BonusRaspberry Pi bonus
Trezor SSH agent
Use a Trezor hardware wallet as a second factor for SSH authentication to your node.
Migration in progress
This bonus page hasn't been rewritten for RaspiBolt v4 yet. The v3 version still works, see the original guide on GitHub while we port it over.
Instead of trusting a plain SSH key on your laptop, you can let a Trezor hardware wallet sign SSH challenges. Your key never leaves the device, and every login prompts you to physically confirm on the Trezor, a meaningful bump in security for the admin account that runs your node.