logoalt Hacker News

nottorplast Sunday at 4:46 PM3 repliesview on HN

And what do you do with the passphrase, store it encrypted with a passphrase?


Replies

otterleylast Sunday at 4:54 PM

This is what agents are for. You load your private key into an agent so you don't have to enter your passphrase every time you use it. Agents are supposed to be hardened so that your private key can't be easily exfiltrated from them. You can then configure `ssh` to pass requests through the agent.

There are lots of agents out there, from the basic `ssh-agent`, to `ssh-agent` integrated with the MacOS keychain (which automatically unlocks when you log in), to 1Password (which is quite nice!).

show 1 reply
0xbadcafebeelast Sunday at 4:49 PM

You memorize it, or keep it in 1Password. 1Password can manage your SSH keys, and 1Password can/does require a password, so it's still protected with something you know + something you have.

fwiplast Sunday at 4:53 PM

One option is to remember it.

show 1 reply