DROPBEARKEY(1) General Commands Manual DROPBEARKEY(1)

# [NAME](#NAME)

`dropbearkey` — create private keys for the use with [dropbear(8)](/man/os/dropbear/dropbear.8) or [dbclient(1)](/man/os/dropbear/dbclient.1)

# [SYNOPSIS](#SYNOPSIS)

`dropbearkey` `-t` `type` `-f` `file` \[`-s` `bits`] \[`-y`]

# [DESCRIPTION](#DESCRIPTION)

`dropbearkey` generates a `RSA`, `DSS`, `ECDSA`, or `Ed25519` format SSH private key, and saves it to a file for the use with the Dropbear client or server. Note that some SSH implementations use the term “DSA” rather than “DSS”, they mean the same thing.

# [OPTIONS](#OPTIONS)

[`-t`](#t) `type`

Type of key to generate. Must be one of `rsa`, `ecdsa`, `ed25519`, or `dss`.

[`-f`](#f) `file`

Write the secret key to the file `file`. For client authentication ~/.ssh/id\_dropbear is loaded by default

[`-s`](#s) `bits`

Set the key size to `bits` bits, should be multiple of 8 (optional).

[`-y`](#y)

Just print the publickey and fingerprint for the private key in `file`.

# [NOTES](#NOTES)

The program [dropbearconvert(1)](/man/os/dropbear/dropbearconvert.1) can be used to convert between Dropbear and OpenSSH key formats.

Dropbear does not support encrypted keys.

# [EXAMPLES](#EXAMPLES)

generate a host-key:

```
# dropbearkey -t rsa -f /etc/dropbear/dropbear_rsa_host_key
```

extract a public key suitable for authorized\_keys from private key:

```
# dropbearkey -y -f id_rsa | grep "^ssh-rsa " >> authorized_keys
```

# [SEE ALSO](#SEE_ALSO)

[dbclient(1)](/man/os/dropbear/dbclient.1), [dropbearconvert(1)](/man/os/dropbear/dropbearconvert.1), [dropbear(8)](/man/os/dropbear/dropbear.8)

[https://matt.ucc.asn.au/dropbear/dropbear.html](https://matt.ucc.asn.au/dropbear/dropbear.html)

# [AUTHORS](#AUTHORS)

Matt Johnston <[matt@ucc.asn.au](mailto:matt@ucc.asn.au)>.  
Gerrit Pape <[pape@smarden.org](mailto:pape@smarden.org)> wrote this manual page.

February 1, 2023 Linux 4.19.0-gvisor

---

Document: dropbearkey(1) from dropbear 2026.94-r1 (Chainguard OS)
Source: https://github.com/mkj/dropbear