Skip to main content
Anonymous
Feb 7, 2023 6:38 PM UTC

Unsupported key type sk-ssh-ed25519


Will this key type be supported at some point ?
/Henrik

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

    Pinned Reply By 1P_Dave

    Hello folks, 

    Thank you for the feature request! 1Password currently supports Ed25519 and RSA keys (2048, 3072, and 4096 bits). As Jack mentioned, Ed25519-sk is designed for hardware-backed SSH authentication, where the private key remains on a YubiKey or similar device and each signature may require a touch or PIN.

    We’ve filed a feature request to explore storing the key handle and public key in 1Password while delegating signing to the connected hardware key. Even if this feature was implemented, the feature would still require the physical device, and syncing the handle would not back up the hardware-held private key.

    For now, generating a new key using a supported type is the best option.

    -Dave

    View in thread

    12 replies

    XIII
    XIII
    Feb 7, 2023 7:32 PM UTC

    Is that similar to ed25519-sk (for security keys)?

    Jack_P_1P
    1Password Employee
    Jack_P_1P
    1Password Employee
    Feb 7, 2023 8:53 PM UTC

    Hi @schack:

    As @XIII mentioned, the sk-ssh-ed25519 type is for FIDO keys. Are you trying to add a key that originated on a security key? Let me know.

    Jack

    Anonymous
    Feb 8, 2023 3:38 AM UTC

    Yes, it's a key generated with ssh-keygen -t ed25519-sk
    plus a Yubikey
    /Henrik

    Jack_P_1P
    1Password Employee
    Jack_P_1P
    1Password Employee
    Feb 9, 2023 8:03 PM UTC

    Hi @schack:

    1Password SSH Agent only supports SSH and Ed25519 key types: Manage SSH keys

    The Ed25519-sk variant is a key where the private portion of the keypair is stored solely on your FIDO device and can't be extracted. If you're looking to use 1Password as your SSH agent, it would be necessary to generate a new key.

    Jack

    Anonymous
    Feb 10, 2023 3:59 AM UTC

    Hi @Jack_P_1P
    I'm using my Yubikey + SSH like this: https://cryptsus.com/blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html

    It would be really nice to at least store a backup copy of the key in a SSH entry in 1Password

    Anonymous
    Apr 7, 2023 2:13 AM UTC

    This is exactly what I want to do - have 1password hang on to the key handles (since I'll have way more than 25, and I'll want to have access anywhere), and use the yubikey to authenticate it.

      Jack_P_1P
      1Password Employee
      Jack_P_1P
      1Password Employee
      Apr 7, 2023 10:20 PM UTC

      Hi @akano:

      Thanks for sharing. While I can't promise anything, I'll share your thoughts with the team.

      Jack

      Anonymous
      Sep 17, 2023 7:14 PM UTC

      I'm looking for the same please :-)

      Anonymous
      Feb 10, 2024 8:34 PM UTC

      Bump, please add support for ed25519-sk SSH keys in 1Password, thank you.

      diegolinke
      Jan 6, 2026 11:38 AM UTC

      Bumping this topic again. Please take a look and reconsider. @Jack_P_1P 

      It would be great if 1Password added support for sk-ssh-ed25519 SSH keys (FIDO2-backed SSH keys).

      The main benefit for 1Password users would be centralized management of all SSH keys, both traditional keys and security-key-backed keys (e.g., YubiKey), within the 1Password SSH Agent. This would be especially valuable for users who work across multiple computers.

      Show more replies
      Terms & ConditionsAccessibility statement

      ©2026 1Password. All rights reserved.
      4711 Yonge St, 10th Floor, Toronto Ontario, M2N 6K8, Canada