Create a key
- Open Keys. On Mac choose New Key, on iPhone and iPad choose +.
- Choose Generate key.
- Give it a Name and choose the type: Ed25519, the default, or ECDSA or RSA for servers that need them.
- Add a passphrase if you like.
- Choose Generate.
The same key with OpenSSH:
ssh-keygen -t ed25519 -C "deploy@laptop"Import a key
- In Keys, choose Add existing key.
- Paste the private key, or choose Load from file. OpenSSH, PEM and
.ppkkeys all work. - If the key has a passphrase, enter it.
- If you sign in with an SSH certificate, paste it in Certificate.
On Mac, Import keys… in Settings, SSH Agent brings in all the private keys in ~/.ssh at once.
If the app says Convert this key with ssh-keygen -p, convert the key with OpenSSH, then import it again:
ssh-keygen -p -f ~/.ssh/id_rsaAdd the key to a server
- Open the key and choose Add to a server.
- Choose the server. The app signs in with its current login and adds the public key to
~/.ssh/authorized_keys, creating the folder and the file with the right permissions if they are missing. - When it says Key added, choose Use to sign in so that the server signs in with the key from now on.
The same with OpenSSH:
ssh-copy-id -i ~/.ssh/id_ed25519.pub deploy@203.0.113.10
To use a key on a server by hand, choose it in the server's Key field.
Copy or show a key
- Copy public key puts the public key on the clipboard, to paste it where a service asks for it.
- Show private key shows the private key.
- The menu of a key has Copy public key, Edit, Share with team and Delete.
Keep a key on one device
Turn on This device only in a key to keep its private part on this device. It is not synced: your other devices get only the public key. For a key that can never leave the device, see Keys on this device, and for a YubiKey, Security keys.
Saved logins
A login is a user with a password or a key, saved under a name and used by many servers. Change it once and every server that uses it gets the change.
- In Keys, choose New login.
- Fill in the user and the password or key.
- In each server, choose the login in the Key field.
In Settings, Security, under Checks: Find repeated sign-ins finds servers where the same user and password are typed in each, and saves them as one login. Check security of all servers checks every server and shows a summary.