Open source under AGPLv3. No telemetry. No ads. No account.

Download

Channel	Notes
F-Droid	Built from source, auto-updated, recommended for most users.
GitHub Releases	Signed APKs (arm64 & x86_64), released first, same binary as F-Droid.

Both builds are identical. Minimum Android 8.0 (API 26).

Screenshots

At a glance

• Terminal — Mosh, Eternal Terminal, and SSH sessions with tmux/zellij/screen session restore, configurable keyboard toolbar, and OSC 52 / 8 / 9 / 777 / 7 / 133 integration.
• Desktop — VNC (RFB 3.8 with VeNCrypt), RDP (via IronRDP, with EGFX graphics pipeline), a GPU-accelerated native Wayland compositor (labwc on GLES2), and a multi-distro local-desktop manager (Alpine/Debian/Arch/Void, with Xfce4/Openbox X11 and Sway nested-Wayland desktops).
• Files — Unified browser for SFTP/SCP, SMB, 60+ cloud providers (rclone), and Reticulum mesh. Multi-select, built-in text editor, image tools, chmod, cross-filesystem copy/move, USB SD card roots.
• Media — Transcode and stream on-device with FFmpeg 8.0. HLS streaming to the LAN; DLNA server for cloud media.
• Keys — On-device Ed25519 / RSA / ECDSA generation, FIDO2/SK hardware keys (NFC + USB), deploy-key helper.
• Connections — Host-key TOFU, port forwarding (-L / -R / -D / -J), SOCKS / HTTP proxies, Tor, ProxyJump, per-app WireGuard and Tailscale tunnels (userspace, no system VPN slot).
• Local shell — Alpine, Debian, Arch, or Void via PRoot, side-by-side, no root required.
• Reticulum — rnsh shell, file transfer (browse/download/upload), and -L/-D port forwarding over Reticulum mesh networks, pure Kotlin. The one transport that keeps working with no internet at all.
• Security — Biometric lock, no telemetry, encrypted backup/restore (AES-256-GCM).

Full detail on the Features page.

Why Haven?

• One app covers the whole loop. SSH + Mosh + ET + VNC + RDP + SFTP + cloud storage + on-device Linux + media transcode, from a single tab bar.
• No telemetry, no ads, no account. Nothing is phoned home. See the privacy policy.
• Per-app tunnels. Route individual SSH profiles through WireGuard or Tailscale without taking Android’s one VPN slot — other apps keep using the direct network.
• Native everything. FFmpeg, labwc, IronRDP, rclone, and the Kotlin Reticulum transport are all compiled from source — no Python runtime, no Chaquopy.
• Ships often. Releases reach F-Droid within 24 hours via an automated MR. See the release history.

Build from source

Requires Rust with Android targets, cargo-ndk, Go 1.26+, and gomobile:

# Rust (for RDP)
rustup target add aarch64-linux-android x86_64-linux-android
cargo install cargo-ndk

# Go (for rclone cloud storage)
go install golang.org/x/mobile/cmd/gomobile@latest
go install golang.org/x/mobile/cmd/gobind@latest

git clone --recurse-submodules https://github.com/GlassHaven/Haven.git
cd Haven
./gradlew assembleDebug

Output lands in app/build/outputs/apk/debug/haven-*-debug.apk.

Issues, requests, feedback

• GitHub issues — bugs and feature requests.
• Ko-fi — if you want to say thanks.

Documentation

• Features — detailed feature reference.
• Privacy policy.
• Source code.

---

_{Haven is open source under AGPLv3. · Android is a trademark of Google LLC.}