Open the machine → SSH Keys tab.

This lists the public keys authorized to log in as root on this machine, each with its name and fingerprint so you can tell keys apart at a glance.

Add a key

Click Add Key and pick one or more keys from your account-wide SSH key library. Keys already attached to the machine aren't offered again, so you can't add a duplicate by accident.

If the key you want isn't in the list, add it to the library first — that page also has a How to Generate helper with the commands for macOS, Linux and Windows.

Remove a key

Click the trash icon on a key and confirm. This removes it from this machine only; the key stays in your account library and on any other server it's attached to.

When the change takes effect

This surprises people, so plan around it:

  • Onboarding a teammate on a live machine? Add their key here so it survives the next rebuild, and append it to ~/.ssh/authorized_keys over SSH so they can log in now.
  • Offboarding someone? Removing the key here is not enough. Delete it from ~/.ssh/authorized_keys on the running machine too, or their access continues until the machine is rebuilt.