WardtermSSH client
EN
Download

Wardterm documentation

Keys on this device

Create an SSH key inside the secure chip of your device with Wardterm, confirm each use with Touch ID or Face ID, and add it to your servers.

What it is

A key on this device is made inside the Secure Enclave, the secure chip of your Mac, iPhone or iPad. The private key cannot be copied, exported or synced.

Create one

  1. Open Keys. On Mac choose New Key, on iPhone and iPad choose +.
  2. Choose Key on This Device.
  3. Give it a Name, such as the name of the device.
  4. Keep Ask for Touch ID or Face ID each time it is used on if you want to confirm every sign-in.
  5. Choose Create key.

The key shows as This device only, with the type Device key.

Use it on a server

  1. Open the key and choose Add to a server, as with any key. See SSH keys.
  2. Choose Use to sign in, or choose the key in the server's Key field.
  3. Connect. If you asked for it, confirm with Touch ID or Face ID.

The public key is of the type ecdsa-sha2-nistp256, which OpenSSH servers accept by default. To check on the server:

sudo sshd -T | grep pubkeyacceptedalgorithms

On several devices

Each device makes its own key. Create one on each device and add each to your servers. A server can hold many keys in its authorized_keys file, one per line.

If a device is lost, remove its key from your servers, and the device from your account: see Your account.

For a key you carry from computer to computer, see Security keys.