Security

HostnExtra Tunnel relies entirely on the system OpenSSH client for authentication and encrypted communication.

Authentication is never reimplemented by the plugin.

HostnExtra Tunnel Never Stores

• Passwords
• SSH private keys
• SSH agent data
• Authentication tokens
• Secrets

Tunnel profiles contain only forwarding rules such as:

• Remote host
• Remote port
• Local host
• Local port

OpenSSH Authentication

Authentication methods are provided by OpenSSH, including:

• Public key authentication
• SSH Agent
• Hardware security keys
• Password authentication (when enabled)

Because authentication is handled by OpenSSH, HostnExtra Tunnel integrates naturally with existing SSH workflows while keeping sensitive credentials under your control.