The MongoDB SSH Mobile Client
Byson connects to MongoDB over an SSH tunnel straight from your phone - key-based auth, TOFU host-key trust, on Android and iOS.
Short answer: a MongoDB SSH mobile client is a phone app that reaches your database through an SSH tunnel instead of exposing it to the internet. Byson is a MongoDB SSH mobile client for Android and iOS - it opens a local loopback listener and forwards your connection through your SSH server, exactly like a desktop client does. Almost no other mobile database app supports SSH, so if you need it on a phone, this is the option.
What this demo shows
The demo opens on Byson's connection form. SSH is toggled on, then an SSH host, port, and username are entered and a private key is pasted - Byson stores it encrypted in the device keychain. The MongoDB host is set to 127.0.0.1:27017, the address the SSH server sees locally. Tapping Test connection opens the tunnel, captures the server's host-key fingerprint on first use, and reports success. The connection is saved and opened - Byson reaches the database through the live SSH tunnel, with no laptop involved.
Why an SSH tunnel matters on mobile
Most production MongoDB servers aren't open to the internet - they listen on localhost or sit behind a firewall, reachable only by SSH-ing into the host. On a laptop you tunnel in. On a phone, almost no client can. That's the gap Byson fills:
- Reach a MongoDB bound to
127.0.0.1on a remote server. - Avoid opening port
27017to the public internet. - Connect through a jump host with a fixed IP - the clean answer when your phone's IP keeps changing.
How Byson tunnels MongoDB over SSH
Byson runs a real SSH tunnel on-device: it opens a local loopback listener and bridges it to the remote MongoDB through the SSH connection (Citadel directTCPIP on iOS, an sshj local port forwarder on Android). The MongoDB driver then talks to localhost while traffic rides the encrypted SSH channel.
SSH authentication & key support
| Capability | Supported |
|---|---|
| Password auth | Yes |
| Key auth - RSA, ed25519 | Yes, incl. passphrase-protected keys |
| Key formats | OpenSSH + PKCS#1/PKCS#8 PEM (converted in-app, no ssh-keygen) |
| Host-key verification | Trust-on-first-use (TOFU); fails closed if the host key changes |
| Combine with TLS | Yes - SSH tunnel + system-CA TLS to the database |
Set it up in three steps
- Add a connection in Byson and toggle on SSH tunnel.
- Enter the SSH host, user, and your password or private key (paste the key or pick a file).
- Set the MongoDB host as the server sees it (often
127.0.0.1:27017), tap Test, accept the host key on first connect, then Save.
Official reference: MongoDB - Connection Strings.
A MongoDB SSH client that fits in your pocket
Free on Android and iOS. SSH tunnel, key auth, and TOFU host-key trust built in.
FAQ
Is there a MongoDB client for mobile that supports SSH?
Yes. Byson is a mobile MongoDB client with built-in SSH tunneling for Android and iOS - it opens a local loopback listener and forwards the connection through your SSH server, the same pattern desktop clients use. Most mobile database apps don't support SSH, which makes this rare.
What SSH authentication does Byson support?
Password auth and key-based auth with RSA and ed25519 keys, including passphrase-protected keys. OpenSSH and PKCS#1/PKCS#8 PEM formats are accepted and converted in-app. Host keys use trust-on-first-use (TOFU) and fail closed if a host key changes.
Why use an SSH tunnel instead of opening MongoDB to the internet?
An SSH tunnel lets you reach a MongoDB server bound to localhost or behind a firewall without exposing port 27017 publicly. From a phone with a changing IP, tunneling through a jump host with a fixed IP is the safest way to connect.
Guide: connect to MongoDB Atlas from your phone →
Also: MongoDB AI aggregation generation →