SSH keys

Generate a key

Ed25519 is the recommended default:

ssh-keygen -t ed25519 -C "you@example.com"

Accept the default path unless you already have a key there, and set a passphrase. RSA 4096 is available when an older environment cannot use Ed25519:

ssh-keygen -t rsa -b 4096 -C "you@example.com"

Add the public key

From the CLI:

try ssh-key add "Work laptop" "$(cat ~/.ssh/id_ed25519.pub)"
try ssh-key list

From the web app, open Settings → SSH keys → New SSH key, enter a recognizable device title, and paste the .pub file contents.

Use the key

Clone with the SSH URL shown by Trylle:

try repo clone git@trylle.com:OWNER/REPOSITORY.git

If you keep several keys, configure the selected identity in ~/.ssh/config:

Host trylle.com
  HostName trylle.com
  User git
  IdentityFile ~/.ssh/id_ed25519
  IdentitiesOnly yes

Remove a key

List keys to obtain the ID, verify the device, then delete it:

try ssh-key list
try ssh-key delete KEY_ID

Removing a public key immediately prevents future SSH authentication with its matching private key. Existing local clones remain on disk but cannot fetch or push through that key.