Subscribe
Sign in
AreMyKeysSafe — Find out if your SSH keys are still safe
If you have been in the Web space for a number of years, there's a good chance that you are still using some SSH keys you generated 13 years ago. 👵
They might be considered unsafe by today's standards. This app helps you check for that. 🏰
They might be considered unsafe by today's standards. This app helps you check for that. 🏰
4
Replies
Best
Hey Product Hunters! 👋
I’m Neyts, an open source geek and a lifelong maker. Today, I'm sharing a simple in-browser tool, completely private, to check your SSH keys.
🔖 How it all started
My colleague and I were building some DevOps automation using public keys that GitHub publishes for every user. I realized that some of my keys could be old and no longer considered safe. One terminal command later, my fears were confirmed: one of my keys was using an ancient encryption scheme and should no longer be used.
Great, but what about others on my team? I wanted to make it easy for everyone to verify this themselves.
🚀 How it works
There are 3 steps to take:
- Step 1 - go to https://aremykeyssafe.com/
- Step 2 - enter your GitHub or GitLab username
- Step 3 - get a list of your keys on GitHub/GitLab and their security rating
🤓 Curious for more?
- The web app is based on Go, compiled to Web Assembly. Check it out at https://github.com/ParetoSecurit....
- You can provide the GitHub/GitLab username in the URL like so: https://aremykeyssafe.com/?handl...
- Make sure you check any other keys that you might have on your computer: ssh-keygen -l -f ~/.ssh/.pub
That's it, share AreMyKeysSafe.com with your friends and coworkers, and stay safe!
Heads-up! We added support for parsing GPG keys on GitHub as well. I.e. whatever you have on https://github.com/HANDLE.gpg.
Typeform