Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsIn Sequel Pro’s SSH connection tab, set MySQL Host to 127.0.0.1 when MySQL is running on the SSH server, set the MySQL port to the server’s listening port (usually 3306), and enter the remote machine as SSH Host. Sequel Pro logs in over SSH, creates a port forward, and then opens a normal MySQL TCP connection through that forward. If the database is on a different private machine, use that machine’s private hostname instead of 127.0.0.1. This distinction explains most connection failures.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
How Sequel Pro’s SSH connection actually works
An SSH connection in Sequel Pro is not a special MySQL authentication method. It is two network connections chained together:
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
- Your Mac authenticates to an SSH host, sometimes called a bastion or jump server.
- From that SSH host, the tunnel opens a TCP connection to the MySQL host and port you entered in the MySQL fields.
The first leg is encrypted by SSH. The second leg is an ordinary MySQL connection unless MySQL TLS is configured separately. Sequel Ace describes the same sequence: the client creates an SSH tunnel first, then connects through it as a standard connection from the SSH host to the MySQL host.
That architecture gives 127.0.0.1 a potentially surprising meaning. In SSH mode, it refers to the loopback interface of the SSH server, not your Mac. It is correct when the database service runs on that server. It is wrong when the database is on another private host.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Use the right values in Sequel Pro
Open Sequel Pro and select the SSH connection tab. Fill in the fields as follows. Port numbers are conventional defaults, not guarantees; use the values supplied by your administrator or hosting provider.
| Sequel Pro field | What to enter | Why it matters |
|---|---|---|
| MySQL Host | 127.0.0.1 if MySQL runs on the SSH server; otherwise the private hostname or address of the database server |
This is the destination that the SSH server must reach. |
| MySQL User | The database account name | This account is authenticated by MySQL, not by SSH. |
| MySQL Password | The database account’s password | An SSH password does not substitute for a MySQL password. |
| MySQL Port | Usually 3306, unless MySQL listens elsewhere |
The port at which mysqld accepts TCP connections on the target host. |
| SSH Host | The public DNS name or address of the bastion/server | This is where Sequel Pro establishes SSH. |
| SSH User | The operating-system account permitted to log in over SSH | This account is separate from the MySQL user. |
| SSH Key | The private key corresponding to an authorized public key, if key authentication is used | Choose the actual private-key file, not the .pub file. |
| SSH Password | The SSH account password, if password authentication is enabled | Only use this when the server permits password-based SSH login. |
| SSH Port | Usually 22, unless the server uses a custom port |
This is the SSH listener, not the MySQL listener. |
Do not put the public SSH hostname in MySQL Host merely because it is the name you use to log in. The MySQL field describes the destination from the SSH server’s point of view.
Check SSH independently before changing Sequel Pro
Testing the SSH leg in Terminal separates an SSH problem from a MySQL problem. Use the same host, user, port, and key that you intend to enter in Sequel Pro:
ssh -p 22 -i ~/.ssh/your_private_key [email protected]Omit -i if your key is already loaded in the SSH agent, and replace the port when the server uses a nonstandard value. A successful login proves only that the operating-system account can authenticate. It does not prove that the MySQL account, password, authentication plugin, database host, or port is correct.
Once logged in, test whether the SSH host can reach MySQL. If the MySQL client is installed, run:
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
mysql -h 127.0.0.1 -P 3306 -u db_user -pUse the private database hostname in -h when MySQL is on another internal machine. If this command cannot connect from the SSH host, Sequel Pro cannot repair the routing; fix the server-side address, firewall, listener, or permissions first.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →To check whether a TCP listener exists without logging in to MySQL, an administrator can inspect the server with a platform-appropriate tool such as ss -lnt or netstat -lnt. The important question is whether mysqld is listening on the selected interface and port, not merely whether the MySQL process is running.
Configure the built-in Sequel Pro SSH tunnel
- Choose the SSH tab. Start a new connection and select Sequel Pro’s SSH connection type rather than Standard.
- Enter MySQL credentials. Put the database username and database password in the MySQL fields. These credentials are checked by the MySQL server after the tunnel is established.
- Set MySQL Host according to the topology. Enter
127.0.0.1when MySQL runs on the SSH server. Enter a private DNS name such asmysql.internalor a private address such as10.0.2.15when the SSH server must connect to another internal machine. - Set the MySQL port. Use
3306only if that is the port on which the target server listens. A custom listener, container mapping, or hosting configuration may use another port. - Enter SSH details. Set SSH Host to the bastion or server, SSH User to the operating-system account, and SSH Port to
22or the provider’s specified port. - Select authentication. Choose the private key accepted by the server, or enter the SSH password if password authentication is enabled. If the key has a passphrase, Sequel Pro may ask for it when opening the connection.
- Test the connection. A successful test means SSH authentication, forwarding, network reachability from the SSH host, and MySQL authentication all completed. Read an error mentioning the failing layer instead of changing every field at once.
Choose the correct MySQL Host value
| Network layout | MySQL Host in SSH mode | Typical result |
|---|---|---|
| SSH and MySQL run on the same server | 127.0.0.1 |
The SSH server connects to its own loopback interface. |
| SSH bastion and MySQL are separate machines on one private network | The private DNS name or private IP of the MySQL machine | The bastion makes the onward connection across the private network. |
| MySQL runs in a container or another service with a mapped listener | The host/address and mapped port reachable from the SSH server | Use the port exposed to the bastion, not necessarily the container’s internal port. |
| MySQL accepts only a Unix socket | No normal TCP value will work | Sequel Pro’s usual SSH forwarding requires TCP; enable TCP or use a specialized bridge. |
Changing 127.0.0.1 to the SSH server’s public name usually makes the configuration less correct, not more. The tunnel already reaches that server; the MySQL host is the next hop made from there.
Diagnose the most common errors
“SSH port forwarding failed” or “connection refused”
These messages usually indicate a problem before MySQL authentication. Check the SSH hostname and port first, then verify that the SSH account is allowed to create forwarding sessions. After that, test the target from the SSH server itself:
- Confirm the target hostname resolves on the SSH server.
- Confirm a firewall or security group allows the SSH server to reach the target MySQL port.
- Confirm
mysqldis listening on TCP, on the selected port and interface. - Confirm the MySQL bind address is not restricted to an interface the SSH server cannot use.
A Sequel Pro support discussion specifically recommends checking TCP/IP support, the port, and database privileges when tunnel forwarding fails. A process shown as running is not enough if it is listening only on a socket or on an inaccessible interface.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
SSH succeeds in Terminal, but Sequel Pro cannot authenticate
Terminal and Sequel Pro may use different keys, agents, identities, or host-key stores. Compare the exact SSH host, SSH user, port, and private-key path. Make sure you selected the private key rather than its public companion, and unlock a passphrase-protected key when prompted.
On newer macOS releases, application sandboxing and SSH-agent access can also affect GUI clients. If the command-line login works consistently but the embedded client does not, use the manual tunnel method below or move to a maintained Sequel-compatible client.
MySQL access denied
An “access denied” error means the tunnel reached MySQL and the database server rejected the MySQL credentials or account host rule. Re-enter the MySQL username and password, and verify that the account is permitted to connect from the address MySQL sees. Do not replace the MySQL password with the SSH password; they belong to different authentication systems.
Authentication-plugin compatibility can produce a similar failure. Confirm that the client version supports the plugin configured for the account. If the server requires TLS, configure the appropriate MySQL SSL options rather than assuming SSH alone satisfies that requirement.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →SSL or authentication-plugin errors after the tunnel opens
First establish that SSH and forwarding are working, then address MySQL’s security policy. Ask the administrator which authentication plugin the account uses and whether the server requires or merely permits TLS. SSH encrypts the Mac-to-SSH-host leg; it does not automatically encrypt the onward SSH-host-to-MySQL leg.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
The connection tries a local socket
A Unix socket connection is different from a TCP connection through SSH. A socket path on your Mac is not the remote server’s socket, and macOS sandbox restrictions can prevent a GUI application from opening some socket files. Prefer TCP by entering 127.0.0.1 and the forwarded port where possible. If the server has skip-networking enabled, however, no ordinary TCP tunnel can reach it.
MySQL uses skip-networking
With skip-networking, MySQL disables TCP/IP and accepts local Unix-socket connections only. Sequel Pro’s normal SSH tunnel forwards TCP, so it cannot connect to a socket-only server. The Sequel Pro support discussion states that its SSH tunneling functionality does not work in this configuration.
An administrator must enable a suitable TCP listener and restrict it with firewall rules, or build a specialized socket bridge. Do not simply expose MySQL publicly to work around the setting.
Use a manual SSH tunnel when the embedded mode fails
A manual tunnel isolates SSH from the GUI and is useful when Sequel Pro cannot access an agent, key, or socket because of macOS compatibility or sandbox behavior. The tunnel listens on a free local port and forwards traffic to the database through the SSH server.
Database on the SSH server
ssh -N -L 3307:127.0.0.1:3306 -p 22 [email protected]Keep this Terminal window open. The first port, 3307, is on your Mac; the address and port after it, 127.0.0.1:3306, are evaluated from the SSH server. Choose another unused local port if 3307 is occupied.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Database on a private host
ssh -N -L 3307:mysql.internal:3306 -p 22 [email protected]Here the SSH server resolves and reaches mysql.internal. It does not matter whether that private hostname is resolvable from your Mac, provided it is resolvable and reachable from the SSH server.
Connect Sequel Pro to the local end
- Open a Standard connection profile in Sequel Pro.
- Set Host to
127.0.0.1. - Set Port to the local port from the
-Loption, such as3307. - Enter the MySQL username and password, not the SSH credentials.
- Leave the Terminal tunnel running while using the profile. Press
Control-Cin that Terminal window to close it.
Sequel Ace documents this external-tunnel workaround for cases involving macOS sandboxing or SSH-agent problems. It also makes testing easier: if a command-line MySQL client can connect to 127.0.0.1:3307, the remaining issue is in Sequel Pro’s profile or compatibility layer.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Compare Standard, built-in SSH, and manual forwarding
| Connection method | Network reachability | Encryption boundary | Host and port entered in the client | Best use |
|---|---|---|---|---|
| Standard, direct | My Mac must reach the MySQL server directly, commonly over a public or permitted network address | MySQL TLS is required for database encryption; SSH is not involved | The actual MySQL hostname and port | A database intentionally exposed to the client network with appropriate firewall and TLS controls |
| Sequel Pro SSH mode | My Mac reaches the SSH host; the SSH host reaches MySQL | SSH encrypts Mac-to-SSH-host traffic; the onward leg needs MySQL TLS if it crosses an untrusted network | MySQL destination in the MySQL fields; bastion in SSH fields | A private database reachable through a bastion |
| Manual SSH forwarding plus Standard profile | My Mac reaches only the local listener; the SSH server makes the onward connection | Same SSH boundary as built-in mode, with the tunnel managed in Terminal | 127.0.0.1 and the chosen local forwarded port |
Debugging, agent/key issues, or GUI sandbox incompatibility |
Security details that are easy to miss
SSH does not automatically encrypt every segment
The SSH tunnel protects traffic between your Mac and the SSH host. If the SSH host and MySQL server are different machines, traffic on that internal segment is not automatically protected by SSH. Use MySQL TLS when that network is not fully trusted, and verify the server’s certificate settings according to your organization’s policy.
Protect keys and verify host identity
- Store private keys with restrictive filesystem permissions and protect passphrases.
- Verify the SSH host fingerprint through a trusted administrator or provider channel before accepting a new key.
- Do not copy private keys to shared folders or commit them to a project repository.
- Use separate, least-privileged SSH and MySQL accounts when practical.
Do not place passwords in connection strings
The Oracle MySQL Reference Manual warns: “Specifying an explicit password in the connection specification is insecure and not recommended.” Keep credentials in Sequel Pro’s protected storage or enter them interactively rather than putting them in shell history, scripts, or URLs.
Sequel Pro and newer macOS versions
Sequel Pro is an older open-source macOS client whose repository centers on the 2019 project era. A successful server configuration can therefore still fail because the client cannot use a modern SSH key format, communicate with the system agent, access a socket, or satisfy newer macOS sandbox rules.
When the same credentials work with Terminal and a manual tunnel but the embedded SSH tab remains unreliable, a maintained successor such as Sequel Ace is a practical compatibility option. Its documentation covers migration from Sequel Pro, SSH behavior, external tunnels, and socket limitations. Migrating does not change the server-side topology: you still need the correct MySQL destination, SSH host, ports, and separate credentials.
A repeatable troubleshooting checklist
- Can you log in with
sshusing the exact SSH host, user, port, and key? - From the SSH host, does the MySQL hostname resolve?
- From the SSH host, is the MySQL TCP port reachable?
- Is
mysqldlistening on TCP rather than only on a Unix socket? - Is
127.0.0.1being interpreted correctly as the SSH server’s loopback address? - Are the MySQL username, password, authentication plugin, and account host permissions correct?
- Does the server require MySQL TLS for the onward leg?
- Are you accidentally using a local socket profile instead of TCP?
- Does the database disable TCP with
skip-networking? - Does a manual tunnel to
127.0.0.1:3307work when the built-in SSH tab does not?
Work through the list in that order. It follows the connection’s actual path: SSH authentication, forwarding, network reachability, then MySQL authentication and encryption policy.
The Bottom Line
Set MySQL Host to 127.0.0.1 only when MySQL runs on the SSH server; otherwise use the database server’s private address. Verify SSH separately, confirm TCP reachability from the SSH host, and use a manual ssh -L tunnel with a Standard profile when Sequel Pro’s embedded SSH mode is incompatible with your macOS setup.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
