Varco

app.varco

Modern SSH with post-quantum key exchange and keys in the phone's secure chip.

Varco is an SSH client. It uses the Termux terminal engine, so vim, htop, tmux and other full-screen programs work correctly. New keys are made in the phone's secure chip, and the private key can never go out of the chip. No trackers, no Google Play Services. Varco has a small number of features, and thus a small attack surface. It does not have port forwarding, jump hosts, Mosh, agent forwarding or FIDO2 security keys. - **Terminal**: true colour, mouse, an extra-keys bar and pinch to zoom. - **Sessions**: more than one at the same time. A reconnect keeps the screen and the scrollback. - **Keys**: Ed25519 or ECDSA P-256 in the secure chip, YubiKey PIV over NFC and USB-C, and imported OpenSSH keys. - **Import from Termux**: keys, `~/.ssh/config`, `known_hosts`, colours and font. - **SFTP file browser**, **snippets** and **13 colour schemes**.

First release: Oct 31, 2026, 1 total release.

Most recent release: Oct 31, 2026.

Repo

Appears in 1 app stack.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

Oct 31, 2026 0.2.2

Varco has the arrow keys on the right of the key bar, as on a computer keyboard. Three problems that could stop the app and close all sessions are fixed. Requires Android 15 or later. It runs on all ABIs because the APK has no native code. Update from 0.2.1 in place: the signing key is the same. **Changed** - The arrow keys are on the right of the key bar, in the layout of a computer keyboard: ↑ is on the top row, above ↓, and ←, ↓ and → are on the bottom row. The other keys stay on the left in the same order. ALT is now at the start of the bottom row. Each key keeps its size and the 48 dp row height. - Back during a text selection in the terminal ends the selection, and the terminal stays open. Before, Back went to Home. - The text selection toolbar shows only Copy and Paste. Before, it also had a "More…" item that did nothing and ended the selection. - Files cuts a long path at the start, so that you can see the open folder (for example `…/projects/varco`). A server name in the title is still cut at the end. - All text in the app is in English, also the text that comes from libraries. Before, some TalkBack words (for example "Close sheet", "On" and "Off") were in the language of the phone.

More…

- The APK is about 150 KB smaller, about 3.5 MB. **Fixed** - If Varco cannot make its data file, for example when the storage is full, the app does not stop now. Before, the app stopped and closed all sessions after each connection and each settings change. Varco tries to save again at the next change. - A USB security key without a smart-card interface (for example a FIDO-only key, or a YubiKey with CCID off) does not stop the app now. The sign-in fails with an error in that tab. Before, the app stopped and closed all sessions. - Colours that a server sets (OSC 4 and OSC 10 to 12, for example from base16-shell or pywal) stay when you go back to the terminal from Files, Settings or Home, or after you unlock the app. Before, Varco reset these colours in all tabs. A change of colour scheme still resets all tabs. - After you delete a key, Varco shows the Keys list. Before, it went back to Home. **Privacy and security** - A server cannot stop Varco with a folder listing that has the same name two times. Before, a bad server could stop the app and close the sessions to all other servers. Files now shows each name one time. - Varco does not have the unused autofill code of the terminal engine now. This code could write text into the shell without the safe paste filter. It did not run, and the terminal stays excluded from autofill. - The "More…" item kept a copy of the selected terminal text in memory. The item and the copy are gone. - The APK does not contain the list of AndroidX library versions now. | File | Use | |---|---| | `Varco-0.2.2.apk` | Release build, signed. | SHA-256: - `Varco-0.2.2.apk`: `2581f040c0ac4267cd878c67517f64387a8cb07664dff3c93be8b58f61375541` Signing certificate SHA-256: `c1:c9:b7:b7:7e:23:d0:28:d1:55:ce:ae:f9:6f:80:b8:b1:8b:f6:92:22:b2:ef:c6:ff:7f:ff:1e:99:b0:a9:d9` Check the certificate with `apksigner verify --print-certs Varco-0.2.2.apk` or with AppVerifier. Do not install an APK with a different certificate.