Hey devs & sysadmins,
I ve been tweaking my dev environment on Windows lately, and I m curious about your setups.
Traditional passphrases get annoying when you authenticate dozens of times a day. Standard hardware keys (like Yubikeys) are great, but leaving them plugged in feels sub-optimal, and forgetting them turns into a total disaster.
Ideally, I want hardware-isolated security but with zero frictionless biometrics. Have you found a perfect solution, or are you still raw-dogging plain-text keys in your .ssh folder?
HelloUKey is a modern, local SSH key vault powered by native Windows Hello and TPM. It ensures that every single SSH authentication prompt requires a biometric check (fingerprint or face ID), turning your PC into a hardware security key—hence the name "UKey".
Key Features:
Biometric Guard: Generates and protects SSH keys using native Windows Hello.
TPM Hardware Security: Transforms your PC's TPM chip into an isolated, hardware-backed SSH authenticator.
Smart Host Routing: Bind specific host configs to keys to prevent SSH clients from failing due to too many authentication attempts.
Universal Compatibility: Works seamlessly as an SSH Agent for Git, PuTTY, OpenSSH, and more.
Been waiting for something like this for ages. The fingerprint unlock for SSH is so much smoother than digging through my password manager every time.
@ecegencogl26083 Haha, building this app is like adding a fingerprint authenticator to SSH. I hope you like it.