News for hackers. Stuff that matters.

A comment on Protecting SSH Keys with macOS Secure Enclave.

Re:Protecting SSH Keys with macOS Secure Enclave by Gigachad on Wednesday November 11, 2026 @12:01AM (#50449914)
I was looking in to this just earlier today. The native macos version worries me a little because it seems someone just happened to discover it in MacOS, rather than it being a documented feature. The worry being Apple could change or remove it later locking you out of your keys since they never advertised this as a thing you could do.
[ Parent | on HN ]
Re:Protecting SSH Keys with macOS Secure Enclave by cavoirom on Wednesday November 11, 2026 @12:12AM (#50449960)
It is the same as you lost your device. You must have a second backup key, and treat one in Secure Enclave as disposable key.
[ Parent | on HN ]
Re:Protecting SSH Keys with macOS Secure Enclave by tengwar2 on Wednesday November 11, 2026 @07:20AM (#50452578)
Just to clarify this - you can have multiple public keys for the same user on the server end, in ~user/.ssh/authorized_keys. It's obvious when you know it, but I think it can be a source of confusion when discussing backup keys.
[ Parent | on HN ]