTypes` to `HostbasedAcceptedAlgorithms`.
- Remove `ChallengeResponseAuthentication` directive in favour of `KbdInteractiveAuthentication`.
- Always display fingerprint context while prompting user to confirm host key (@kaffeeundsalz).
- Specifies the port number to connect on the remote host explicitly in equivalent command (@liushuai).
Special thanks to @kaffeeundsalz, @fastzombies and Shuai Liu (@liushuai) for helping this release.
3.6.2 11/12/2021
Version 3.6.1 is a hotfix release for fixing:
- Could not use embedded OpenSSH (@priller).
## Updates in Version 3.6
The codebase of embedded OpenSSH has been updated to version 8.8. See https://community.codinn.com/t/3652/2 for the OpenSSH changes.
### Added
- Add a new `LogVerbose` configuration directive, this option is intended for OpenSSH debugging and is not enabled by default.
- Add a `PermitRemoteOpen` option that allows the client to restrict the destination when reverse dynamic forwarding is used with SOCKS.
- Add a `KnownHostsCommand` option that allows the client to obtain `known_hosts` data from a command in addition to the usual files.
### Changed
- Rename the `PubkeyAcceptedKeyTypes` directive to `PubkeyAcceptedAlgorithms` in advanced options.
- Similarly, rename `HostbasedKeyTypes` to `HostbasedAcceptedAlgorithms`.
- Remove `ChallengeResponseAuthentication` directive in favour of `KbdInteractiveAuthentication`.
- Always display fingerprint context while prompting user to confirm host key (@kaffeeundsalz).
- Specifies the port number to connect on the remote host explicitly in equivalent command (@liushuai).
Special thanks to @kaffeeundsalz, @fastzombies and Shuai Liu (@liushuai) for helping this release.
3.6.1 24/11/2021
The codebase of embedded OpenSSH has been updated to version 8.8. See https://community.codinn.com/t/3652/2 for the OpenSSH changes.
### Added
- Add a new `LogVerbose` configuration directive, this option is intended for OpenSSH debugging and is not enabled by default.
- Add a `PermitRemoteOpen` option that allows the client to restrict the destination when reverse dynamic forwarding is used with SOCKS.
- Add a `KnownHostsCommand` option that allows the client to obtain `known_hosts` data from a command in addition to the usual files.
### Changed
- Rename the `PubkeyAcceptedKeyTypes` directive to `PubkeyAcceptedAlgorithms` in advanced options.
- Similarly, rename `HostbasedKeyTypes` to `HostbasedAcceptedAlgorithms`.
- Remove `ChallengeResponseAuthentication` directive in favour of `KbdInteractiveAuthentication`.
- Always display fingerprint context while prompting user to confirm host key (@kaffeeundsalz).
- Specifies the port number to connect on the remote host explicitly in equivalent command (@liushuai).
Special thanks to @kaffeeundsalz, @fastzombies and Shuai Liu (@liushuai) for helping this release.
3.6 23/11/2021
Version 3.5.1 is a hotfix release for fixing:
- Crashes on importing profiles (@st0rk)
Special thanks to Miroslav (@st0rk) for helping this release.
## Updates in Version 3.5
This update brings known hosts and environment editing support, SSH multiplexing now is fully supported.
### Added
- View and delete known hosts in Preferences -> Advanced
- Set environment variables in Preferences -> Advanced (@aleksikallio)
- Full support for multiplexing directives (i.e. `ControlPath` and `ControlMaster`) (@kajotac, @jimcovert, @bmorgenthaler)
- Add a new option to opt out of requesting session on the remote system, useful for just forwarding ports (@rissatto)
### Fixed
- CryptorRSA error on connecting, incomplete revision in version 3.0.1 (@zenisca, @greg.bodine)
- Could not disconnect a multiplex client (@bmorgenthaler)
### Removed
- Remove `ControlPersist` directive from advanced options, the master ssh connection closed along with the tunnel
Special thanks to Aleksi Kallio (@aleksikallio), Elison Rissatto (@rissatto), Kennie Cruz (@kajotac), @jimcovert, @bmorgenthaler, @zenisca and Greg Bodine (@greg.bodine) for helping this release.
3.5.1 16/09/2021
This update brings known hosts and environment editing support, SSH multiplexing now is fully supported.
### Added
- View and delete known hosts in Preferences -> Advanced
- Set environment variables in Preferences -> Advanced (@aleksikallio)
- Full support for multiplexing directives (i.e. `ControlPath` and `ControlMaster`) (@kajotac, @jimcovert, @bmorgenthaler)
- Add a new option to opt out of requesting session on the remote system, useful for just forwarding ports (@rissatto)
### Fixed
- CryptorRSA error on connecting, incomplete revision in version 3.0.1 (@zenisca, @greg.bodine)
- Could not disconnect a multiplex client (@bmorgenthaler)
### Removed
- Remove `ControlPersist` directive from advanced options, the master ssh connection closed along with the tunnel
Special thanks to Aleksi Kallio (@aleksikallio), Elison Rissatto (@rissatto), Kennie Cruz (@kajotac), @jimcovert, @bmorgenthaler, @zenisca and Greg Bodine (@greg.bodine) for helping this release.
3.5 09/09/2021
Version 3.0.1 is a hotfix release for fixing:
- CryptorRSA error on connecting (@Cristian_Amicelli, @felasfa)
Special thanks to Cristian Amicelli (@Cristian_Amicelli) and Felasfa Wodajo (@felasfa) for helping this release.
## Updates in Core Tunnel 3.0
This update brings native support for Apple Silicon (M1) Macs.
### Added
- Native support Macs with Apple silicon (M1)
- Send notification when connection status has changed (@davidolrik)
### Changed
- Improve support for macOS 11 (@mittalyashu)
- More reliable and stable profile sync (@daveverwer)
- Avoid duplicate profiles (@daveverwer)
- Stop retry on host key verification failed (@zhenLEE)
### Fixed
- Connection log and stderr output was truncated (@zhenLEE)
- Crash at app start-up (@C_Eddie)
- Show expiry alert mistakenly (@blackseafisher)
Special thanks to @blackseafisher, C Eddie (@C_Eddie), Dave Verwer (@daveverwer), David Olrik (@davidolrik) and @zhenLEE for helping this release.
3.0.1 09/08/2021
This update brings native support for Apple Silicon (M1) Macs.
### Added
- Native support Macs with Apple silicon (M1)
- Send notification when connection status has changed (@davidolrik)
### Changed
- Improve support for macOS 11 (@mittalyashu)
- More reliable and stable profile sync (@daveverwer)
- Avoid duplicate profiles (@daveverwer)
- Stop retry on host key verification failed (@zhenLEE)
### Fixed
- Connection log and stderr output was truncated (@zhenLEE)
- Crash at app start-up (@C_Eddie)
- Show expiry alert mistakenly (@blackseafisher)
Special thanks to @blackseafisher, C Eddie (@C_Eddie), Dave Verwer (@daveverwer), David Olrik (@davidolrik) and @zhenLEE for helping this release.
3.0 04/08/2021
This update adds Spanish language support, with contribution from Juan Pablo Atienza Martínez.
### Added
- Spanish localization (@Juan_Pablo_Atienza_M)
### Changed
- Improve macOS 11.0 compatibility
### Fixed
- Forwarding ports of the last tunnel take over related settings of other tunnels mistakenly (@Brendan_Gifford, @gpretlove)
- Authentication dialog may truncate the text input box if the prompt string has 32 or more characters (@teowood)
Special thanks to Juan Pablo Atienza Martínez (@Juan_Pablo_Atienza_M), Brendan Gifford (@Brendan_Gifford), @gpretlove and @teowood for helping this release.
2.6 03/12/2020
Core Tunnel 2.5.1 fixes an issue may lead heavy CPU usage while editing tunnel name.
The codebase of embedded OpenSSH component has been updated to version 8.4. See https://www.openssh.com/releasenotes.html#8.4p1 for the OpenSSH changes.
Special thanks to Jean-Francois Turcot (@jfturcot), Alexander Saar (@Alexander_Saar) for helping this release.
2.5.1 14/10/2020
Core Tunnel 2.5 improves the internal architecture, also fixes an issue could potentially leads empty profile list.
### Changed
- Imporve the internal architecture
### Fixed
- Fix an issue could potentially leads empty profile list (@Les)
- Lots of minor bugfixes
Special thanks to @Les for helping this release.
2.5 28/09/2020
This hotfix release is for repairing incorrect profile row height on macOS 10.14.
Special thanks to Aman Garg (@isopropylcyanide) for reporting the issue.
2.4.1 15/08/2020
With this update you can pin tunnels to the top of list.
Also, the codebase of embedded OpenSSH component has been updated to version 8.3. For more information about this update, please see https://community.codinn.com/t/2886
### Added
- Pin/unpin to manage your tunnels in a more efficient way
- Report Core Helper version in connection log
- Send notification when connection status has changed (@davidolrik)
### Changed
- Expand tilde (~) path in `ProxyCommand` directive (@hupo)
- Support tilde (~) path for `Include` directive (@mlist)
### Fixed
- Improve app launch time and security (@utkonos)
- Stop retrying if host key verification failed
- Other minor bug fixes
Special thanks to Christian Link (@mlist), David Olrik (@davidolrik), @utkonos and @hupo for helping this release.
2.2 05/07/2020
This update focuses on interoperability, Core Tunnel can now launch and open a Core Shell window by clicking "Open Shell" button, without creating a host profile in Core Shell up front.
### Added
- New button for opening a Core Shell window using tunnel's configuration
### Changed
- SSH: update the codebase of embedded OpenSSH from version 7.9 to 8.0
### Fixed
- Some part of quick help are not clear in Dark mode
- Fixed some bugs may potentially lead crashes
1.8 03/09/2019
This release includes several improvements and fixes for macOS 27 compatibility.
Special thanks to Bart Busschots (@bart.busschots) and @qinhong.wang for their feedback and help with this release.
more Version 5.1.1 3 days ago
Data Not Collected The developer does not collect any data from this app.