Setting Up SSH Keys on macOS with Touch ID

ggm

If you do this, have at least one backup key (if need be on paper) or a guaranteed alternate path into the hosts you depend on this key to access. Because if the secure enclave is as good as we're told, if you lose access to ->THIS<- secure enclave, its game over for the keys. Secure enclave protecting Keychain, the keychain is backed up. Not the contents of the enclave. Too many failed access attempts? poof the key is gone. Could be as low as 10. (happy to be corrected. This is what I gather from a quick read-around. I was a bit surprised the site didn't seem to discuss this)

maratc

> No key files (like ~/.ssh/id_ed25519.pub and friends) littering the file system; and there’s no risk of mistakenly deleting them either. Or backing them up, or copying them to your new computer. You're just one spilled coffee cup away from losing the key.

elmcrest

happy 1Password user since years, provides this too and you'll have you ssh keys in the 1P keychain (yes, not open source, I know - only flaw imho)