Now with embedded RDP on macOS and Linux

Every remote connection. One encrypted vault.

Riftgate is a remote connection manager for RDP, SSH, VNC, web and file transfer, with a zero-knowledge vault that syncs across Windows, macOS, Linux and the browser.

Download free See pricing

Windows macOS Linux

Riftgate · vault unlocked

Favourites
dc01.corp.local
edge-router
Production
web-01 · ssh
web-02 · ssh
sql-01 · rdp
Lab
pfSense console
build-mac · vnc

web-01 · sshdc01 · rdpsql-01 · rdp

Host key accepted (trust on first use): SHA256:9fK2…Qx
admin@web-01:~$ systemctl status nginx
● nginx.service - A high performance web server
     Active: active (running) since Sat 09:41:02
   Main PID: 1182 (nginx)
      Tasks: 5 (limit: 4557)
admin@web-01:~$ uptime
 09:52:13 up 41 days,  3:07,  1 user,  load average: 0.08, 0.05, 0.01
admin@web-01:~$

Features

One app for every way you connect

Stop juggling a terminal, an RDP client, a VNC viewer and a password manager. Riftgate puts them in tabs, behind one vault.

Embedded RDP everywhere

Native Microsoft RDP on Windows, IronRDP on macOS and Linux: sessions open in tabs, with certificate pinning on first connect.

SSH & Telnet terminals

xterm-grade terminal, port forwarding (local, remote, SOCKS), agent forwarding, host key trust on first use.

VNC built in

RFB 3.3–3.8 client with scaling, view-only mode, Ctrl+Alt+Del and optional clipboard sync.

SFTP & FTPS

Dual-pane file transfer with a queue, folder recursion, resume-safe downloads and certificate pinning.

Web entries

Open admin consoles in an embedded browser with origin-locked autofill of the saved login.

Connection chains

Hop through an SSH jump host or a VPN (OpenVPN, WireGuard) before connecting, automatically.

All features

Zero knowledge

We can't read your vault. By design.

Your master password stays on your device. It derives the key that encrypts each entry before it is synced, so our servers only ever hold ciphertext.

How the encryption works

Argon2id + AES-256-GCM

Memory-hard key derivation and authenticated encryption for every entry.

Server sees ciphertext only

Pinned certificates

RDP, SSH, SFTP and FTPS servers are trusted on first use and checked every time after.

Pricing

Free on one computer. Cheap everywhere.

Free

$0forever

Everything you need on one computer.

All protocols on Windows, macOS and Linux
Local encrypted vault
Unlimited entries
Import from other managers

Download

Personal

Pro

$9per month

For admins who live in sessions.

Everything in Personal
Unlimited entry history
Encrypted audit log export
Priority support

Get started

Team

Custom

Shared vaults for small IT teams.

Everything in Pro
Shared folders (coming soon)
Admin console & invites
Self-hosting option

Questions

Can Riftgate read my passwords?+

No. Your master password never leaves your device. It derives the key that encrypts every entry before upload, so the server only stores ciphertext it cannot open.

What happens if I forget my master password?+

Because we can't decrypt your vault, we can't reset it either. Keep your master password safe, and enable quick unlock on devices you trust.

Do I need an account to use it?+

No. The desktop app works fully offline with a local vault. An account only adds sync and the web vault.

Can I self-host the sync server?+

Yes: the server ships as a Docker image with a ready-made Compose file.

Which RDP features work on macOS and Linux?+

The embedded client covers TLS/NLA, keyboard, mouse, dynamic resolution and certificate pinning. Gateway, clipboard and device redirection use the system client for now.