SSH keys & access

Generate an Ed25519 key

Run the command below in a terminal with OpenSSH installed. Choose a new filename when prompted, and a passphrase to protect the private key. Do not overwrite an existing key you still use.

ssh-keygen -t ed25519 -a 64

The .pub file is your public key. Its matching file without .pub is private and stays on your computer.

Register the complete public key

In Dashboard → SSH keys, enter a label and paste the entire line from the .pub file. Supported formats begin with ssh-ed25519 or ecdsa-sha2-nistp256, followed by the encoded key and an optional comment.

The saved SHA256 fingerprint identifies the public key. Changing a comment does not change its fingerprint. To compare locally, run ssh-keygen -lf followed by the path to the .pub file.

Use and revoke a key

Select one saved, active key when configuring a node. Revoking a key removes it from future deployment choices; it is not a remote command to edit an existing machine.

The local demo validates and stores keys but does not create a remote host. A connection command will require a real hostname, username and independently verified host fingerprint when provisioning is connected.