Centralized SSH Key Management

Automate & Synchronize SSH Keys Across Every Server

PubKeySync delivers cryptographic public keys to authorized servers automatically. Eliminate stale keys, enforce group-based access control, and track server sync in real time.

Manage Keys View Servers Get Client
Public Keys

Add and store your SSH public keys (ed25519, RSA, ECDSA) with custom descriptions.

Manage keys
Key Groups

Bundle individual keys into access groups (e.g. "DevOps", "Frontend", "Contractors").

Manage groups
SSH Servers

Register host servers, pair with Join Keys, and monitor real-time sync statuses.

View servers
Client Daemons

Download precompiled sync agent binaries for Linux (amd64/arm64), macOS, and Windows.

Downloads
Quick Agent Setup
Run the client daemon on your target SSH host

After generating a Join Key for your SSH server, run the client to automatically fetch and update ~/.ssh/authorized_keys:

pubkeysync-client --server https://your-server.com --key YOUR_JOIN_KEY --interval 60s
TLS Encrypted
Configurable Sync Loop
Zero Dependencies
Why PubKeySync?
  • Instant Revocation Removing a public key immediately removes it from all associated servers on their next sync.
  • Least-Privilege Groups Assign groups of keys to specific servers instead of sharing root credentials.
  • Audit & Visibility Inspect when each server last synced and see authorization state at a glance.