trezor-agent

Using Trezor as hardware SSH/GPG agent


Keywords
agent, crypto, gnupg, gpg, hardware, keepkey, ledger, pgp, python, ssh, trezor
License
LGPL-3.0
Install
pip install trezor-agent==0.12.0

Documentation

Hardware-based SSH/GPG/age agent

Build Chat

This project allows you to use various hardware security devices to operate GPG, SSH and age. Instead of keeping your key on your computer and decrypting it with a passphrase when you want to use it, the key is generated and stored on the device and never reaches your computer. Read more about the design here.

You can do things like sign your emails, git commits, and software packages, manage your passwords (with pass and passage, among others), authenticate web tunnels and file transfers, and more.

See the following blog posts about this tool:

Currently TREZOR One, TREZOR Model T, Keepkey, Ledger Nano S, and OnlyKey are supported.

Components

This repository contains source code for one library as well as agents to interact with several different hardware devices:

The /releases page on Github contains the libagent releases.

Documentation

  • Installation instructions are here

  • SSH instructions and common use cases are here

    Note: If you're using Windows, see trezor-ssh-agent by Martin Lízner.

  • GPG instructions and common use cases are here

  • age instructions and common use cases are here

  • Instructions to configure a Trezor-style PIN entry program are here