SSH Config Generator
Visually build ~/.ssh/config host entries — HostName, User, Port, IdentityFile, IdentitiesOnly, ProxyJump/bastion, ForwardAgent, ServerAlive, Compression, LocalForward/RemoteForward/DynamicForward, StrictHostKeyChecking, Match blocks, and Include directives. Templates (basic server, jump host, GitHub, AWS EC2, wildcard), security linter (warns on StrictHostKeyChecking no / broad ForwardAgent), ed25519 keygen helper per host, import existing config, bulk-add via JSON, first-match-wins reordering, history (localStorage), and shareable URL. 100% client-side — never handles private keys. No ads.
About SSH Config Generator
Visually build ~/.ssh/config host entries — HostName, User, Port, IdentityFile, IdentitiesOnly, ProxyJump/bastion, ForwardAgent, ServerAlive, Compression, LocalForward/RemoteForward/DynamicForward, StrictHostKeyChecking, Match blocks, and Include directives. Templates (basic server, jump host, GitHub, AWS EC2, wildcard), security linter (warns on StrictHostKeyChecking no / broad ForwardAgent), ed25519 keygen helper per host, import existing config, bulk-add via JSON, first-match-wins reordering, history (localStorage), and shareable URL. 100% client-side — never handles private keys. No ads. Everything runs locally in your browser — your data never leaves your device.
How to use
- Enter your input in the tool above.
- Adjust any options to your preference.
- Use the Copy or Download buttons to save the result.
- Everything happens locally — your data never leaves your browser.
FAQ
How does the SSH Config Generator work?
Add Host entries with a visual form (alias, HostName, User, Port, IdentityFile, IdentitiesOnly, ProxyJump, ForwardAgent, ServerAlive, Compression, port forwards, StrictHostKeyChecking, etc.) and the tool emits a clean `~/.ssh/config` you can paste or download. Start from a template (basic server, jump host, GitHub, AWS EC2, wildcard) and customize. Each host gets a `# ssh <alias>` connect-hint comment so you remember the command.
What is ProxyJump and how do I configure a bastion host?
ProxyJump (`-J`) chains an SSH connection through one or more intermediate hosts. Set `ProxyJump bastion` on your internal-host entry and SSH will first connect to `bastion`, then tunnel to the target — no manual double-hop needed. For chains use commas: `ProxyJump hop1,hop2`. This tool generates a dedicated `jump-host` template and lets you set ProxyJump per entry.
What does the security linter warn about?
The linter flags (1) `StrictHostKeyChecking no` (susceptible to MITM), (2) `ForwardAgent yes` on broad Host patterns (agent-key exfiltration risk if the bastion is compromised), (3) missing `IdentitiesOnly yes` when an `IdentityFile` is set (avoids offering all your keys), (4) missing `chmod 600` reminder for any new IdentityFile path, and (5) `Host *` blocks with overly-permissive options. Each warning links to the offending host.
Can I import my existing ~/.ssh/config?
Yes. Paste your current `~/.ssh/config` and the parser extracts every `Host` block (with all standard options, plus `LocalForward`/`RemoteForward`/`DynamicForward`), `Match` blocks (preserved as raw text), and `Include` directives. Imported hosts are then editable in the visual editor and re-emitted in a consistent style.
What extra features does this tool have versus hand-editing?
(1) Five templates (basic server, jump host, GitHub, AWS EC2, wildcard). (2) Full option coverage including ProxyJump, ForwardAgent, ServerAlive, port forwards (Local/Remote/Dynamic), StrictHostKeyChecking, ControlMaster/Path/Persist. (3) Match blocks and Include directives. (4) Security linter with five rule classes. (5) ed25519 keygen command helper per host. (6) Import existing config. (7) Bulk-add via JSON. (8) First-match-wins reordering (specific hosts before wildcards). (9) Per-host connect-hint comments. (10) Dedupe by Host alias. (11) Live config preview with copy/download. (12) History (localStorage, last 20). (13) Shareable URL (non-sensitive fields only). 100% client-side — your private keys are never touched. No ads.
Related tools
.bashrc / .zshrc Alias & Config Manager
Build shell aliases, functions, exports, and PATH edits in a visual editor, then export a clean, commented .aliases file sourced from both .bashrc and .zshrc — with shadowing detection against shell builtins and common CLI tools, function suggestions when args are needed, starter packs (git, docker, kubectl, navigation, safety, ls, dev, devops, data science), import of existing rc files, dedupe, history (localStorage), and shareable URL. 100% client-side.
Add / Subtract Date Calculator
Add or subtract years, months, weeks, days, hours, minutes and seconds from a starting date/time. Calendar-day or business-day mode with custom weekend + holiday list. Month-end policy toggle (clamp to last day vs overflow). Repeat/series mode (e.g. every 2 weeks x 10) with CSV export. Shareable URL. 100% client-side.
Age Calculator
Calculate exact age from a birth date in calendar years/months/days (no negative-day bugs) plus totals in months/weeks/days/hours/minutes/seconds. Next-birthday countdown with weekday. Feb-29 birthday policy toggle. Milestones (1,000 days, 10,000 days, 1 billion seconds). Zodiac sign + Chinese zodiac. Age gap comparison. Shareable URL. 100% client-side.