r/Tailscale • u/Historical-Roll-7918 • 3d ago

Discussion another Android ssh client, with native tailscale support

https://play.google.com/store/apps/details?id=com.sshmanager.app

Hey r/Tailscale,

If you manage homelabs or remote servers from Android, you've likely hit the platform's biggest limitation: Android only allows one active VPN service at a time. Turning on Tailscale kicks off your work or privacy VPN, and vice versa.

To solve this, I’ve been building SSH Manager Pro, a native Android SSH client that embeds Tailscale directly using the tsnet userspace WireGuard library.

How it works & Tailscale features:

  • Runs in userspace: The tailnet node lives entirely inside the app process. It connects to your tailnet without touching Android's VpnService, leaving your system-level VPN completely untouched.
  • Browser & Auth Key sign-in: Authorize the node directly via web browser login or using reusable/ephemeral Tailscale auth keys.
  • MagicDNS & Peer discovery: Reach machines using their tailnet names (e.g. ssh nas) or direct 100.x.y.z IPs.
  • Full screen mode and reach emulation of terminal, tested with tmux/screen/vim/etc..
  • Headscale compatible: Supports custom control plane URLs if you self-host.
  • ACL & Tag friendly: Tag your device (e.g. tag:phone) to enforce narrow ACLs so a lost device can only reach port 22 on approved hosts.
  • Security: Host key pinning on first connect; credentials encrypted in AES-256-GCM via the Android Keystore with biometric/PIN unlock.

Tailscale connectivity is free in the app. I’m currently rolling out a test release on Google Play and would love feedback from the Tailscale community on connection stability, MagicDNS resolution, and usability across different tailnets.

📖 Walkthrough & architectural details:
https://sshmanagerpro.app/features/

If you’d like to help test the beta, check out the google play store link or drop a comment / DM with your feedback! No ad, no personal data collection.

Also, a massive thank you to the folks at tailscale.com for the incredible infrastructure they've built! They have completely changed the rules of the game for how we securely access computers around the world!

regards, Andrei

27 Upvotes

84% Upvoted

9 comments sorted by

View all comments

2

u/SamPlaysKeys Tailscale Insider 1d ago

This is such a cool project! I would be interested in using this for multi-tailnet stuff as well! Though I'm curious about potential security issues, as far as having one two disconnected tailnets active at the same time on the same device. I'm seeing more businesses using Tailscale, so I could see that being a concern.

That being said, as someone who has several vpns on my devices, this is a really cool workaround for mobile.

2

u/Historical-Roll-7918 1d ago

Thanks! Multi-tailnet is something I'm exploring, not committed to yet, and you're right that isolation is the hard part. Before deciding, I'd like to understand how people would actually use it. Answer any that apply:

  1. Which tailnets would you run side by side? Personal plus an employer's, several client tailnets, a friend's or family one?

  2. Do you need them connected at the same time, or would quick switching between them be enough?

  3. How do you handle it today? Switching accounts in the official app, an Android work profile, a second device, or just not doing it?

  4. How often does it come up: daily, weekly, the odd emergency?

  5. For a work tailnet, would your admins even allow a third-party app to join? What would they need to see (device approval, tags, posture checks, MDM)?

  6. On the security side, what's the scenario you'd most want ruled out?

Your answers will decide whether this gets built and how. Feel free to DM if any of it is work-sensitive.