Finestra from your phone

Finestra listens on localhost, so a phone reaches it the same way a laptop does — one SSH app, one port forward, and the desktop is in the mobile browser. Three screens in ConnectBot, then localhost:7070.

Carlos Bravo 1 min read
Finestra open in a phone browser at localhost:7070 — Terminal, Files, Text Editor and System Manager icons on the desktop, with the taskbar showing carlos@thinkcentre.

Finestra listens on localhost:7070 on the server and nowhere else. On a laptop you reach it through the SSH connection you already have. A phone works exactly the same way — the only thing missing is an SSH client that can forward a port, and there is a good free one.

ConnectBot is on the Play Store, is open source, and has done local port forwarding for years. Three screens and you are in.

1. Create the connection

Add a host the usual way — user@host, port 22.

The ConnectBot host list with one saved host; the username and address are painted out

2. Connect

Tap it, accept the host key, authenticate. This is an ordinary SSH session; if you can get a shell here, everything else follows.

A ConnectBot terminal session: the host key prompt with the fingerprints painted out, password authentication, the Ubuntu 24.04 login banner, and a shell prompt

3. Create the tunnel

From the session menu, open Port forwards and add a local one. Source port 7070, destination localhost:7070 — the phone’s 7070 now lands on the server’s, inside the encrypted connection.

ConnectBot's Edit port forward dialog: nickname finestra, type Local, source port 7070, destination localhost:7070

That is the whole setup. There is no step four.

Open it

Leave ConnectBot running in the background and point the browser at http://localhost:7070.

The desktop is the same desktop. Same terminal on a real PTY, same file manager, same system manager, same session — if you left a shell running from the laptop, it is still there, on the phone, mid-build.

Nothing new listens on the network to make this work. The server still has one port open, the one you were already using, and the desktop still only answers on loopback. A phone on the other side of the world is just another client of an SSH connection you would have opened anyway.