Written 9 Sep 2026. This is a how-to, not a product card.

One laptop key is enough

One laptop key that already logs in is enough. Don't buy a second computer for a second line in authorized_keys.

The first key is log in with a key, not the password every time. A keyboard on the leftover box is the backup. One leftover box is enough: one leftover box. A second trusted key is later, when you already have a second computer: put a key on a second computer.

What not to copy

Don't copy the private key onto a USB stick so two laptops share one secret. Don't buy a YubiKey for this weekend: a YubiKey can wait. Don't buy a second Marketplace laptop so authorized_keys has two lines.

What next

Couch login: SSH from the couch. Tick Lab plan after the first key works. Keep SSH inside: house network only.

Optional: one laptop key vs a later second computer as a sandbox in ByteRush — same Labthrift passkey as Plan. Skip if you just want to keep reading.

Skip

Skip a second laptop this weekend.
Skip copying the private key.
Skip a YubiKey for the leftover box. That is a YubiKey can wait.

Sources

First key: log in with a key. Later second computer: put a key on a second computer. Lessons: ByteRush.

Also on this topic

Log in with a key, not the password every timeAfter password SSH works, put a key on your laptop. Put a key on a second computerLater, when you already have another computer. A YubiKey can waitA laptop file key is enough. Don't buy hardware for leftover-box SSH. One leftover box is enoughDon't buy a second node this weekend.