https://blog.margrop.net/en/tag/passkey/ Recent content in Passkey on Margrop Blog Hugo -- gohugo.io en-US Tue, 30 Jun 2026 09:30:00 +0800 https://blog.margrop.net/en/post/ssh-passwordless-login-passkeys-correct-use/ Tue, 30 Jun 2026 09:30:00 +0800 https://blog.margrop.net/en/post/ssh-passwordless-login-passkeys-correct-use/ <blockquote> <p><strong>Short version</strong></p> <p>SSH passwordless login and passkeys on phones, Macs, and Windows PCs both use the public-key idea, but they are not the same tool. SSH keys are for logging in to servers, Git remotes, jump boxes, and automation endpoints. Passkeys are for signing in to websites, apps, and account systems. They are like two modern key rings: one opens the machine-room door, the other opens your online account door. The cryptographic idea is related, but the locks are different.</p> <p>The practical rule is simple: generate a separate SSH key on each client device, keep the private key only on that device or inside a hardware security key, and put only the public key on the server. Verify public-key login before disabling password login. Use passkeys through iPhone, Android, macOS 26, Windows 11, system password managers, or hardware security keys for website and app sign-in. Do not try to paste a phone passkey into <code>authorized_keys</code>. This post includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus a manual automation path and an Agent-driven configuration path. The examples do not depend on any third-party service and do not contain real internal addresses, full computer names, private domains, or secrets.</p> </blockquote>