---
title: "Get started with SSH Key Management"
description: "Add an SSH key to your TIR account, the credential you need to connect to your resources."
content_type: "get-started"
product: "ssh-keys"
platform: "TIR"
url: "/tir/ssh-keys/get-started/"
---

# Get started with SSH Key Management

Add your SSH key to TIR once, then choose it when you create an instance, a virtual machine, or a
training cluster. All you need is a TIR project you can open and a computer with a terminal.

## Add an SSH key

1. On your computer, run `ssh-keygen -t ed25519 -C "<your comment>"`. `<your comment>` is a label
   such as your email address or machine name.
2. Print the public key with `cat ~/.ssh/id_ed25519.pub` and copy it.
3. In TIR, open the account menu at the top right and select **SSH Keys**. Open the **Add Key** menu and select
   **Add new key**.
4. Type a **Key name**, paste the public key into **Public key**, and select **Add Key** at the bottom of the form.

The key is now in your **SSH Keys** list, ready to choose under **SSH Keys** when you create an
instance, a virtual machine, or a training cluster.

## Connect with it

Once a resource with your key is running, connect from the same computer with the private key:

```bash
ssh -i ~/.ssh/id_ed25519 root@<ip-address>
```

`<ip-address>` is the IP address of the instance or cluster. The resource also needs a security group
that opens port 22, such as the project's **Default-SSH-Security-Group**.

## What to do next

- [Connect with an SSH key](/tir/ssh-keys/how-to/connect-with-an-ssh-key/) covers keys made in the
  browser and the user name each resource uses.
- To keep keys safe, see [How SSH keys work](/tir/ssh-keys/concepts/how-ssh-keys-work/).
- To sign API calls, see [Personal Access Tokens](/tir/personal-access-tokens/).