A modern, web-based SSH console and SSH key management tool.

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things:

1. Web-based SSH terminal — once a host is registered, authorized users can open one or more live terminal sessions to it directly from the browser, with commands optionally broadcast across every open session at once (think tmux's synchronized panes, but for a fleet of remote hosts instead of local panes).

2. SSH key management — Bastillion holds its own SSH keypair and pushes/rotates public keys across the hosts you register, so individual users never need to hold or manage long-lived keys to those systems themselves.

• Log in with 2-factor authentication (Authy or Google Authenticator)
• Manage and distribute SSH public keys, and disable/rotate them centrally
• Launch secure multi-session web shells and share commands across sessions
• Record every session and replay it on demand — audit-ready evidence for any compliance framework
• Group systems into Profiles and control exactly who can reach what
• Save and re-run Composite Scripts across a whole fleet at once
• Stack TLS/SSL over SSH for extra protection

_{Three real, independent SSH sessions — one command, typed once, run everywhere.}

• How It Works
• What's New
• Licensing
• Installation Options
• Prerequisites
• Download and Run
• Build from Source
• TLS / HTTPS
• Configuration
• More Screenshots
• License

Bastillion sits between your users and the systems they need to reach, acting as a trusted third party rather than a simple password vault. Here's the whole lifecycle, end to end.

On first startup, before anything else, Bastillion generates an Ed25519 keypair for itself — this is the one key that ever gets pushed to your hosts. It's shown in the console output and always visible under Settings.

An admin adds a host under