fob

SSH private keys sit on disk, and if the machine is compromised the key can leak. fob locks keys into a security chip: a menu bar SSH agent that keeps keys in the Secure Enclave, gated by Touch ID, the private key is generated and stored in the Mac's Secure Enclave and never exported, and each SSH connection requires Touch ID approval, greatly improving key security. A macOS app.

Features

Secure Enclave: Keep SSH keys in the Secure Enclave.

Touch ID: Fingerprint approval per connection.

SSH agent: Runs as a menu bar SSH agent.

Safer keys: Private key never leaves the enclave.