On this page
Loading...
Generate FIDO2 Key for SSH
Termius makes it easy to use hardware keys for SSH connections, providing a way to try cutting-edge security practices with just a few clicks. Start by generating the FIDO2 key on mobile and desktop.
ⓘ Hardware keys usually need to be set up before their first use. Some require a PIN code, while others use a biometric scanner and require you to enroll your fingerprint. Make sure you finish setting up your hardware key before following the steps below.
Desktop
iOS
Android
To generate a FIDO2 key, follow these steps:
Navigate to the
KeychainClick
FIDO2and chooseGenerate FIDO2 keysin the context menu.Plug in your hardware key.
Select your hardware key on the device's list.
Adjust optional configuration settings such as
Require User PresenceorRequire PIN codeandPassphrasefor better security. Learn about all configuration settings below.Click
Generate.
Configuration Settings Explained
Require User Presence - when enabled, Termius prompts you to touch the hardware key when logging in to a server. This option is used as 2FA to ensure that authentication doesn't happen without your intent.
Require PIN code - when enabled, Termius prompts you to enter the hardware key's PIN code. This option is available only when your hardware key has a PIN code set.
Passphrase provides an additional layer of security. Termius will prompt you for the passphrase on every connection; toggle Save passphrase to avoid passphrase prompts.
Desktop
iOS
Android
To generate a FIDO2 key, follow these steps:
Navigate to the
KeychainClick
FIDO2and chooseGenerate FIDO2 keysin the context menu.Plug in your hardware key.
Select your hardware key on the device's list.
Adjust optional configuration settings such as
Require User PresenceorRequire PIN codeandPassphrasefor better security. Learn about all configuration settings below.Click
Generate.
Configuration Settings Explained
Require User Presence - when enabled, Termius prompts you to touch the hardware key when logging in to a server. This option is used as 2FA to ensure that authentication doesn't happen without your intent.
Require PIN code - when enabled, Termius prompts you to enter the hardware key's PIN code. This option is available only when your hardware key has a PIN code set.
Passphrase provides an additional layer of security. Termius will prompt you for the passphrase on every connection; toggle Save passphrase to avoid passphrase prompts.
Desktop
iOS
Android
To generate a FIDO2 key, follow these steps:
Navigate to the
KeychainClick
FIDO2and chooseGenerate FIDO2 keysin the context menu.Plug in your hardware key.
Select your hardware key on the device's list.
Adjust optional configuration settings such as
Require User PresenceorRequire PIN codeandPassphrasefor better security. Learn about all configuration settings below.Click
Generate.
Configuration Settings Explained
Require User Presence - when enabled, Termius prompts you to touch the hardware key when logging in to a server. This option is used as 2FA to ensure that authentication doesn't happen without your intent.
Require PIN code - when enabled, Termius prompts you to enter the hardware key's PIN code. This option is available only when your hardware key has a PIN code set.
Passphrase provides an additional layer of security. Termius will prompt you for the passphrase on every connection; toggle Save passphrase to avoid passphrase prompts.
Desktop
iOS
Android
To generate a FIDO2 key, follow these steps:
Navigate to the
KeychainClick
FIDO2and chooseGenerate FIDO2 keysin the context menu.Plug in your hardware key.
Select your hardware key on the device's list.
Adjust optional configuration settings such as
Require User PresenceorRequire PIN codeandPassphrasefor better security. Learn about all configuration settings below.Click
Generate.
Configuration Settings Explained
Require User Presence - when enabled, Termius prompts you to touch the hardware key when logging in to a server. This option is used as 2FA to ensure that authentication doesn't happen without your intent.
Require PIN code - when enabled, Termius prompts you to enter the hardware key's PIN code. This option is available only when your hardware key has a PIN code set.
Passphrase provides an additional layer of security. Termius will prompt you for the passphrase on every connection; toggle Save passphrase to avoid passphrase prompts.