Conchshell vs MobaXterm

MobaXterm is a Windows workstation in a box. It carries an X.Org-derived X server with automatic X11 forwarding, a Cygwin-derived local shell with bash, grep and rsync, roughly forty plugins, packet capture, a network scanner, and TFTP, NFS, HTTP and syslog daemons you can start from the toolbar. Nothing on this page competes with that list.

Conchshell is narrower on purpose. One window holds an SSH terminal, a two-pane SFTP and FTPS manager, RDP, and live monitoring of the host you are logged into: CPU, memory, disk and processes, bandwidth per interface, latency, active connections, and a log viewer that tails several files at once with level and regex filters.

The download is 9.1 MB and 18 MB on disk on Apple silicon, 20.6 MiB for the Intel build. Four SSH sessions measured 286 MB across seven processes on 3 August 2026 — macOS 26.5.2, Apple silicon, median of three probes — against 1388 MB and fifteen processes for an Electron-based client.

MobaXterm Home Edition is free with no clock on it, and, contrary to what gets repeated almost everywhere, its licence allows commercial use by the individual who downloaded and installed it. What it forbids is IT deploying it across a company, or several people sharing one install.

The caps are printed on Mobatek's own download page: "Max. 12 sessions", "Max. 2 SSH tunnels", "Max. 4 macros", "Max. 360 seconds for Tftp, Nfs and Cron". Their page does not say whether twelve means saved sessions or open ones. Two tunnels usually bites first.

Professional was $69, or 49 euros per user excluding tax, on 20 August 2026, falling to $41 at 501 seats. It is closer to a perpetual licence than a subscription: their conditions grant an irrevocable right to use the version you bought, and it is the year of updates that renews. The renewal price is published nowhere on their site, so the second year's cost is not knowable before you buy.

Conchshell has no tiers and no trial. The application is free on macOS, Windows and Linux. One feature is paid: syncing saved connections between your own machines, $19 once at the introductory price and $29 after it.

Neither product has a cloud and neither asks you to make an account. MobaXterm keeps everything in a single MobaXterm.ini, and its FAQ is blunt: no background internet connection, and no update check unless you click the menu entry. On an air-gapped network that is not a preference but the requirement, and MobaXterm meets it.

The two diverge at the second machine. MobaXterm exports and imports a sessions file, and can be launched against an INI on a share or an HTTPS URL, which works and which means you host and secure that file yourself. Conchshell exports connections, folders, profiles and settings as a JSON bundle at no cost; the $19 mirrors the encrypted vault into a folder you already sync, such as iCloud Drive, Dropbox or a git checkout.

On stored passwords, MobaXterm has offered a master password since v20.0 and can encrypt the whole configuration file since v25.2, but its documentation never names the algorithm. What is publicly known about the older scheme came from third-party reverse engineering; the static initialisation vector it used, CVE-2025-0714, was fixed in v25.0. Conchshell's vault is XChaCha20-Poly1305 with the key derived by Argon2id, and no command in the interface reads a password back out. Each credential is bound to its host, port, user, proxy chain and jump host.

• Your desktop is a Mac or a Linux box. MobaXterm has never had a native build for either, and Wine or CrossOver is a supported path rather than a port.
• You use more than one machine and want the host lists to agree, without hosting an INI on a share and securing it yourself.
• Twelve sessions and two tunnels have run out, and raising a counter should not mean buying a fleet-deployment toolbox.
• Files are half the day: two panes side by side, drag and drop, a transfer queue with speed, ETA, cancel and retry, directory compare and synchronise, and remote files opened in your own editor with save-back.
• You want the machine's state in the same window as the shell: CPU, memory, disk and process graphs, per-interface bandwidth and latency, and several logs tailed at once.

• The X server. A real X.Org-derived server on Windows with automatic X11 forwarding, so a remote graphical application simply appears, with no DISPLAY to set. There is nothing comparable here and there will not be.
• Deployment. One portable exe with no installer and no admin rights, runnable from a USB stick on a locked-down machine, and a Customizer that turns it into a branded, policy-locked MSI for a fleet. Mobatek has shipped since 2008 and credits the researchers who report bugs in its changelog. Conchshell has ordinary installers, a SHA256SUMS file, and nothing to hand a team writing a build standard.
• RDP depth: console connect, drive, printer, port, clipboard and smart-card redirection, Restricted Admin, keyboard-shortcut forwarding, RDP over an SSH gateway. Conchshell speaks CredSSP (NLA) only and will not reach a host with NLA switched off.
• Key handling. Here a connection points at a key file on disk, an encrypted key is unlocked by its passphrase, and nothing is forwarded onward to the remote host. If your day is built on holding keys in one place and passing them along, that is a step down.
• MultiExec across every open tab, the embedded TFTP, NFS, HTTP and syslog daemons, packet capture, a serial console, and a local Unix userland with a package manager. That is a toolbox; this is a client.

1. In MobaXterm, right-click a sessions folder and choose "Export sessions from this folder". Keep that file beside you as a checklist: Conchshell does not read it, because the export is an undocumented INI dialect and importing it would mean guessing.
2. Install Conchshell and open it. On macOS 13 and later the first launch goes through System Settings, Privacy and Security, Open Anyway; on macOS 12 the path is System Preferences, Security and Privacy, General. The detail is on /download/ if you need it.
3. Re-create the hosts from the checklist on one machine, then use Export and Import, a JSON bundle, to carry connections, folders, profiles and settings to the others. Credentials are deliberately left out.
4. Leave your keys where they are. Point each connection at the private key file on disk; an encrypted key asks for its passphrase when you connect.
5. Type each password once. It goes into the local vault, encrypted with XChaCha20-Poly1305 under an Argon2id key, and bound to that host, port, user, proxy and jump host.
6. Keep MobaXterm installed. If your week includes X11 forwarding, a serial console or one of its embedded servers, nothing here replaces them, and the free edition costs nothing to keep.

See what the $19 covers

Is Conchshell really free?

The application is free on macOS, Windows and Linux, with no trial clock and nothing that greys itself out. One feature costs money: syncing saved connections between your own machines, $19 once at the introductory price and $29 after it. That is a purchase rather than a subscription, updates are included, the key is checked on your own machine without a network, and there is no limit on how many of your own machines it covers.

Does Conchshell need an account?

No, and there is not one to create. Nothing signs in and no server decides whether you may connect; the hosts sit in a local encrypted vault. MobaXterm Home Edition is the same in this respect, since its download page hands you the zip with no gate. Professional buyers get a Customer Area login as a result of paying, not as a condition of running the software.

Does MobaXterm do RDP?

Yes, and well. It is a native session type in the free edition, with console connect, drive, printer, port, clipboard and smart-card redirection, Restricted Admin, keyboard-shortcut forwarding and RDP over an SSH gateway. Conchshell includes RDP at no cost too, but it speaks CredSSP (NLA) only: a host with NLA switched off will refuse it, and the redirection list is much shorter.

Is MobaXterm open source?

No. Both editions are proprietary, under licences written by Mobatek. The source archive on download.mobatek.net publishes third-party components only, such as the terminal fork, SynEdit and MinGW, with no MobaXterm tarball in it when checked on 20 August 2026. The old claim that it is GPLv3 traces back to a version 7 source drop and is not true of the product today.

Can I import my MobaXterm sessions?

Not directly. MobaXterm exports sessions in an undocumented INI dialect, and Conchshell will not guess at it. Export it anyway and use it as a list while you add the hosts once; after that, the JSON bundle carries connections, folders, profiles and settings between your machines. Passwords are typed in by hand, because they are not in either export.

What happens when MobaXterm's year of updates ends?

You keep the version you bought and may carry on using it, since their conditions call the right to use irrevocable. What stops is updates and support, and access to the Customer Area holding your download link and licence key goes with them, so keep your own copy of both. Mobatek writes to you about renewing as the year runs down; the renewal price is not published on their site.

If you work on Windows, need the X server, and twelve sessions is enough, MobaXterm is the better tool and Professional is a fair price for the rest.

If your machines include a Mac or a Linux desktop, or you want the same client and host list on all of them, that is not a gap MobaXterm intends to close. This one is free on all three systems, with SSH, SFTP, FTPS and RDP in one window, and $19 once if you want the connections to follow you.

See what the $19 covers

• What Conchshell is
• Download for macOS, Windows or Linux
• What costs nothing and what the $19 covers
• Conchshell vs PuTTY
• Conchshell vs WinSCP