NullKey

NullKey is a Mac app that creates SSH keys inside your Mac's Secure Enclave and runs a local SSH agent so ssh and git can authenticate with them. The private key is generated in the Enclave and is non-exportable by hardware design, so it never exists in memory or on disk and can't be copied or stolen; the app can only ask the Enclave to sign. For each key you choose at creation whether every signature needs Touch ID or signs silently while the app runs. Just copy the public key into GitHub, GitLab or authorized_keys, point SSH at the agent with a one-line config, and ssh, git and the GitHub CLI keep working as always. NullKey also includes an Authenticator for 2FA and backup codes sealed in the Secure Enclave, SSH host management, AWS and GCP access, and an activity log of every signature. There's no account, no network access and no data collection. Key Features: - Secure Enclave SSH Keys: hardware-backed keys that can never be exported - Touch ID Signing: require Touch ID per key, or sign silently - Local SSH Agent: works with ssh, git and the GitHub CLI out of the box - Authenticator: 2FA and backup codes sealed in the Secure Enclave - Activity Log: see every signature the agent serves NullKey brings hardware-grade security to your SSH and 2FA workflow on the Mac, and it's free on the Mac App Store.