Re:Protecting SSH Keys with macOS Secure Enclave
by gatezh on Wednesday November 11, 2026 @10:36AM
(#50454667)
Author here. Thanks to js2 for posting this, and to everyone for the comments. I've learned a lot from this thread.
To answer the question a few people asked: I ended up using Secretive. The native approach works, but I couldn't live with the Touch ID prompt it shows. Secretive keeps the keys in the Secure Enclave too, with a much better prompt and per-key settings. I'm writing a part 2 about it, including forwarding the agent into a dev container so the key never enters the container.
To answer the question a few people asked: I ended up using Secretive. The native approach works, but I couldn't live with the Touch ID prompt it shows. Secretive keeps the keys in the Secure Enclave too, with a much better prompt and per-key settings. I'm writing a part 2 about it, including forwarding the agent into a dev container so the key never enters the container.