ssh-ed25519.

The recommended modern SSH key type, built on the same Curve25519 family age uses. One ssh-ed25519 key can be an age recipient for encryption and an SSHSIG key for signing.

// definition

ssh-ed25519 is an OpenSSH key type using the Ed25519 signature scheme. Public keys begin with ssh-ed25519 AAAAC3NzaC1lZDI1NTE5….

What it is

Ed25519 keys are tiny — the public key is 32 bytes — and fast to use. OpenSSH recommends them over RSA for new keys. AgePony works with ssh-ed25519 keys for both encrypting (as an age recipient) and signing (via SSHSIG).

Why it matters

One key type covers your whole AgePony workflow. Publish your ssh-ed25519 public key once — on GitHub, a website, a business card — and people can both encrypt files to you and verify files you signed, all from the same key.

// an ssh-ed25519 public key
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILxq...vQ9 you@example.com
// in AgePony AgePony generates, imports, and uses ssh-ed25519 keys for encryption and signing. The same key you use for SSH logins can encrypt and sign files.

Related terms

Common questions.

Can I reuse my login SSH key?

Technically yes, though many people prefer a dedicated key for file work. Both are ssh-ed25519.

How do I share it?

Publish the public key anywhere — GitHub serves it at github.com/username.keys.

Get AgePony

Free file encryption for iOS and Android. No accounts, no tracking, no servers.