Keys never leave the device
The private key is generated and kept in the Secure Enclave / TPM or a FIDO2 security key and cannot be copied out.
Sign in to servers with a key bound to your device's hardware, like passkeys on the web: no private key file to leak, no password to forget.
The private key is generated and kept in the Secure Enclave / TPM or a FIDO2 security key and cannot be copied out.
Each connection is confirmed with Touch ID, Windows Hello or a tap on your security key.
Uses standard sk-ssh-ed25519 / ecdsa-sk keys: just add the public key to authorized_keys as usual.
Want to be notified when SSH ID launches? Leave a suggestion with your email.