Commands that
copy clean.

Removes the last commit but leaves its changes staged, ready to edit and commit again.

If the commit was already pushed, use git revert instead so you don’t rewrite shared history.

Creates a new commit that reverses an earlier one. Safe on shared branches because history isn’t rewritten.

Replaces the message of the most recent commit.

Rewrites the commit. If it was already pushed you’ll need git push --force-with-lease.

Stages the file and folds it into the previous commit without changing its message.

Rewrites the last commit; avoid on commits others have pulled.

A compact view of changed files plus how far ahead or behind your branch is.

Stages new, changed and deleted files, then commits them in one go.

Creates a branch from where you are and moves onto it.

Moves to an existing branch.

Publishes the current branch with the same name and sets it as the upstream, so plain git push works next time.

Fetches remote changes and replays your local commits on top, keeping history linear.

Throws away uncommitted edits to a file and restores the last committed version.

Uncommitted edits to that file are lost.

Removes a file from the staging area but keeps your edits.

Throws away all local commits and changes on this branch and copies the remote version.

Deletes uncommitted work and unpushed commits. Run git stash first if you might need them.

Shelves your uncommitted changes so you can switch branches with a clean tree.

Re-applies the most recent stash and removes it from the stash list.

Shows every stash with its message.

A compact visual graph of all branches and commits.

Shows the exact changes that are staged.

Annotates every line with the commit and author that last changed it.

Lists commits that added or removed the given text. Great for "when did this disappear?"

Applies the changes from a single commit on another branch to your current branch.

Shows everywhere HEAD has been, including commits removed by reset or rebase. Use the hash with git reset or git switch -c to get them back.

Lists the untracked files and folders that git clean -fd would delete. Nothing is removed.

Removes every untracked file and directory from the working tree.

Permanently deletes untracked files (they’re not in Git, so there’s no undo). Run git clean -nd first to preview.

Deletes a branch that has been merged. Use -D to force-delete an unmerged one.

Removes the branch from the remote repository.

Renames the branch you’re on.

Cleans up local branches that are already merged into the base branch.

Overwrites the remote branch only if nobody else has pushed since you last fetched.

Still rewrites remote history; only use on branches you own.

Combines your last N commits into a single commit.

Rewrites history; avoid on commits that are already shared.

Creates an annotated version tag and publishes it.

Sets the author identity used on every commit on this computer.

Makes git init create a main branch instead of master.

Points origin at a new address, for example when switching from HTTPS to SSH.

Downloads only the most recent commit. Much faster for big repositories.

Ranks contributors by number of commits.

Removes the file from Git (for example after adding it to .gitignore) without deleting it from disk.

Reveals dotfiles and hidden folders everywhere in Finder. Tip: ⌘⇧. toggles this temporarily in any Finder window.

Restores Finder’s default of hiding dotfiles.

Shows .pdf, .png, .app and every other extension in Finder.

Adds the folder path to the bottom of every Finder window.

Makes ~/Library visible in Finder permanently.

Hides the Dock and removes the delay before it slides back in.

Undoes the instant auto-hide tweak.

Adds an empty gap you can drag between apps to group them.

Restores the original Dock apps and settings.

Your custom Dock layout is lost.

Stops screenshots cluttering your Desktop.

Use jpg, png, heic, pdf or tiff. Smaller JPGs are handy for sharing.

Window captures (⌘⇧4 then Space) no longer include the drop shadow.

Prevents the display sleeping for the given number of seconds. Leave off -t to stay awake until you press Ctrl+C.

Fixes websites that won’t load after a DNS change.

Shows the battery’s cycle count, condition and maximum capacity.

Model, chip, memory and serial number.

Prints the product name, version and build.

The Mac’s address on your Wi-Fi network (use en1 if en0 is empty).

Re-copies the clipboard as plain text, dropping fonts and colours. (ClepBoard also removes hidden characters.)

Puts the whole file on the clipboard without opening it.

Opens a Finder window for the folder your Terminal is in.

Speaks the text aloud. Chain it after long commands: npm run build; say done.

Switches between Light and Dark appearance.

Makes held keys repeat faster than System Settings allows. Log out and back in to apply.

Holding a letter repeats it instead of showing accent options. Restart apps to apply.

Finder won’t litter shared and network folders with .DS_Store files.

Removes the download quarantine flag from an app you trust.

Bypasses a Gatekeeper safety check. Only do this for apps from sources you trust.

Fixes Spotlight not finding files. Re-indexing takes a while in the background.

Restarts the audio service; it relaunches automatically.

Flushes disk caches from memory.

Turns off the display immediately; locks if a password is required after sleep.

Installs git, make, clang and other tools developers need, without the full Xcode app.

Fixes websites that won’t load after a DNS change.

IP addresses, DNS servers, MAC addresses and more for every adapter.

Scans protected Windows files and repairs corrupted ones.

Fixes the component store that sfc relies on. Run it if sfc can’t repair something, then run sfc again.

Finds and repairs file system errors and bad sectors on drive C.

Runs at the next restart and can take hours on large drives.

Fixes many "connected but no internet" problems.

Restart afterwards. Some VPN software may need reinstalling.

The password appears next to "Key Content". Use netsh wlan show profiles to list network names.

Saves an HTML report with design vs. current capacity and usage history.

The last column is the process ID (PID).

Force-closes the process.

Unsaved work in that program is lost.

Force-closes every running copy of the program.

Updates every app winget knows about. Run winget upgrade first to see the list.

Installs an app by ID. Find IDs with winget search.

Every installed app with its version.

Reboots straight into firmware settings.

Restarts immediately. Save your work first.

Schedules a shutdown. Cancel it with shutdown /a.

Compare the hash with the one published by the download site.

Makes the PATH environment variable readable.

Deletes files in your user temp folder. Files in use are skipped.

Installs the Windows Subsystem for Linux with Ubuntu. Restart when prompted.

Puts a text file on the clipboard.

Shows whether a TCP connection succeeds. Handy for firewall debugging.

Shows uptime in days, hours and minutes.

Useful for warranty lookups.

Brings back the full context menu without "Show more options". Delete that key to undo.

Edits the registry and restarts Explorer.

Turns on hidden files and restarts Explorer.

Open from an administrator terminal so you can save changes.

OS version, install date, memory, hotfixes and more.

Refreshes package lists and installs all available updates.

Refreshes metadata and upgrades all packages.

Syncs the package database and upgrades the system.

Deletes packages nothing depends on and clears the download cache.

Disk usage of every mounted drive in human-readable sizes.

Size of each item in the current folder, smallest to largest.

Used, free and available RAM and swap.

The ten processes using the most memory.

Asks the process to exit. If it ignores you, use kill -9 to force it.

Stops every process whose command line matches.

Matches broadly; check with pgrep -fl first.

Shows whether a service is running and its latest log lines.

Stops and starts the service.

Enables the service at boot and starts it immediately.

Streams new log lines as they arrive. Ctrl+C to stop.

Name, version and ID of the Linux distribution.

Kernel name, version and architecture.

Lets you run it with ./script.sh.

Fixes "permission denied" on files created by root.

Adds the user to the sudo group (wheel on Fedora/Arch). They need to log in again.

Every open TCP/UDP port with the process that owns it.

Allows incoming traffic on a port (Ubuntu’s ufw). Enable the firewall with sudo ufw enable.

Always allow SSH (22) before enabling ufw on a remote server, or you’ll lock yourself out.

Opens your cron table. Each line is: minute hour day month weekday command.

Refreshes the output on screen. Ctrl+C to stop.

For Wayland desktops. On X11 use: xclip -selection clipboard < file.

Model, cores, threads and cache sizes.

Shows the program and PID listening on or connected to the port.

Force-stops every process using the port. Fixes "address already in use".

Force-kills without letting the program save. Check with lsof -i first.

Finds the process listening on the port and stops it.

Every program accepting connections, with numeric addresses and ports.

The IP the internet sees you as.

Prints the addresses a domain resolves to. Add a record type like MX or TXT after the domain.

Shows the DNS server used and the addresses for a domain.

Sends four pings and reports latency and packet loss. (On Windows, just ping host.)

Lists every hop between you and the destination. On Windows use tracert.

Fetches only the response headers: status code, caching, redirects, server.

Saves the file with its original name, following redirects.

Prints the total time for one request.

Shows the certificate’s valid-from and valid-until dates.

Serves the current folder at http://localhost:8000. Great for testing static sites.

Registrar, creation and expiry dates and name servers.

Searches the folder and all subfolders for matching names.

Lists files bigger than the size you choose, with their sizes.

Every line containing the text, with file names and line numbers.

Much faster than grep and skips .gitignore’d files. Install with brew install ripgrep.

Creates a compressed archive.

Unpacks the archive into the current folder.

Creates a .zip that opens anywhere.

Extracts the zip into the given folder.

Copies only what changed and preserves timestamps and permissions. The trailing slash on the source means "its contents".

Prints new lines as they’re written. Ctrl+C to stop.

Number of lines (add -w for words).

Verify downloads against the published hash. On Linux you can also use sha256sum.

Makes a link that points to the original file or folder.

Visual folder structure, limited to N levels. Install with brew install tree.

Renames every .txt in the folder to .md.

Renames files in place. Try it on a copy first.

Removes macOS folder metadata files from the current folder down.

Frees up gigabytes from old projects. Reinstall later with npm install.

Deletes folders permanently. Run it from your projects folder, not from / or ~.

Running and stopped containers with their status and ports.

Starts a container in the background and maps a port to your machine.

Opens a shell in a fresh container that is deleted when you exit.

Use bash instead of sh if the image has it.

Last 100 lines, then streams new ones.

Builds from the Dockerfile in the current folder.

Works the other way round too.

Builds images if needed and starts all services in the background.

Leave out the service name to see all of them.

Stops and removes the containers and network. Add -v to also delete volumes (data).

Gracefully stops every running container.

Space used by images, containers, volumes and build cache.

Deletes untagged leftover layers from old builds. Asks before deleting.

Deletes all stopped containers. Asks before deleting.

Removes stopped containers, unused networks, every image not used by a container, and the build cache.

You’ll need to re-download or rebuild images. Volumes are kept unless you add --volumes.

Check which versions you’re running.

The classic fix for weird dependency errors.

Regenerates the lockfile, so versions may change within your semver ranges.

Deletes node_modules and installs exactly what package-lock.json says. Best for CI and reproducible builds.

Current, wanted and latest versions of every dependency.

Bumps every version in package.json to the newest release.

Includes major versions that may have breaking changes. Commit first.

Shows which dependencies pulled it in.

Everything installed with npm install -g.

Fixes some corrupted-download errors.

Upgrades packages with known vulnerabilities where it’s safe to do so.

Requires nvm (or nvm-windows).

Scaffolds a new Next.js project with prompts for TypeScript, ESLint and more.

Choose React, Vue, Svelte and more.

Turns on pnpm using Node’s built-in Corepack.

Run npm run with no name to list available scripts.

Keeps this project’s packages separate from the system.

If activation is blocked, run: Set-ExecutionPolicy -Scope CurrentUser RemoteSigned

Installs every package listed.

Writes exact versions of everything in the environment.

Use python instead of python3 on Windows.

uv is a very fast Python package and project manager.

Pipes a script from the internet into your shell. This is the official installer; read it first if unsure.

Creates pyproject.toml, a starter main.py and a .gitignore.

Installs it into the project environment and records it in pyproject.toml.

Runs inside the project environment, syncing dependencies first.

Formats a JSON file with indentation. Also works on piped input.

Path and version of the active interpreter.

Creates a modern, secure key pair in ~/.ssh. Press Enter to accept the default location.

Puts the public key on the clipboard to paste into GitHub, GitLab or a server.

Puts the public key on the clipboard.

Stores the passphrase in Keychain so you’re not asked every time.

Confirms GitHub accepts your key.

Lets you log in without a password from now on.

Copies a file over SSH. Add -r for folders.

Open http://localhost:8080 to reach the server’s port 80 through an encrypted tunnel.

SSH refuses private keys other users can read.

The official one-line installer from brew.sh.

Runs a script from the internet with your permissions. This is Homebrew’s official installer.

Refreshes Homebrew and upgrades all installed formulae and casks.

Removes old versions and the entire download cache.

Installs a GUI app. Search names with brew search.

All installed formulae and casks.

Checks your setup and explains how to fix issues.

Starts a database or server and keeps it running at login.

Saves everything installed to a Brewfile. Restore on a new Mac with brew bundle --file=~/Brewfile.