Adding your ssh key to lastpass

1.Readme.MD

Setup

0. Install lpass, the last pass command line tool

brew install lastpass-cli --with-pinentry

0. Create a passphrase encrypted key and make sure you put the public key where you need it, eg: github

1. Come up with a name for your lastpass shared note that is easy to search for.

2. Create a lastpass shared note (use the web ui) from the template 2.lastpass-ssh-tool.sh included below.

3. Replace {{USER-ID}} with your lastpass login email.

4. Replace {{NOTE-NAME}} with the name of your lastpass shared note.

5. Replace {{PRIVATE-KEY}} with your ssh private key:

KEY=$(cat <<-'EOF'
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-128-CBC,ETC....

3jEULKvVju0/SUEvv8CAbmGV5IskohMl3Nv3jEULKvVju0/SUEvv8CAbmGV5Isk1
........................
hu1rncm8AsfTvT2fr9ubHdo37JNSgPj4xGwkgnr9FCV7+AklMcHJMrSd8WoQwUMO
-----END RSA PRIVATE KEY-----
EOF
)

0. Save your shared note

Usage

0. Open your lastpass vault or chrome extension and search for your shared note
1. Copy the first line of the shared note, without the #
2. Paste into your terminal
3. Respond with your lastpass password
4. Respond with your ssh key passphrase.

2.lastpass-ssh-tool.sh

# lpass login --trust {{USER-ID}} && bash -c "HOURS=8; `lpass show --notes 'Secure Notes/{{NOTE-NAME}}'`"

set -e

KEY=$(cat <<-'EOF'
{{PRIVATE-KEY}}
EOF
)

/usr/bin/ssh-add -D

rm -f /tmp/my-key
mkfifo /tmp/my-key
chmod 600 /tmp/my-key
set +e
echo  "$KEY" > /tmp/my-key&
/usr/bin/ssh-add -t ${HOURS:-1}H /tmp/my-key
rm /tmp/my-key || true