4 ms·

Um... it replaces a password (or manual management of keys) with a USB device I can carry around like a proper key.

• goodpoint 4y ago
  You described what it does and missed the point of my question. What real security risk is it being handled?
  • Too 4y ago
    A hacker who got into your laptop can’t simply copy your id_rsa file to get further access to all your servers, it’s physically stored in the usb dongle with no way to get it out and requires physically touching it each time key is used.
    • goodpoint 4y ago
      A hacker who got into your laptop can piggy back on your SSH connections (and also extract all sort of vital data). Not being able to extract SSH keys helps very little.
      • smw 4y ago
        Helps more than you might think! Because the other thing Secretive can do is require touch ID for each use of the key. Similarly, you can require a button push from your yubikey.