I am looking for a Windows-compatible SSH agent that would utilise the TPM for key management and require Windows Hello confirmation to use a key.
In the Mac world, there is a great SSH agent called Secretive that lets you create and store SSH keys in the Mac's Secure Enclave (TPM equivalent) and access them using regular Mac authentication (Touch ID, password, Apple Watch, etc.).
I couldn't find a similar application for Windows. Is there an SSH agent for Windows that can create and use SSH keys in the TPM, and confirm access to them with Windows Hello?

1 Answer 1


I am using 'nCryptAgent' which works with Windows SSH and WSL.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.