Terminal UI for FreeRDP connections. Pick a profile, connect, come back when the session ends.

Linux. Passwords go in the Secret Service keyring (org.freedesktop.secrets). MacOS coming soon; Windows does not build.

curl -fsSL https://raw.githubusercontent.com/gaius-codius/wicket/main/install.sh | sh

This installs the latest release for amd64 or arm64 into ~/.local/bin (set WICKET_BINDIR to change it) after checking it against the release's SHA256SUMS. Run the same command again to update.

... | sh -s -- --version v0.1.0   # a given release
... | sh -s -- --uninstall        # remove the binary

Config, state, and keyring entries are never touched. Or, with Go:

go install github.com/gaius-codius/wicket/cmd/wicket@latest

Needs a FreeRDP 3 client on PATH: sdl-freerdp3 or xfreerdp3. New profiles use the first one found, in that order.

wicket                 # TUI
wicket connect work    # named profile, no TUI
wicket import remmina  # from ~/.local/share/remmina
wicket import rdp FILE...
wicket --help
wicket --version

wicket connect is for keybindings and scripts. It does not create a config. On a non-TTY there is no password prompt, so save the password from the TUI first. Press ? in the TUI for keys and field help.

wicket import brings Remmina (*.remmina, RDP only) or Microsoft .rdp files into wicket profiles. Import only — there is no export or sync. Passwords are never imported; you enter them on first connect. Use --dry-run to preview, and --rename to append -2, -3… on name collisions (otherwise collisions are skipped). It exits 1 when entries were found but none was imported.

Passwords live in libsecret, never in TOML. Each profile has a stable id (UUID) used as the keyring identity so a renamed or recreated display name cannot claim another profile's secret. Hand-editing config.toml is fine: a save from the TUI changes only the values, keys and profiles it has to, and leaves the rest of the file, comments and formatting included, as it was. Deleting a profile also removes the comment lines directly above it. A file laid out in a way Wicket cannot edit in place, such as profiles written as an inline array, is rewritten in full instead, and the TUI says so.

Keys named password, pass, secret, or passwd are stripped on save, with their line. A password in a comment is left alone, so do not keep one there either.

Sharing is per profile, set in the form or by hand:

[[profiles]]
name = "work"
host = "192.168.1.20"
user = "jdoe"
clipboard = false   # on unless turned off, as in FreeRDP
multimon = true     # full screen across every monitor
share_home = true   # your home folder as a drive on the remote machine
shares = [
  { path = "~/Documents" },
  { path = "/data/projects", name = "projects" },
]

share_home shares all of your home folder, read-write, dotfiles and ~/.ssh included. Only turn it on for machines you trust.

shares lists specific local folders as named drives (/drive:name,path in FreeRDP). Paths must be absolute or ~/…, and must exist as directories when you save or connect. Leave name out to derive it from the folder name. share_home and a share named home cannot both be set.

Keys left out keep their default, and a save only writes the ones changed.

[ui]
theme = "auto"

WICKET_THEME overrides config for one run.

Form: Ctrl+S saves, Esc cancels. ←/→ picks the scale and the client (custom… takes any binary name). Leave the password field empty to keep the stored one; use forget password when editing to clear it.

Enter starts FreeRDP in its own window; Wicket stays on the status view until that window closes, then cleans up the process group. During a session, Ctrl+C stops FreeRDP (interrupt, then terminate, then kill). If FreeRDP fails, or the session ends within a few seconds, you get the reason and can retry or enter a new password. A logoff or disconnect goes back to the list.

See CONTRIBUTING.md. Security: advisories and SECURITY.md.

CI runs gofmt, go vet, go test ./..., and go test -race ./internal/secret on pushes and pull requests to main.

MIT. See LICENSE.