What's new in WeShell — features, improvements, and fixes.
v1.6
Aug 14, 2026
Host key verification & broadcast mode
Security
SSH host key verification — WeShell now verifies SSH server identity on every connection. The first time you connect to a server, its SHA-256 fingerprint is shown and you choose to trust it. On subsequent connections, the fingerprint is checked automatically — any change triggers a warning, protecting you against man-in-the-middle attacks.
MITM detection — if a server's host key changes since your last connection, WeShell blocks the session and shows a clear warning before allowing you to update the trusted key.
Opt-in per server — verification is disabled by default and can be enabled per server in its settings, so the experience stays smooth for those who don't need it.
New
Broadcast mode — new button in the terminal toolbar. When active, everything you type is sent simultaneously to all connected tabs. Useful for running the same command across multiple servers at once. Active tabs are highlighted in amber so you always know when broadcast is on.
v1.5
Aug 5, 2026
Server groups & reliability
New
Server groups — organize your servers into named, color-coded folders. Create groups directly from the dashboard and assign servers to them when adding or editing.
Collapsible sections — each group is an independent collapsible row. Collapse state is saved per browser so your layout persists across sessions.
Color picker — choose from 7 accent colors to visually distinguish groups (production, staging, dev…).
Safe deletion — deleting a group keeps all its servers intact; they move to the ungrouped section automatically.
Security
Session limit — each account is limited to 5 simultaneous SSH sessions. Need more? Contact us at contact@weshell.io.
Fixed
MFA reminder now persists across browser sessions — dismissing it snoozes it for 30 days instead of until the tab is closed.
Activity log filter fields no longer get auto-filled by the browser with unrelated values.
v1.4
Jul 31, 2026
Live session sharing & command snippets
New
Live session sharing — generate a read-only link to your active terminal. Anyone with the link can watch your session live in their browser, no account needed. Link expires after 4 hours or when the session ends.
Command snippets — save frequently used commands with a label and replay them in one click from the terminal sidebar. Snippets can be global (all servers) or scoped to a specific server.
Viewer count — see in real-time how many people are watching your shared session directly in the toolbar.
Improved
Browser tab title now updates when switching between terminal tabs.
Snippet edit mode: modify an existing snippet directly from the panel without deleting and re-creating it.
v1.3
Jul 30, 2026
Multi-tab terminal sessions
New
Multiple sessions in one window — open as many SSH connections as you need in separate tabs, all within the same terminal window. Each tab is fully independent with its own WebSocket and xterm.js instance.
Session status indicators — each tab shows a colored dot: orange (connecting), green (connected), red (error), grey (closed).
"+" button — open a new session modal from the tab bar, with server selection and saved private key pre-fill from localStorage.
Improved
Private key saved indicator shown when selecting a server that has a stored key.
v1.2
Jun 29, 2026
Security, SFTP & account management
New
SFTP file transfer — upload and download files directly from the dashboard, with a full transfer audit log.
Email change with verification — change your account email via a secure double-confirmation token flow.
SSH connection test — test a server's connectivity before opening a full terminal session.
Admin email notifications — admins receive an email on every new user registration.
Improved
Password strength meter now shown in the profile modal's password change section.
Mobile layout: server list and terminal bottom no longer clipped on small screens.
Resend verification email link available directly on the verify page.
Fix
Chrome autofill white background on all input fields.
Hardcoded French strings in forgot-password and reset-password pages.
MFA "Enter manually" label hardcoded in French regardless of language setting.
v1.1
May 2026
Internationalization & privacy
New
French / English i18n — full interface available in both languages with a language toggle.
Privacy policy & Terms of service — bilingual legal pages.
Contact page — with email and GitHub Issues link.
Forgot password flow — email-based password reset with secure token.
v1.0
Apr 2026
Initial release
New
Web SSH terminal — full xterm.js terminal in the browser with color support, auto-resize, and copy-paste.
Zero credentials stored — SSH passwords and private keys transit encrypted and are never written to disk.
MFA / TOTP — two-factor authentication compatible with Google Authenticator and Authy.
Server directory — save servers with host, port, user, and auth type for one-click reconnection.
Session audit trail — every connection logged with user, server, IP, start/end time, and duration.
Multi-user with roles — admin and user roles, each with isolated server lists and session history.
Private key support — connect with PEM private keys, with optional passphrase, stored locally in the browser.