Things you should never do
Don’t upload your
~/.ssh
toGitHub
orGitlab
, even in a private repo, it seems like you put your bank card and password in itDon’t leave your key’s passphrase empty
You should use the trusted login tool, better to use open-source login tools like OpenSSH. Many hacked tools can steal your keys.
My strategy
- use
git
to manage the~/.ssh
for tracking the modification - When I need to sync the key and config file, I manually carry the hardware disk to sync