SSH Snippets & Vault Keys

Snippets

Snippets are named, parameterised commands you can paste into any terminal with one click. Use {{var}} placeholders for interactive substitution. Snippets sync via cloud when enabled.

• Group snippets by tag (deploy, debug, monitoring).
• Per-snippet host targeting — restrict a deploy snippet to production servers only.
• SSH Agent can execute and chain snippets autonomously.

SSH Key Vault

Private keys live in the local AES-256-GCM vault, never in plain text on disk. Add keys via:

• Browse from ~/.ssh/ (the picker reads but never copies the file unencrypted).
• Paste contents directly — the vault encrypts immediately.
• Generate a new key pair (Ed25519 or RSA-4096) inside the vault.

Keys are scoped to hosts. Cloud-shared vaults use RSA-4096-OAEP wrapping so teammates can use the key without ever seeing the bytes.