SSH Vault is a compact PowerShell WinForms app for managing and launching SSH hosts from your local OpenSSH config on Windows.
It was built as an SSH shortcut and bookmark tool for an OpenSSH-based workflow with Bitwarden-managed SSH keys.
- Reads hosts from
%USERPROFILE%\.ssh\config - Supports
Includedirectives in SSH config files - Starts SSH sessions via
cmd.exe - Search and filter hosts
- Multi-tag support per host
- Include and exclude tag filters
- Optional sorting by:
- host name
- tag, then host name
- Grouped host view when tag sorting is enabled
- Host management menu for creating and deleting hosts
- Reusable tags
- Persistent window size and position
- Persistent language and sorting settings
- German and English UI
- Built-in version check and self-update from GitHub
- Windows
- Windows PowerShell 5.1
- OpenSSH client (
ssh.exe) available inPATH
Run the app:
powershell.exe -ExecutionPolicy Bypass -File .\ssh-vault.ps1SSH Vault reads hosts from:
%USERPROFILE%\.ssh\config
Example:
Host web-prod
HostName 203.0.113.10
User root
Port 22The app also resolves OpenSSH Include directives and shows hosts from included config files.
You can manage hosts directly in the UI:
Hostopens a menu with:NeuLoeschen
Neucreates a newHostblock in the SSH configLoeschenremoves the selected host from the source config file
If a Host line contains multiple aliases, SSH Vault removes only the selected alias from that line.
Each host can have multiple tags.
Available functions:
- assign and remove tags
- reuse previously created tags
- filter by included tags
- filter by excluded tags
- combine tag filters with text search
When sorting by tag, the host list is grouped by tag.
Hosts without tags are shown in a separate group.
The Settings tab contains:
- language selection (
Deutsch,English) - sorting mode selection
- update check
- self-update from GitHub
Default language is Deutsch.
Note: after changing the language, restart the app.
The Info tab contains:
- app name
- author
- repository link
- current version
SSH Vault creates these files next to ssh-vault.ps1 if they do not exist:
ssh-host-meta.jsonssh-host-ui.json
They store:
- host tags
- known tags
- active include/exclude filters
- window size and position
- selected language
- selected sorting mode
SSH Vault compares the local $AppVersion with the version in:
https://raw.githubusercontent.com/kanuracer/ssh-vault/main/ssh-vault.ps1
An update is only offered when the GitHub version is newer than the local version.
Before updating, SSH Vault asks for confirmation and creates a backup:
ssh-vault.ps1.bak







