Tunnel Browser

TUNNEL BROWSER · iPHONE · iOS 17+

Understand requests.
Choose your connection.

An independent iPhone browser combining your own SSH server with in-app NET diagnostics. Find setup guidance, support and our privacy policy here.

Contact support Read the privacy policy →

In-app browsing onlyNo proxy for Safari or other apps

Bring your own SSH serverNo server service is provided

Sharing is your choiceReview diagnostics before exporting

GETTING STARTED

Set up your connection. Then inspect.

  1. Add an SSH host

    Open Tunnel from the browser tools menu. Enter a host, port, username and authentication details for a server you are authorized to use. The server must permit SSH TCP forwarding.

  2. Verify the host fingerprint

    Before trusting a server for the first time, verify its SSH host key fingerprint with its administrator. Investigate any later fingerprint change before proceeding.

  3. Check the Tunnel state

    When enabled, the Tunnel carries supported browsing and downloads within this app. Normal connections are used when the Tunnel is not enabled. An unexpected Tunnel interruption retains the proxy configuration to block direct fallback for that proxy route.

  4. Turn on NET when needed

    Enable capture in the tab you want to inspect. View requests or export a HAR. Capture is partial and may not include every request, header or response body.

COMMON QUESTIONS

A few useful details.

Is this a device-wide VPN?

No. The app uses an in-app SSH/SOCKS proxy and does not establish a device-wide VPN. Safari, Chrome, other apps, externally opened services and unsupported traffic are outside its scope. UDP and WebRTC routing through SSH is not promised.

What if SSH fails or browsing stops after returning to the app?

Check the host, port, credentials and the server's TCP forwarding settings. iOS may suspend background apps; check the Tunnel state after returning and reconnect if necessary. Do not bypass an unexplained host fingerprint change.

Why is a HAR not a complete packet capture?

NET uses data available from the WebView and page APIs. Cross-origin restrictions, API limitations and local capture limits can make headers, bodies or timing information unavailable. It is not a system-wide packet capture tool.

How do I remove local data and SSH credentials?

Clear browsing data, downloads, saved website passwords and NET records in their respective interfaces. Deleting an SSH host removes its settings and credentials saved by this app. Clearing browsing data does not erase SSH settings or Keychain items. Copies already shared outside the app or retained in backups must be managed separately.

Is this an official DuckDuckGo app or the Safari PageScope app?

No. Tunnel Browser is an independent derivative based on DuckDuckGo open-source software, without affiliation or endorsement. Its built-in NET diagnostics are separate from the PageScope Safari app/extension and do not route system Safari traffic through this Tunnel.

NEED HELP?

Email our support team.

Include your app version, iOS version, steps to reproduce and the displayed error message. Do not send SSH passwords, private keys, cookies, Authorization headers, tokens or unreviewed HAR files.

This support/policy site has no online account, sign-in or file-upload form. Email is sent through your chosen mail service.