Security

Passwords, private keys and their passphrases go to your operating system’s encrypted store: Keychain on macOS, Credential Manager on Windows and Secret Service (GNOME Keyring or KWallet) on Linux.

They’re never written to a Nodo file or its database, and the app’s interface never sees them: Nodo’s core, written in Rust, reads them from the keychain only when they’re needed to connect.

The first time you connect to a server, Nodo shows you its fingerprint so you can compare it with the real one, and saves it in Known hosts. If the fingerprint ever changes, it warns you clearly before going on.

Nodo creates ed25519-sk and ecdsa-sk SSH keys on any FIDO2 key, such as a YubiKey. The private part never leaves the key: every connection asks for a touch and, if you created it that way, the PIN.

On macOS and Linux Nodo talks to the key over USB; on Windows it’s used through OpenSSH’s ssh-agent. The server needs OpenSSH 8.2 or later.

Sync, team vaults and session logs are encrypted on your computer with Argon2id and XChaCha20-Poly1305. Only encrypted data reaches your cloud folder or WebDAV.

Only you and your team know the password; Nodo has no copy of it. To keep someone out of a vault, change its password.

The assistant and the agent send only what you ask for: your question and, if you tick the box, the last lines of the terminal, with the passwords and tokens Nodo recognizes hidden. The IDE agent also hides the values in .env files. With a model on your computer (Ollama, LM Studio, Jan), nothing leaves it.

The terminal assistant never runs a command without your confirmation. The IDE agent, in Manual mode, asks about every change and every command; you choose the other modes. The desktop AI blocks your keyboard and mouse while it works, and you can stop it at any moment.

The desktop can go through the server’s SSH tunnel, without opening its ports to the internet. Over RDP, Nodo negotiates TLS and checks the user and password with NLA; VNC can be encrypted with VeNCrypt.

If a server only supports the old RDP security, which encrypts with RC4, or an unencrypted VNC, Nodo tells you in the desktop toolbar.

Every update is signed with Nodo’s key, and the app verifies the signature before installing it: a tampered package is rejected.

The installers don’t carry Apple or Microsoft certificates yet, so your system warns you the first time. You can check every download with its SHA-256.

Nodo works without signing up and sends no usage data to anyone. The only thing it asks its website for is the file that says whether there’s a new release, when it opens and every six hours.

No cookies for visitors and nothing from third parties: fonts, styles and scripts are served from here, with a content security policy that blocks loading anything from elsewhere. Downloads are counted without keeping your IP.