I'm Dustin Kirkland, author of Byobu[1]. I built Trustmux[2] to solve a personal problem: secure, encrypted access to my tmux[3] and Byobu sessions from my phone, without the pain of other mobile shell approaches.

I run long-lived shells, Claude, and other sessions in the background on my workstation, and I needed to check in from mobile — securely, with real TLS certificates and Tailscale-backed privacy, not some insecure workaround.

Why not SSH / Mosh / Claude Mobile?

- SSH/Mosh: Synchronous connection state is brutal on mobile. Latency, network handoffs between WiFi and cellular, laggy UX — neither felt designed for how people actually use phones. - Claude Mobile: Great for Claude, but locked to Claude. I wanted tool flexibility — shell commands, multiple code assistants, whatever's running in my tmux session.

The key insight behind Trustmux: mobile terminal access needs to be asynchronous, not synchronous. Connect, run a command, disconnect — without maintaining fragile connection state the whole time.

Trustmux

A lightweight daemon that provides access to your tmux or Byobu sessions as a secure PWA (Progressive Web App). Real TLS certificates, encrypted end-to-end. Two deployment options:

- Tailscale: Automatic cert provisioning via tailscale serve, zero-trust networking, seamless pairing with a 6-digit code. Your workstation binds to your Tailscale IP — private, encrypted, no port forwarding. - Direct networking: Or, you can run Trustmux have it bind to your local network address and handle the port forwarding yourself. - Self-managed: You can use Tailscale's certificate provisioning, or bring your own certificate, or use self-signed certs too.

I've been running this in production on my own workstation for a while now. I recently flew to Australia and was able to keep nudging my jobs along back home, from somewhere over the Pacific with 700ms of latency and it was a like a dream come true!

Installation

Available on Ubuntu, Debian, and Fedora development repositories, plus pip, Homebrew, and PPA:

pip install trustmux # or brew tap dustinkirkland/trustmux brew install trustmux # or via PPA sudo add-apt-repository ppa:byobu/ppa && sudo apt install trustmux

Quick Start (3 commands)

trustmux enable # start at login trustmux start # fire up the daemon trustmux pair # generate pairing URL + 6-digit code (will show a qr code if qrencode is installed)

Open the URL on your phone browser, enter the code, tap "Add to Home Screen." Done.

Key Design Points

- Asynchronous by design: Connect, run commands, disconnect. No laggy synchronous state to babysit. - Real encryption: TLS certificates (real or self-signed), no compromises. Tailscale handles the network privacy layer (unless you want setup your firewalls and port forwards). - Lightweight mobile app: It's a PWA -- just a web interface. - Works offline: The UI shell is cached; reconnects silently when you're back online. - True multiplexing: Full access to all your tmux panes, windows, and sessions. Type, attach, detach — all from your phone. - Tool-agnostic: Use Claude, any other code assistant, shell commands — whatever you want in your tmux sessions.

Under the Hood

- Implemented in python, talks directly to tmux via libtmux, streams live terminal output asynchronously (no polling) - WebSocket-based updates keep the UI responsive even on slow connections - Uses Tailscale for network privacy (or bring your own network and/or cert) - Lightweight daemon — negligible CPU/memory overhead - PWA architecture: offline-capable, installable, updates silently in the background

The code is at https://github.com/dustinkirkland/byobu (trustmux is part of Byobu, GPLv3). The "tmux" at the end of "Trustmux" honors the "tmux" project and the awesome library that is libtmux, but Trustmux/Byobu are not affiliated with the Tmux project.

[1] https://byobu.org [2] https://trustmux.dev [3] https://tmux.us

Which Copyleft Licence Is Suitable for an SVG?

(How to Write a (Lisp) Interpreter (In Python))

Show HN: CommitGate – Automatically scan your commit for vulnerabilities

Why Early-Stage Founders Are Misunderstood by Everyone with a Normal Job

Olympian arrested for touching remnants of decaying Reflecting Pool: report

Show HN: Trustmux – Lightweight Secure Daemon for Mobile Shell Access

Occupancy Math on the AMD MI355X: A From-First-Principles Guide

Don't Do That PhD

Specs by Snapchat

I Still Live in the Terminal

Cotypist – Smart Autocomplete for Mac

Show HN: VS Code agent optimized for affordable coding plans

Tribes of Programming (2017)

Show HN: Agent Departures

Controversial Programming Opinions (2012)

Show HN: Browser-Based Video Converter

Europe buys the future, America builds it

Bending Emacs Ep. 14: Prototype iOS apps with agent-shell artist-mode and skills [video]

Ask HN: Why Do AI Credits Expire

Update Secure Boot Cert Before It Expires

Show HN: AI Convert – built from my Android phone, no laptop

PostmarketOS v26.06 (Alpen Avocado) released

Vagus Atlas Explorer

Show HN: Finikit – 33 free financial calculators, all in the browser

Xi Lang: create Microservices with built-in DI, compiled to a native binary

Is this blog written by AI?

My experience going through a startup incubator (2025)

The Scam Industry Is Booming [video][15 mins]

Show HN: One-Click Fork "Promo Video Studio (HyperFrames)" in Isolated MicroVM

Downtown S.F. tower promised a new kind of tech community