Download JAuth for MacOS (Arm)
SHA256: c923c1851edb2ad3bba0eecdaad3fe391b9f0ca40aed58831cffb41613190b46

macOS How To

1. Unzip JAuth-0.2.0-macos-arm64.zip. The binaries aren’t notarized yet, so clear the download flag first:
   xattr -d com.apple.quarantine jauthd jauth-cli
2. In Terminal, pair and start the daemon. Allow Bluetooth access when macOS asks.
   ./jauthd pair # scan the QR code with the app
   ./jauthd &
3. Add this line to ~/.zshrc, then open a new terminal:
   export SSH_AUTH_SOCK=”$TMPDIR/jauth/agent.sock”
4. Run ./jauth-cli getpub “Main Key”, add the output to the server’s authorized_keys, then ssh you@your-server.

For now jauthd has to be started by hand after each login; starting it automatically is planned.

If you say no on the phone, ssh moves on to any other keys it can find, such as files in ~/.ssh. So a server that also trusts one of those keys will still let you in. To make the phone the only way in, remove the other keys from that server’s authorized_keys.