PortKnock
Knock with Siri & Shortcuts
฿29.00 · Designed for iPad. Not verified for macOS.
PortKnock 5 is rebuilt from the ground up: Siri & Shortcuts, webhooks, port checks, IPv4/IPv6 per-address status, backup & restore, and DrayTek TOTP knocks.
-- Overview --
PortKnock is a port knocker for iPhone and iPad, built for network administrators, homelabbers, and anyone who keeps services hidden behind a firewall. Save your knock sequences once, then send them with a tap, a Siri request, or a Shortcut. It also runs on Apple silicon Macs.
PortKnock is NOT a hacking tool, a port scanner, or a general network scanner. It only sends knocks to servers that you own or administer.
You *must* have a port knock daemon (such as knockd) or a compatible router running on your server for this app to be useful.
-- Features --
- Siri and Shortcuts: "PortKnock _name_" or "Knock _name_ with PortKnock"
- Unlimited Knocks, each with any number of ports
- TCP or UDP per port, with optional UDP payloads
- Post-knock actions: launch an app or URL, send a webhook, or check that a TCP port opened
- IPv4 and IPv6, including hosts with multiple addresses and per-address status
- Shows your external IP address
- Configurable interpacket delay
- Backup, restore, and move devices with import preview and conflict resolution
- Migrates Knocks from PortKnock 4
- Custom symbols and colors, search, and reorder
- Dark mode
- DrayTek TOTP knocks (scan a QR code or enter your secret)
- Has no advertising
-- Use Cases --
Secure remote access: open a firewall port for SSH, VPN, or remote desktop only when you need it.
Automation: knock, confirm the port opened, then launch your SSH client or call a webhook, all from one tap or one Siri request.
This app is ideal if you're on a WiFi network but don't have a port knocker on the available computers. If you're sitting behind a NAT, your iPhone will have the same IP as any of the other computers on your network.
-- Brief Description of Port Knocking for the Layman --
Port Knocking is a technique to secure services behind a firewall until a specific knock sequence is given. This is not to be confused with port scanning (a network management tool for discovering open services on a system).
Imagine you left your kids at home alone. You don't want them to open the door for strangers. And when a stranger comes knocking, you don't even want them to come to the door, because you don't want them to know your kids are there. But, when you or other family members come, you might want them to open the door for you. So you teach them to listen for a certain rat-a-tat-tat or special knock that only you and your family know.
This is the same concept you can apply to your servers. If you run a knock daemon on your server, this app then lets you send the special knock to it.
Port knocking adds a layer of obscurity but does not replace strong authentication, so use it alongside SSH keys, strong passwords, and your firewall.
More on Wikipedia: http://en.wikipedia.org/wiki/Port_knocking
-- Additional Info --
If you're in need of a knock server, I personally use Judd Vinet's knock daemon for linux. It's quite easy to use: http://www.zeroflux.org/projects/knock
-- Notes --
- Requires iOS 26 or later.
- Launch actions are limited by what the target app supports through URLs.
- PortKnock no longer records network history. The in-app Password Lock was removed; use iOS app locking instead.
- TOTP secret keys are kept in the Keychain and are not included in backups.
-- Support --
For better support, please send bug reports and feature requests to support@sungheroes.com, rather than simply posting it in a review.
You can find more info on using PortKnock at the main website:
http://www.sungheroes.com/products/portknock-iphone/
-- History --
2026-10-19 5.0.0: Rebuilt for modern iOS. Siri/Shortcuts, post-knock actions, backup/restore, TOTP
2022-02-28 4.18: Launch App works again; import fixes
2018-01-xx 4.12: IPv6 support
2017-09-xx 4.0: Updated for iOS 10.3
2011-07-10 3.0: Password lock, knock validation, import/export, app launcher, progress screen
2010-12-14 2.02: Copy hosts, host/port reordering
Ratings & Reviews
- This app has not received enough ratings or reviews to display an overview.
PortKnock 5 is a ground-up rebuild for modern iOS. Your Knocks from PortKnock 4 can be migrated.
NEW
- Siri & Shortcuts: send any saved Knock by voice or from the Shortcuts app, hear the result, and chain success or failure into other automations.
- Post-knock actions: run one or more actions after a knock, in the order you choose.
* Launch an app or URL (SSH, Mail, web)
* Send a webhook (any HTTP method, custom headers)
* Check that a TCP port actually opened
* Test any action without sending a knock
- Better host handling: knock hosts that resolve to several IPv4 and IPv6 addresses, see the status of each address, and choose the IP version globally or per Knock.
- Optional UDP packet payloads.
- Data Management: back up your Knocks to a file and restore them on another device or after a reinstall. When importing, preview first, then Keep Both, Replace, or Import New Only. Opening a .portknock file from Files starts the import.
- Haptic feedback when knocks are sent, succeed, or fail, with a separate setting for Siri and Shortcuts.
- Redesigned interface: custom symbols and colors for each Knock, search, duplicate, reorder, hex or decimal port display, and a live packet-by-packet progress view.
- Dark mode
- DrayTek TOTP knocks: scan a QR code or type in your secret, and PortKnock appends the rotating one-time password to your knock sequence.
CHANGED
- Requires iOS 26 or later.
- Network History is no longer recorded, and your old log does not carry over.
- The in-app Password Lock has been removed. Use iOS app locking instead.
- TOTP secret keys are stored in the Keychain and are NOT included in backups or exports. After a restore you will be reminded to re-enter them.
Questions or feedback? Email support@sungheroes.com. Thank you for your patience and your support over the years!
The developer, Danny Sung, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Provider
- Danny Sung
- Size
- 11.7 MB
- Category
- Utilities
- Compatibility
Requires iOS 26.0 or later.
- iPhone
Requires iOS 26.0 or later. - iPad
Requires iPadOS 26.0 or later. - Mac
Requires macOS 26.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 26.0 or later.
- iPhone
- Languages
- English
- Age Rating
4+
- 4+
- Copyright
- © 2021 Danny Sung
