from HTYP, the free directory anyone can edit if they can prove to me that they're not a spambot
Jump to navigation Jump to search


ssh-keygen is a Linux command for generating ssh keys.

Just typing the command without any arguments will generate a new key-pair in ~/.ssh/ (a prompt offers to let you change this), with an optional passphrase (also queried by prompt). The files will be called id_X and, where X is replaced by whatever key type you choose ("rsa" was the default when last tested).

It can also be used to remove conflicting entries from the .known-hosts file.



Note that there is bad syntax in the command format on the manpage. The manpage says:

ssh-keygen [-q] [-b bits] [-t dsa | ecdsa | ed25519 | rsa]

The clause which begins with [-t implies that you could type "-t dsa" or "ecdsa" or "ed25519" or "rsa", but the actual choices are "-t dsa" or "-t ecdsa" or "-t ed25519" or "-t rsa". The actual syntax should be:

ssh-keygen [-q] [-b bits] [-t [dsa | ecdsa | ed25519 | rsa]]

How To

To create a new ed25519 key:

ssh-keygen -t ed25519