Share an identity

Give a colleague, or another tool, the credentials for an identity as a single zip file that works with plain OpenSSH. No Kubexer account is needed on the other end.

How to use it

Open a vault → Identities.
Open the identity card's menu → Share….
Read the dialog, then click Save zip… and choose where to save it.

What's in the zip

For a key or certificate identity: the private key, the certificate (…-cert.pub) if there is one, and README.txt, which explains how to install the key and connect on macOS, Linux or Windows.
For a password identity: README.txt, which explains how to connect, and the password in a text file.

The secret file is written with owner-only permissions (0600), as ssh expects for a private key.

The key's passphrase is not included. If the key has one, tell the recipient separately.

Send it safely

Anyone who gets the zip can sign in as that user. Send it only over a secure channel, such as a password manager share or an encrypted message, and never by plain email or chat.

Limits

Identities that sign through an SSH agent can't be shared, because Kubexer holds no key to share. Share the key from the agent (1Password, ssh-add) instead. See SSH agent & agent forwarding.
Sharing makes a copy. To take access away later, change the key on the servers. Access profiles can revoke a user across many hosts at once.

Tips

An access profile's generated key is saved as an identity, so you can share it the same way when onboarding someone.

Identities & SSH keys