Using Burrow

Keychain (SSH keys)

Generate or import SSH keys. The private halves are kept in the encrypted vault.

On this page

Generate a key

Open Keychain in the sidebar and generate a new key. There are two types:

Type	When to use it
Ed25519	The recommended default. Use it unless a server can’t handle it.
RSA 4096	Only for old servers that don’t support Ed25519.

Import a key

Paste a private key, or read it from a file.

If the key has a passphrase, you can store it in the vault as well. That’s optional. If you don’t store it, Burrow asks for it when you connect and offers to save it then.

Put the public key on the server

Copy the key’s public key from the Keychain.
On the server, add it as a new line to ~/.ssh/authorized_keys of the user you log in as.
In the host form, set Authentication to Key and pick the key.

Where keys are stored

Private keys and passphrases are stored only in the encrypted vault. Public keys and fingerprints aren’t secret, so they’re kept in plain keys.json. Your data lists every file.