SSH Key Manager
Generate, view, and deploy SSH keypairs without leaving Schooner. One-click ssh-copy-id installs your public key on any host — and your password never hits disk.
Opening Key Manager
Click the ⛵ menubar icon → Key Manager.
Viewing existing keys
The key list shows all keypairs found in ~/.ssh/. For each key you can see:
- Key type (ed25519, RSA, ECDSA)
- Fingerprint
- Comment (usually your email)
- Whether a passphrase is set
- Public key content (click to copy)
Generating a new keypair
Click New Key…. Choose:
- Type — ed25519 (recommended), RSA 4096, or ECDSA 521
- Comment — typically your email address
- Passphrase — strongly recommended. macOS Keychain integration means you'll only enter it once per login session.
- Filename — saved to
~/.ssh/
Click Generate. The key is created immediately and appears in the list.
Deploying a key (ssh-copy-id)
Select a key in the list, then click Deploy to Host…. Choose the target host from your host list and enter the SSH password for that server when prompted. Schooner runs the equivalent of ssh-copy-id over an authenticated session.
The password is used only for the one-time authentication step and is discarded immediately — it is never written to disk or stored in any database.
Key passphrase handling: Schooner delegates passphrase management entirely to macOS's built-in ssh-agent. You will see the standard macOS "Enter passphrase" dialog — Schooner never prompts for or stores key passphrases itself.
Deleting a key
Select a key and click Delete. Schooner asks for confirmation, then removes both the private and public key files from ~/.ssh/. Make sure the key is no longer deployed to any hosts before deleting.