How to Use SSH Keys for Authentication

SSH keys provide a secure and convenient way to authenticate to your servers without the need for passwords. By using SSH keys, you can mitigate the risks associated with password-based authentication. This tutorial will guide you through generating SSH keys and configuring your server for key-based authentication.

1. Generating SSH Keys

To generate a new SSH key pair, open your terminal and run the following command:

ssh-keygen -t rsa -b 4096 -C "[email protected]"

Here’s what each option means:

• -t rsa: Specifies the type of key to create, in this case, RSA.
• -b 4096: Sets the key size to 4096 bits for stronger security.
• -C: Adds a comment, typically your email address.

You will be prompted to enter a file location to save the key (or press Enter to accept the default location) and an optional passphrase for added security.

2. Adding Your SSH Key to the SSH Agent

Next, add your newly created SSH key to the SSH agent to manage your keys easily. Start the SSH agent:

eval $(ssh-agent -s)

Then add your SSH private key:

ssh-add ~/.ssh/id_rsa

Replace ~/.ssh/id_rsa with the path to your private key if you specified a different location.

3. Copying the Public Key to the Server

To enable key-based authentication, you need to copy your public SSH key to the server:

ssh-copy-id username@server_ip

Replace username with your server username and server_ip with the server’s IP address. You will be prompted to enter your user password for the last time.

4. Verifying SSH Key Authentication

Once the public key is added to the server, test the SSH connection:

ssh username@server_ip

If everything is configured correctly, you should log in without a password prompt.

5. Disabling Password Authentication (Optional)

To enhance security, consider disabling password authentication entirely. Edit the SSH configuration file:

sudo nano /etc/ssh/sshd_config

Locate the following lines and modify them as shown:

ChallengeResponseAuthentication no
PasswordAuthentication no

After making changes, restart the SSH service:

sudo systemctl restart sshd

6. Conclusion

By following this tutorial, you have set up SSH keys for secure authentication to your Linux systems. Using SSH keys is a best practice that enhances security while simplifying access to your servers. Continue to explore other advanced SSH configurations and best practices to further improve your security posture!

About the Author

Dorian Kane

Author

View All Posts