OpenPubkey SSH

OpenPubkey SSH 0.19.1

A tool which enables SSH to be used with OpenID Connect, allowing SSH access management via identities like [email protected] instead of long-lived SSH keys.

  • By OpenPubkey
  • Open Source
  • Updated Oct 22, 2026
Download for Windows

About OpenPubkey SSH

opkssh is a tool which enables ssh to be used with OpenID Connect allowing SSH access management via identities like [email protected] instead of long-lived SSH keys. It does not replace ssh, but rather generates ssh public keys that contain PK Tokens and configures sshd to verify the PK Token in the ssh public key. These PK Tokens contain standard OpenID Connect ID Tokens. This protocol builds on the OpenPubkey which adds user public keys to OpenID Connect without breaking compatibility with existing OpenID Provider.

What's new in 0.19.1

Fixed:hello.coop logins failed with "Ed25519": invalid key algorithm (#655). jwx is updated to v3.3.0, which also includes the jwx fix

🐛 Bug Fixes

  • fix:Unknown alg Ed25519: invalid key algorithm by bumping jwx to v3.3.0 @EthanHeilman (#657)

Changes

  • fix(deps):Update Docker @[renovate[bot]](https://github.com/apps/renovate) (#653)
  • fix(deps):Update go toolchain directive to v1.27.3 @[renovate[bot]](https://github.com/apps/renovate) (#654)
  • fix(deps):Update zizmorcore/zizmor-action action to v0.7.1 @[renovate[bot]](https://github.com/apps/renovate) (#649)
  • fix(deps):Update opensuse/tumbleweed:latest Docker digest to 1978f58 @[renovate[bot]](https://github.com/apps/renovate) (#645)
  • fix(deps):Update zizmorcore/zizmor-action action to v0.6.2 @[renovate[bot]](https://github.com/apps/renovate) (#585)

Full release notes »

Technical details

PublisherOpenPubkey
Version0.19.1
Release date2026-10-22
LicenseApache-2.0
Installer typeportable
Architecturex64
Package IDopenpubkey.opkssh

Links & install command

Install OpenPubkey SSH from the command line with Windows Package Manager (winget):

winget install --id=openpubkey.opkssh -e

encryptionkeysopenidconnectpktokenssecureshelldaemonsshdserversshkeyssshpublickeys

Older versions

  • 0.19.0
  • 0.17.0
  • 0.16.0
  • 0.15.0
  • 0.14.0
  • 0.13.0
  • 0.12.0
  • 0.11.0
  • 0.10.0