SSH Keys

Generate a new key with:

ssh-keygen -t ed25519 -C "work-laptop-2026"

Leave the passphrase blank if you want automatic login (no prompt on connect).

Copy the public key to the host:

ssh-copy-id username@remote_host

YubiKeys

For FIDO2 / security-key backed SSH keys, see Securing SSH with FIDO2 (OpenSSH 8.2+ on the client; user verification / PIN can be enforced per operation).

Start generation of a new -sk key. Enter a passphrase if you want one — it is optional.

ssh-keygen -t ed25519-sk

Linux

If you are already on Linux, copy the key with ssh-copy-id:

ssh-copy-id -i ~/.ssh/id_ed25519_sk.pub username@remote_host

Windows

On Windows, paste the contents of the newly created .pub file into the server’s authorized_keys:

vim ~/.ssh/authorized_keys

WSL

To use a YubiKey from WSL2, pass the USB device through from Windows.

• Connect USB devices to WSL
• usbipd + YubiKey notes (gist)

Install usbipd to allow USB passthrough into WSL2:

winget install usbipd