TSafe2: dongle protection for PuTTY private keys
PuTTY private key (PPK) files are only as safe as the person holding them. TSafe2 encrypts them and keeps the key in a password-protected USB dongle — true two-factor login to your cloud servers.
The risk
SSH with PuTTY private keys is safer than a user name and password — but anyone who gets hold of a PPK file can log in to the server with all the permissions it carries. On cloud platforms where each user has their own key, one leaked file can expose everything.
The solution
- TSafe2 encrypts each PPK file with AES-128; the key is stored in a USB dongle
- Dongles are password protected — true two-factor authentication
- A background Windows service detects the dongle and decrypts keys on the fly
- Decrypted keys stay only in memory — never on disk
- Works with PuTTY, TortoiseSVN and WinSCP; more on request
- Works with any cloud or server you reach over SSH
Questions
How do we manage thousands of users and servers?
The TSafe2 management tool creates dongles, stores PPK files and emails encrypted keys directly to users.
Can a user work on several servers?
Yes — multiple PPK files at the same time, just as without encryption.
Can a user recreate the original PPK file?
No. Unencrypted keys are never saved to disk.
How do we withdraw access?
Delete or disable the user’s key on the server; encrypted keys are not stored in the dongle.
Does it work on Linux or macOS desktops?
Not yet — TSafe2 runs on Windows desktops and connects to any server. A Linux / macOS solution is in development.
Can we brand the dongles?
Yes. Two designs in different colours; your logo laser-engraved or UV-printed.
Popular with large enterprises
Built for organisations that run cloud infrastructure with many administrators and developers.
Brochures and guides
- TSafe2 PuTTY PPK safety — overviewRequest link
- TSafe2 PuTTY helpRequest link
Need software or an SDK? Request a download link.
Protect your software, files or data
Tell us what you want to protect and how you sell it. We will suggest the right dongle or tool and send a quote.