SSH keys

An SSH key lets you log in without typing a password. The server keeps your public key and your device keeps the private half. When you connect, the server checks that the two match. It is stronger than a password - there is nothing to guess, and nothing to mistype on a phone keyboard.

Add a key

Open the "Keys" tab. If you have none yet, it says "No SSH keys yet" and "Tap + to generate or import a key."

You can choose one of four actions:

• Generate Ed25519 - Fast, secure modern key
• Generate RSA 2048 - Compatible with most servers
• Generate RSA 4096 - Stronger RSA (takes longer)
• Import private key - Choose a key file or paste PEM

Generate a key

Pick a type, then give the key a name. The app shows the public half and tells you:

"Add this public key to your server's ~/.ssh/authorized_keys:"

Copy the text and put it on the server. Until you do, the key will not work.

Import a key

You can pick a file or paste the PEM text. The app checks that the file is not empty or too large.

After you add a key

Each key in the list has three actions:

• Copy public key - puts the public half on the clipboard
• Rename - changes the name you gave it
• Delete - removes the key from the app

Deleting a key warns you that it cannot be undone.

Where keys are stored

The private half is sealed with your device's encryption before it is saved. The public half and the name stay readable so the list can be shown without unsealing anything. Nothing is uploaded anywhere.

Use a key with a profile

In a profile's Authentication section, pick SSH Key. You can choose one of the keys you saved, or paste a key just for that profile.

If the key has a passphrase, type it in the Passphrase field. The field is optional, so leave it empty if the key has none.