> For the complete documentation index, see [llms.txt](https://docs.termius.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.termius.com/ssh-id-passkeys-for-ssh/setup-and-usage.md).

# Setup and usage

## Create SSH ID

{% tabs %}
{% tab title="Desktop" %}
To create SSH ID on desktop:

1. Navigate to `Termius > Settings > SSH ID`
2. Click `Set up SSH ID` to start

   <figure><img src="/files/pN4pH01u7R4dH2BpsN1H" alt=""><figcaption></figcaption></figure>
3. Choose your unique username, then wait for Termius to generate passkeys on this device

   <figure><img src="/files/MmHMafwkVZZseNBidQx1" alt=""><figcaption></figcaption></figure>
4. Open Termius on your other devices to generate passkeys there. We recommend using at least two devices

   <figure><img src="/files/pHjUAUewRgUKLdaRZjzc" alt=""><figcaption></figcaption></figure>
5. Your SSH ID is ready. Next, [connect using SSH ID](#connect-using-ssh-id).

   <figure><img src="/files/A1U67bXEBBRIewudpBTK" alt=""><figcaption></figcaption></figure>

{% endtab %}

{% tab title="iOS" %}
To create SSH ID on iOS:

1. Open `Profile`, then tap `SSH ID`

   <div align="left"><figure><img src="/files/OXekY5mDnB6P56WB6zuE" alt="" width="375"><figcaption></figcaption></figure></div>
2. Tap `Set up your SSH ID` to start

   <div align="left"><figure><img src="/files/GZml8mh9AMcIAUAvQ7VE" alt="" width="375"><figcaption></figcaption></figure></div>
3. Choose your unique username, then wait for Termius to generate passkeys on this device

   <div align="left"><figure><img src="/files/SJA0cj2nsCzqp9z7xAaA" alt="" width="375"><figcaption></figcaption></figure></div>
4. Open Termius on your other devices to generate passkeys there

   <div align="left"><figure><img src="/files/pHjUAUewRgUKLdaRZjzc" alt="" width="563"><figcaption></figcaption></figure></div>
5. Choose whether to use biometric passkeys by default

   <div align="left"><figure><img src="/files/K3JUedMpT6diKZJHm1Ro" alt="" width="375"><figcaption></figcaption></figure></div>
6. Your SSH ID is ready. Next, [connect using SSH ID](#connect-using-ssh-id).

   <div align="left"><figure><img src="/files/TpMW0kjd7lL4NGsBK4C3" alt="" width="375"><figcaption></figcaption></figure></div>

{% endtab %}

{% tab title="Android" %}
To create SSH ID on Android:

1. Open `Settings`, then tap `Account settings` > `SSH ID`

   <div align="left"><figure><img src="/files/o0oJhGkSjwoFCpQvBPK8" alt="" width="563"><figcaption></figcaption></figure></div>
2. Tap `Set up your SSH ID` to start

   <div align="left"><figure><img src="/files/BXZQcU91LCCrj30KDqkz" alt="" width="375"><figcaption></figcaption></figure></div>
3. Choose your unique username, then wait for Termius to generate passkeys on this device

   <div align="left"><figure><img src="/files/cxUNc3ZIhm2gUuHwW785" alt="" width="375"><figcaption></figcaption></figure></div>
4. Open Termius on your other devices to generate passkeys there

   <div align="left"><figure><img src="/files/DWkGkt63Fssf7vb4eVk4" alt="" width="375"><figcaption></figcaption></figure></div>
5. Choose whether to use biometric passkeys by default

   <div align="left"><figure><img src="/files/IE0VnSqxZMWCzSuUypw0" alt="" width="375"><figcaption></figcaption></figure></div>
6. Your SSH ID is ready. Next, [connect using SSH ID](#connect-using-ssh-id).

   <div align="left"><figure><img src="/files/b6Q1EPQLLHF8tyutsmJ5" alt="" width="375"><figcaption></figcaption></figure></div>

{% endtab %}
{% endtabs %}

### Add a FIDO2 key to SSH ID

On devices that support biometric authentication, such as Face ID, Touch ID, or Windows Hello, an ECDSA-SK passkey is generated and stored in the device’s secure enclave by default.

For devices that do not support built-in biometric authentication, you can add FIDO2 security keys, such as YubiKey or Google Titan, to enable presence-based authentication.

To add a FIDO2 key to SSH ID:

1. Navigate to `Termius > Settings > SSH ID`
2. Click `Add FIDO2 Key`

   <figure><img src="/files/r6fDSmfax19C3nOTHsVL" alt=""><figcaption></figcaption></figure>
3. Enter your encryption password

   <figure><img src="/files/gxY3L8hx6z8g85rl3CGf" alt=""><figcaption></figcaption></figure>
4. Plug in your hardware key and enter a PIN if required

   <figure><img src="/files/Kge9LWkmpaNJJFmGP19B" alt=""><figcaption></figcaption></figure>
5. Enter a label and confirm your presence by tapping the key

   <figure><img src="/files/P70OEfjsoLRX9Ffho9yq" alt=""><figcaption></figcaption></figure>
6. The FIDO2 key is added to your SSH ID

   <figure><img src="/files/2hssFhE2hGivtSX3Cg31" alt=""><figcaption></figcaption></figure>
7. Add the corresponding public key to `~/.ssh/authorized_keys` on your servers. Once added, you can use the FIDO2 key to connect from any logged-in device. Learn more in [connect using SSH ID](#connect-using-ssh-id)

### Add a new device to SSH ID

<figure><img src="/files/pHjUAUewRgUKLdaRZjzc" alt=""><figcaption></figcaption></figure>

Each device logged in to your Termius account is automatically added to your SSH ID with its own device-bound SSH keys. These keys are generated each time you log in.

To use that device for SSH connections, add the corresponding public key to `~/.ssh/authorized_keys` on your servers. Learn more in [connect using SSH ID](#connect-using-ssh-id).

## Connect using SSH ID

To connect using SSH ID, first provision your devices' public keys on your servers, then assign SSH ID to your hosts.

### Provision your devices' public keys on your servers

There are several ways to copy the public keys from your SSH ID to your servers.

{% tabs %}
{% tab title="Shell command" %}
To copy the public keys to a server with a shell command:

1. Connect to your server using the currently set up authentication method
2. Run the following command in the terminal:\
   `curl -fs https://sshid.io/<your handle> >> ~/.ssh/authorized_keys`<br>

   <figure><img src="/files/wnXKhhcKjlG2EQdn4tsx" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
If you want to use a non-default passkey type, use `https://sshid.io/<your handle>/<key_type>`, for example `https://sshid.io/<your handle>/RSA`.
{% endhint %}
{% endtab %}

{% tab title="\~/.ssh/authorized\_keys" %}
To copy the public keys to a server manually:

1. Go to `https://sshid.io/<your_handle>`

   <figure><img src="/files/80DjCwKiwbSnRzNxNR7h" alt=""><figcaption></figcaption></figure>
2. Select `~/.ssh/authorized_keys`

   <figure><img src="/files/MMqfhhD2btN6U1Pap1RC" alt=""><figcaption></figcaption></figure>
3. Select a passkey type if you want to use a non-default one

   <figure><img src="/files/REQNZcnIqiwbFKXQH4fg" alt=""><figcaption></figcaption></figure>
4. Copy all your public keys

   <figure><img src="/files/TJONCLa420o0ndMnsZsF" alt=""><figcaption></figcaption></figure>
5. Connect to your server using the already set authentication method
6. Paste the copied public keys into `~/.ssh/authorized_keys`
   {% endtab %}
   {% endtabs %}

### Assign SSH ID to a host and connect

{% tabs %}
{% tab title="Desktop" %}
To assign SSH ID to your hosts on desktop:

1. Open the host details for the host you want to connect to with SSH ID

   <figure><img src="/files/wum1TbueCE6AdjgA8iFh" alt=""><figcaption></figcaption></figure>
2. In the `Credentials` section, enter the username first. If no username is set, your SSH ID handle is used as the default username

   <figure><img src="/files/qcs6sxf5iKktr0IgkDDt" alt=""><figcaption></figcaption></figure>
3. Click `+ SSH ID, Key, Certificate, FIDO2`. If the **SSH ID** option is not available, make sure your credentials are in the **Personal vault**

   <figure><img src="/files/PJLxwGPiCuuo8569ihZO" alt=""><figcaption></figcaption></figure>
4. Choose `SSH ID` as the authentication method

   <figure><img src="/files/uHtEavGUuDs5Rahzlmbq" alt=""><figcaption></figcaption></figure>
5. Connect to the host from any signed-in device. SSH ID automatically selects the right key available on that device

   <figure><img src="/files/H1sOGfiEeHLg5CmWJkKg" alt=""><figcaption></figcaption></figure>

{% endtab %}

{% tab title="iOS" %}
To assign SSH ID to your hosts on iOS:

1. Long press the host you want to connect to with SSH ID, then tap `Edit`

   <div align="left"><figure><img src="/files/qfWlCwBqf5X0v108w8Hl" alt="" width="375"><figcaption></figcaption></figure></div>
2. In the `Credentials` section, enter the username. If no username is set, your SSH ID handle is used as the default username

   <div align="left"><figure><img src="/files/NkgYDXDyjL23UEohz6h6" alt="" width="375"><figcaption></figcaption></figure></div>
3. Tap `SSH ID, Key, Certificate, FIDO2`, then choose `SSH ID` as the authentication method

   <div><figure><img src="/files/BQsl74cnkRIQQHCDgG47" alt=""><figcaption></figcaption></figure> <figure><img src="/files/xwnipTFjbCjplXpzl1nR" alt=""><figcaption></figcaption></figure></div>
4. Tap `Save`
5. Connect to the host. SSH ID automatically selects the right key available on your device

   <div align="left"><figure><img src="/files/GZPZmarmz8Oz65rbYyyI" alt="" width="375"><figcaption></figcaption></figure></div>

{% endtab %}

{% tab title="Android" %}
To assign SSH ID to your hosts on Android:

1. Tap the host icon you want to connect to with SSH ID, then tap `Edit`

   <div align="left"><figure><img src="/files/GkTIJ8bMqgMLcEDy6Nbz" alt="" width="375"><figcaption></figcaption></figure></div>
2. In the `Credentials` section, enter the username first. If no username is set, your SSH ID handle is used as the default username

   <div align="left"><figure><img src="/files/reiHHLVyZDkPUeUZytnF" alt="" width="375"><figcaption></figcaption></figure></div>
3. Tap `SSH ID, Key, Certificate, FIDO2`, then choose `SSH ID` as the authentication method

   <div align="left"><figure><img src="/files/A5OeDSoYp5MCRRWeMStO" alt="" width="375"><figcaption></figcaption></figure></div>
4. Tap `Save`
5. Connect to the host. SSH ID automatically selects the right key available on your device

   <div align="left"><figure><img src="/files/Bhz5kSFOKfgIRIoxPz3x" alt="" width="375"><figcaption></figcaption></figure></div>

{% endtab %}
{% endtabs %}

## Remove SSH keys from SSH ID

Each device logged in to your Termius account is added to your SSH ID and has its own device-bound SSH keys. These keys remain valid while the device stays logged in. If you want to rotate a key, log out and then log back in on that device.

### To remove an SSH key from SSH ID

1. Log out of your Termius account on the relevant device
2. Update `~/.ssh/authorized_keys` on your servers

### To remove a FIDO2 key from SSH ID

<figure><img src="/files/xqOryZtQVQyQYi0VSbm6" alt=""><figcaption></figcaption></figure>

1. Navigate to `Termius > Settings > SSH ID`
2. Click the three-dot menu next to the FIDO2 key you want to remove, then select `Remove`
3. Update `~/.ssh/authorized_keys` on your servers

## Delete SSH ID

When you delete your SSH ID, all the device-bound SSH keys associated with this SSH ID handle will be removed, so you no longer will be able to use them to connect to the hosts.&#x20;

{% hint style="danger" %}
Before you delete the SSH ID, ensure you have an alternative authentication method set up for your hosts where the SSH ID was used.&#x20;
{% endhint %}

To delete your SSH ID:

1. Navigate to `Settings` → `SSH ID`
2. Click the `three-dots` menu next to your SSH ID handle, then click `Delete SSH ID`&#x20;

   <figure><img src="/files/MIj3nIxhusy6rrES1UsR" alt=""><figcaption></figcaption></figure>
3. Enter your encryption password to confirm the SSH ID deletion

   <figure><img src="/files/1cMxl6AdZiaD3AtDDgQf" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Don't forget to update the `~/.ssh/authorized_keys` files on your servers to clean it up from the no longer usable public keys associated with your previous SSH ID.&#x20;
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.termius.com/ssh-id-passkeys-for-ssh/setup-and-usage.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.