Unlimited tabs
Open every server side-by-side. Right-click → Copy to other tab.
Zyp is a fast, keyboard-first SFTP, FTP, WebDAV & S3 client for macOS and Windows — a modern FileZilla, Cyberduck & WinSCP alternative. Unlimited tabs. Smart resume. Edit in place. Zero telemetry.
One app, every protocol and backend you already use
Zyp keeps the dual-pane workflow you already know, and makes every part of it faster.
Local on the left, remote on the right. F5 to upload, F6 to download. The dual-pane workflow, refined.
Open every server side-by-side. Right-click → Copy to other tab.
Interrupted transfers pick up from the last byte on SFTP and FTP — no wasted bandwidth on retries.
Open a remote file in your editor. Save. Zyp uploads automatically — no re-upload step, no modal.
Trackpad optional. Everything reachable from home row.
Diff a local folder against a remote one, filter by status, cherry-pick, and push either way — with a clear preview before anything moves.
Download whole trees as one .zip or .tgz — packed on the server.
Star any folder for one-click access. Recursive name search with sensible depth limits.
Pause, resume, reprioritize, and retry failed transfers. Every byte accounted for.
Diff a local folder against a remote one. Filter by status. Cherry-pick. Push either way. What rsync -n makes you squint to figure out, Zyp shows in a glance.
Zyp is not yet notarized (macOS) or Authenticode-signed (Windows), so both operating systems display a one-time warning on first launch. The steps below clear it.
Removes the macOS quarantine flag and launches Zyp. Subsequent launches open normally, like any installed application.
xattr -dr com.apple.quarantine /Applications/Zyp.app
open /Applications/Zyp.app
Zyp is safe — the installer is simply not yet Authenticode-signed. You can verify its integrity by comparing the SHA-256 hash below. Windows remembers your choice after the first run.
A feature-by-feature comparison against the clients you may already use.
| Zyp | FileZilla | Cyberduck | Transmit | |
|---|---|---|---|---|
| Price | Free | Free · adware installer | Free · donation | $45 |
| Native macOS UI | Yes | No (Qt) | Yes | Yes |
| Windows build | Yes | Yes | Yes | — |
| Unlimited tabs | Yes | Multi-window | Multi-window | Yes |
| Remote ↔ remote copy | Yes | — | — | Yes |
| Edit remote in editor | Yes | Yes | Yes | Yes |
| Smart resume | Yes | Partial | Partial | Yes |
| Compare & sync | Yes | Directory compare | — | Yes |
| Telemetry | Zero | Bundleware | Zero | Some |
| Homebrew Cask | Yes | Yes | Yes | Yes |
Not affiliated with FileZilla, Cyberduck, or Panic. Publicly documented features, July 2026.
Native builds for macOS, Windows, and Linux.
944c8af…6a939c4 · verify
8a0f6d2…3aa8b · verify
1f55d67…6c44e · verify
.deb · .rpm · .tar.gz · more
chmod +x Zyp-1.3.0-x64.AppImage
./Zyp-1.3.0-x64.AppImage
sudo apt install ./Zyp-1.3.0-x64.deb
sudo dnf install ./Zyp-1.3.0-x64.rpm
brew install --cask khaweryounas/zyp/zyp
Zyp isn't yet code-signed with an Authenticode (Windows) or Developer ID (macOS) certificate, so SmartScreen and Gatekeeper don't recognize the publisher on first run. Every release publishes a SHA-256 checksum so you can confirm the file you downloaded is byte-for-byte the one shipped here.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-FileHash .\Zyp-1.3.0-x64-setup.exe -Algorithm SHA256
shasum -a 256 ~/Downloads/Zyp-1.3.0-arm64.dmg
If the number your machine prints matches the one above, the installer is exactly what we shipped — even if SmartScreen or Gatekeeper doesn't yet recognize the publisher.
Yes. Free forever. No trial, no premium tier, no account.
SFTP (SSH File Transfer Protocol), FTP / FTPS, WebDAV (HTTP & HTTPS, Basic or Digest auth), and S3-compatible object storage (AWS S3, MinIO, Cloudflare R2, Backblaze B2, Wasabi, …). AWS credentials can be typed in or loaded from a named profile in ~/.aws/credentials.
Locally, in your OS keychain (Keychain on macOS, Credential Manager on Windows). Nothing leaves your machine.
No. Zero analytics, zero telemetry, no auto-update pings. The only network calls Zyp makes are the ones you tell it to make.
Zyp is not yet notarized with Apple, so Gatekeeper does not recognize the publisher on first run. See first launch for a single-command fix.
For the same reason as macOS — the installer is not yet signed with an Authenticode certificate, so Windows does not yet recognize the publisher. Click More info → Run anyway to proceed. You can independently verify the installer's integrity by comparing its SHA-256 hash against the value published on this page.
Apple menu → About This Mac. If it says Chip: Apple M… pick Apple Silicon; otherwise pick Intel.
Yes — as of 1.3.0. Native AppImage, .deb (Ubuntu / Debian / Mint / Pop!_OS), .rpm (Fedora / RHEL / openSUSE), and portable .tar.gz for both x64 and arm64 (Raspberry Pi 4 / 5, Ampere, ARM Chromebooks). Download links are under Download.
Source-available soon, under a permissive non-commercial license.
Email ykhawer@gmail.com. Every message receives a personal reply.
.deb (Ubuntu / Debian / Mint / Pop!_OS), .rpm (Fedora / RHEL / openSUSE), and .tar.gz (portable). Both x64 and arm64 (Raspberry Pi 4/5, Ampere, ARM Chromebooks)..desktop entry so Zyp shows up in your app launcher with the correct icon.latest.json on launch and displays a subtle indicator in the titlebar when a newer release is available. Zero telemetry, silent-fail, opt-out in Settings.~/.aws/credentials, or fall back to the SDK's default credential chain (environment variables, EC2 / ECS role, …)..zip / .tgz).