Skip to main content
Termique stores SSH key pairs encrypted with your DEK and lets any host use them to authenticate. Open SSH keys under Tools in the sidebar.
SSH keys list with fingerprints and algorithms, and the selected key's public key and hosts in the side panel

​
Generate a key

1

Open Generate SSH key

Click Generate key in the SSH keys header.
2

Name the key

Enter a Key name of at least 3 characters, e.g. Work Laptop.
3

Choose an algorithm

4

Generate

Click Generate key. The private key is encrypted with your DEK before it is stored or synced. Termique shows the Fingerprint and Public key.
5

Add the public key to your server

Click Copy public key and append it to ~/.ssh/authorized_keys on the server, or use Install on host. Click Done.
Generate SSH key sheet with ED25519 selected

​
Import a key

1

Open Import SSH key

Click Import in the SSH keys header.
2

Add the private key

Enter a Key name, then paste the key into Private key or click Load from file. A key whose line breaks were lost in copying is reformatted automatically.
3

Enter the passphrase, if any

If the key is passphrase-protected, a Passphrase field appears. Termique checks the key, and the passphrase, as you type.
4

Import

When the sheet shows Valid … private key, click Import key.
The passphrase is encrypted together with the private key, so Termique does not ask for it again when you connect.
Termique can only show the public key for keys in OpenSSH format. If Public key not available appears after an import, convert the key with ssh-keygen -p -f <keyfile> and import it again.
You can also paste a private key directly into a host’s Add host or Edit host sheet under Private key. Termique imports it here as <label> key when you save the host. See Authentication.

​
Use a key for a host

When you add or edit a host, set Authentication to Stored SSH key and pick the key. See Hosts. If a key is passphrase-protected and Termique has no saved passphrase for it, connecting asks for it in Enter passphrase. Turn on Remember this passphrase to store it, encrypted with the key, and skip the prompt next time.

​
Install a key on a host

Termique can append a public key to a server’s ~/.ssh/authorized_keys over an open session.
1

Connect to the host

Open a session to the server, using its current password or another key.
2

Open the key's details

In SSH keys, select the key and click View details, or double-click it.
3

Install it

Under Install on host, pick the connected session and click Install.
Termique creates ~/.ssh and ~/.ssh/authorized_keys with the right permissions if they are missing, and adds the key only if it is not already there. Then edit the host and switch Authentication to Stored SSH key.

​
Key details

Select a key in the list to see it in the side panel:
  • The public key, with Copy public key and Copy fingerprint
  • Fingerprint and Last used
  • Used by: the hosts that authenticate with this key. Click a host to open it.
  • Rename, View details, and Delete key
The list shows each key’s name, fingerprint, algorithm, and how many hosts use it. If any of your hosts still sign in with a password, a notice offers Switch to a key. View details opens a sheet that also shows whether the key has a passphrase. Click Reveal private key to show the private key, and Copy private key to copy it. Termique clears the private key from the clipboard after 1 minute.

​
Verify a fingerprint

Fingerprints use the OpenSSH SHA256: format. To compare with a key on a server, run:

​
Delete a key

Select the key and click Delete key, then confirm. Hosts that use the deleted key can no longer authenticate until you pick another credential for them.

​
Sync

SSH keys sync through the API to your other devices: the encrypted private key, the public key, and metadata. The private key is always encrypted on your device first. The server stores only the ciphertext.