Reach - Cross-platform SSH client with Turso-powered encrypted vault sync

[alexandrosnt]

Hey! Wanted to share something I've been working on.

Reach is a cross-platform SSH client and remote management tool (Windows, macOS, Linux, Android). A modern alternative to PuTTY and MobaXterm, built with Tauri v2 (Rust) and Svelte 5.

One of the core features is an encrypted vault for SSH credentials, secrets, and keys. Everything is encrypted client-side with XChaCha20-Poly1305 + Argon2id before it ever leaves the device.

Where Turso comes in: we use libsql for local vault storage, and Turso as a remote database for syncing vaults across devices. Users connect their own Turso database through the app settings, and their
encrypted vault syncs between machines. Since everything is encrypted before it reaches Turso, the database only ever sees ciphertext.

We initially tried embedded replicas but hit some issues on Windows (libsql#2074), so we went with direct remote connections instead. Works great, and the setup is simple: users bring their own Turso org +
token, and sync just works. No custom backend needed.

Repo: https://github.com/alexandrosnt/Reach

Happy to answer questions about the integration!