SeKey
Use Touch ID or Secure Enclave for SSH authentication
SeKey is an SSH agent that stores private keys inside macOS’s Secure Enclave and uses Touch ID or the enclave’s hardware protection to sign authentication requests. When a key is generated, it never leaves the enclave; the agent forwards only the resulting cryptographic signatures to the SSH client, keeping the private material isolated from the main processor.
The tool is aimed at developers and system administrators who connect to UNIX/Linux SSH servers from a MacBook Pro with Touch Bar and Touch ID. It provides command‑line options to generate, list, export (public part), and delete 256‑bit elliptic‑curve keypairs, and can run as a background daemon exposing a Unix socket for standard SSH authentication.
Installation is performed via Homebrew Cask, a downloadable PKG, or a manual setup that registers a launch agent. Users configure the environment variable SSH_AUTH_SOCK to point to SeKey’s socket, allowing any SSH client to use the enclave‑backed keys without additional software changes.
Reviews
Loading reviews…
Similar apps
Password & Security
Secretive
Store SSH keys in the Secure Enclave
Password & Security
Yubiswitch
Status bar application to enable/disable Yubikey Nano
Password & Security
TouchBridge
Authenticate with your phone's fingerprint as a free Touch ID keyboard alternative.
Version Control & Git
git-secret
Store your private data inside a git repository.
Security & Identity
AWS Vault
Securely stores and accesses AWS credentials in a development environment
Password & Security
FIDO2.1 Security Key Management Tool
Manage FIDO2.1 security keys