SSH Config Generator
Build SSH config file entries visually. Configure host aliases, identity files, ProxyJump, port forwarding, and keepalive settings with one-click presets — 100% browser-based, no uploads.
How ZeroData protects your privacy
- ✓ No Uploads: Processing happens entirely via client-side JavaScript.
- ✓ No Storage: We do not have a database. We physically cannot save your data.
- ✓ No Tracking: We don't log what you process or track your inputs.
- ✓ Verifiable: Check your DevTools Network tab. You will see 0 outbound requests.
Visual SSH Config File Builder
The SSH config file (~/.ssh/config) is one of the most powerful productivity tools for developers and system administrators. Instead of remembering long ssh commands with multiple flags, you define host aliases once and connect with a simple ssh my-server. This visual builder generates properly formatted entries with all the common directives — no more guessing whether it's ProxyJump or ProxyCommand, or forgetting the exact IdentityFile syntax.
After generating your SSH config, make sure the file permissions are correct using our Chmod Calculator — SSH requires 600 permissions on the config file and 400 on private keys.
SSH Jump Hosts and Bastion Patterns
In production environments, application servers sit inside private networks (AWS VPC, GCP VPN, internal data centers) and are not directly accessible from the internet. The bastion host pattern solves this: a hardened, publicly accessible server acts as a gateway. The ProxyJump directive automates this — SSH transparently tunnels through the bastion to reach the target server. This tool generates the correct multi-hop configuration for you.
For managing the services running on those servers, use our Systemd Service Generator. To configure the reverse proxy in front of your application, try the Nginx Config Generator.
Why Generate SSH Configs Locally
Your SSH configuration contains the exact blueprint for accessing your infrastructure: hostnames, IP addresses, usernames, key file paths, and network topology. This is exactly the information an attacker needs to map your systems. This generator processes everything in your browser with zero network requests — no server-side storage, no analytics on your inputs, no data retention. Your infrastructure details stay on your machine.
How to Use the SSH Config Generator
- Choose a preset matching your use case (GitHub, AWS, Bastion, Tunnel).
- Enter the host alias, hostname or IP, and SSH user.
- Set the identity file path and optional ProxyJump host.
- Toggle options like ForwardAgent, Compression, or StrictHostKeyChecking.
- Copy the generated config and append it to ~/.ssh/config.
Common Use Cases
- Creating SSH aliases for frequently accessed development and production servers.
- Configuring ProxyJump entries for accessing servers behind bastion hosts.
- Setting up separate SSH keys for personal and work GitHub/GitLab accounts.
- Creating port forwarding tunnels to access remote databases locally.
- Standardizing SSH configurations across team members for consistent access.
Frequently Asked Questions
What is the SSH config file?
The SSH config file (~/.ssh/config) lets you define connection presets for SSH. Instead of typing 'ssh -i ~/.ssh/key.pem -p 2222 user@hostname' every time, you define a Host alias and connect with just 'ssh my-server'. It supports identity files, jump hosts, port forwarding, and dozens of other options.
What is an SSH ProxyJump (Jump Host)?
ProxyJump (or -J flag) lets you connect to a target server through an intermediate 'bastion' host. Your SSH client first connects to the bastion, then tunnels through it to reach the private server. This is the standard pattern for accessing servers in private networks (AWS VPC, internal data centers) without exposing them to the public internet.
What does IdentitiesOnly yes mean?
IdentitiesOnly yes tells the SSH client to ONLY use the key specified by IdentityFile, ignoring any keys loaded in ssh-agent. This prevents SSH from trying every key in your agent (which can trigger rate limits on servers like GitHub) and ensures the correct key is used for each host.
How do I use multiple SSH keys for different GitHub accounts?
Create separate Host entries in your SSH config — for example, 'Host github-personal' and 'Host github-work' — each pointing to github.com but with different IdentityFile paths. Then clone repos using 'git clone git@github-personal:user/repo.git' instead of the default hostname.
Is this SSH config generator safe to use?
Yes. This tool runs 100% in your browser using client-side JavaScript. No hostnames, IP addresses, key paths, or server details are sent to any server. Your infrastructure configuration stays entirely on your device.
Related Tools
Cron Job Generator
Build cron expressions visually and copy production-ready schedules without trial and error.
Chmod Calculator
Visual Linux file permissions calculator with numeric mode, symbolic notation, and common presets.
Chown Command Generator
Generate Linux chown commands visually to change file and directory ownership. Set user, group, and flags — 100% browser-based.
Systemd Service Generator
Generate Linux systemd service unit files visually. Configure ExecStart, restart policies, and dependencies — 100% browser-based.
Nginx Config Generator
Generate Nginx server block configurations visually. Reverse proxy, SSL, gzip, and security headers — 100% browser-based.
Ansible Inventory Generator
Build Ansible inventory files visually in INI or YAML format. Add groups, hosts, and variables — 100% browser-based, no uploads.