SSH key management with LastPass
This repository has a tool called
lastpass-ssh which integrates LastPass
with SSH. You store your SSH key passphrases in LastPass, and SSH key files
somewhere else. To start using SSH, you type
lastpass-ssh and it will
unlock all SSH keys with appropriate passphrases taken from LastPass.
How to install
Install the LastPass command line client (
lpass) from a
brew install lastpass-cli gem install lastpass-ssh
You make yourself an "SSH" subfolder in the LastPass' "Secure Notes" and add secure notes there. Each note has a name and a passphrase. The name corresponds to the filename of the SSH key file, and the passphrase is its key's passphrase.
Example: if you have a key like
~/.ssh/, then the name of the
Secure Note would be
How to use
It will poll the "Secure Notes/SSH" folder and for each note of name "A",
it'll try to perform
ssh-add ~/.ssh/A with an appropriate passphrase.
You can change the location of keys by passing
--keys-path=<where-you-have-keys>. By default all keys are added. You
can change this behavior by passing
--key=KEYNAME option, where
is the name of the key file you want to add.
I wrote an article on lastpass-ssh.
lastpass-ssh script is based on the
lpass command line tool
provided by LastPass team themselves.