Retrace · Dragon Fractal

Your servers, from your pocket.

A file browser for SFTP, S3 and FTP with a terminal aesthetic and no opinions about where your files should live. No account, no backend, nothing reporting back.

Retrace's host list, showing saved S3, SFTP and FTP servers grouped into favourites, local and remotes. — Everywhere you go, in one list

A remote directory listing over SFTP, with permission bits beside each name. — Permission bits, because you asked for a terminal

The keys screen, showing two SSH keys each badged STRONGBOX. — Keys the chip will not hand over

Settings, showing five phosphor palettes, a terminal theme importer and pinned known hosts. — Five phosphors, or bring your own

What it connects to

SFTP

Password or key. The host key is shown as a fingerprint and randomart the first time, pinned after that, and refused if it changes.

Amazon S3

Static access keys, or sign in with IAM Identity Center. Storage classes are badged; a restore you cannot do is not offered.

FTP and FTPS

Explicit TLS, passive or active. If a server offers no encryption, Retrace says so before your password crosses, not after.

This device

Internal storage and any folder you grant. Downloads land in the normal Downloads folder where every other app can see them.

Keys that do not leave the chip StrongBox

Retrace can generate an SSH key inside your phone's secure hardware — StrongBox on devices that have it, the processor's secure world on devices that do not. The private half cannot be exported. Not by Retrace, not by anything. Signing is a request to the chip.

You choose how often that request needs your fingerprint: every single signature, or once for a window you pick. The chip enforces that, not the app. Every key is badged with the protection it actually got, and the badge never claims more than the hardware gave.

A key that cannot be exported also cannot be backed up. Keep a second way in to anything that matters.

Moving things

Transfers run in a queue you can watch, survive the app going to the background, and resume rather than restart. Copy between two servers and the bytes route through the device. Drag a file onto a folder — or onto another server in the pane beside it.

Reading things

Look inside archives without extracting them. Markdown, CSV and TSV, JSON and YAML, photos with their EXIF. Follow a log file as it is written to, over the wire.

No account, no server, no telemetry

Retrace has no backend. There is nothing to sign up for. It contacts the servers you type in and nothing else, collects nothing about you, and has no analytics of any kind. Your credentials stay on the device. The privacy policy is short for that reason.

Getting it

Retrace is coming to Google Play. iOS will follow.

Questions, or want to hear when it ships: retrace@dragonfractal.com