Open the machine → SSH Keys tab.
This lists the public keys authorized to log in as root on this machine, each with its name and fingerprint so you can tell keys apart at a glance.
Add a key
Click Add Key and pick one or more keys from your account-wide SSH key library. Keys already attached to the machine aren't offered again, so you can't add a duplicate by accident.
If the key you want isn't in the list, add it to the library first — that page also has a How to Generate helper with the commands for macOS, Linux and Windows.
Remove a key
Click the trash icon on a key and confirm. This removes it from this machine only; the key stays in your account library and on any other server it's attached to.
When the change takes effect
ImportantKeys added or removed here are only written to the machine on the next reinstall. A running machine is not touched — its
~/.ssh/authorized_keysstays exactly as it is.
This surprises people, so plan around it:
- Onboarding a teammate on a live machine? Add their key here so it survives the next rebuild, and append it to
~/.ssh/authorized_keysover SSH so they can log in now. - Offboarding someone? Removing the key here is not enough. Delete it from
~/.ssh/authorized_keyson the running machine too, or their access continues until the machine is rebuilt.
TipIf you've lost every key and the root password, the browser console still gets you in — use it to fix
authorized_keysdirectly, or reset the root password from the machine's action menu.