Independent Proxmox VE iOS app
Monitor nodes, manage VMs and LXCs, and connect with Smart Connect, VNC, SSH, or App-level Tailnet.
Swipe, use the previous and next buttons, or use the left and right arrow keys to browse Prox Deck screenshots. Two screenshots are visible at a time.
Built around the work
Six capabilities, organized around the decisions you make while managing the infrastructure you are authorized to access.
See the state of your fleet before you decide what to do next.
Dashboard summaries bring nodes, VMs, LXCs, CPU, memory, storage, and recent tasks into one native view. Refresh when you need it and arrange supported cards around your workflow.
Browse, search, filter, and act on the workloads you are authorized to manage.
Review guest state and configuration, then use supported power, snapshot, backup, creation, and management workflows. Every action remains subject to the capabilities and permissions of your Proxmox VE server.
Creation and advanced management workflows remain subject to server capabilities and permissions.
Open the right console or terminal from the resource you are already viewing.
Use the in-app VNC console for running VMs, or connect with SSH Profiles bound to a Node, VM, or LXC. SSH supports password or private-key authentication and confirms SSH Host Keys before trust is saved.
VNC Console and SSH Terminal require a running VM or valid SSH host and credentials as applicable.
Use a route plan that respects the network you are actually on.
When your current Wi-Fi matches a configured home SSID, Prox Deck uses the Local route only; if it fails, it does not fall back. On other networks, without Wi-Fi, or when iOS cannot provide the SSID, enabled Public and Tailnet routes are tried in the order you choose.
Location permission is used only when Smart Connect needs the current Wi-Fi SSID; Prox Deck does not maintain a location history.
Authorize Tailscale inside Prox Deck without changing traffic for the rest of your device.
A single App-level Tailnet runtime is shared by Prox Deck requests across your configured servers. It can reach the Tailnet or a configured subnet route, but it is not a system VPN and does not route traffic from other apps.
App-level Tailnet connectivity requires Tailscale authorization plus a reachable Tailnet or subnet route.
Keep credentials, trust decisions, and optional sync boundaries explicit.
Secrets use Keychain, runtime sessions stay in memory, and self-signed TLS trust is scoped to the selected route. Optional iCloud Sync is explicitly enabled, uses your private CloudKit database for an allowlisted set of configuration data, and converges when devices are available rather than promising real-time sync.
When optional iCloud Sync is enabled, only password-auth PVE passwords may use iCloud Keychain.
Smart Connect
Smart Connect keeps a server-level plan clear instead of guessing at a global network state.
iOS location permission is used only when Smart Connect needs the current Wi-Fi SSID. Prox Deck does not maintain a location history.
Security summary
Passwords, API Token secrets, SSH keys, and passphrases use Keychain. PVE Ticket, CSRF token, cookies, authorization headers, and active SSH sessions stay in memory.
HTTPS verification is the default. Self-signed TLS trust is scoped to a selected route, while SSH Host Key trust stays device-local.
Face ID or Touch ID can protect selected servers and sensitive setting changes. Saved operation logs contain summaries and exclude sensitive values.
Requirements
Prox Deck connects to the PVE endpoint you configure. Features remain subject to your server, network, and permissions.
FAQ
Prox Deck is an independent third-party native iPhone and iPad client for monitoring and managing Proxmox VE infrastructure. It is not a Proxmox product or an official Proxmox client.
You can monitor Proxmox VE nodes, storage, tasks, VMs, and LXCs; use supported guest lifecycle actions; and open VNC or SSH sessions when the resource, account permissions, and network allow it.
You need an iPhone or iPad running iOS or iPadOS 18.1 or later, a Proxmox VE server you own or are authorized to access, a valid account with the permissions needed for each action, and network reachability to the endpoint you configure.
Routine PVE management traffic connects to the endpoint you configure. Optional services have separate data flows: iCloud Sync, App Store and RevenueCat purchase services, Tailscale connectivity, and approved icon libraries are described in the Privacy Policy.
When the current Wi-Fi matches one of your configured home SSIDs, Smart Connect uses the Local route only. If that route fails, it does not fall back. On other networks, with no Wi-Fi, or when iOS cannot provide the SSID, enabled Public and Tailnet routes are tried in the order you configure.
No. Tailnet connectivity is used only for Prox Deck requests. It does not configure a system-wide VPN or route traffic from other apps.
