For security reasons, it is recommended to use SSH keys instead of passwords for accessing the server. The biggest advantage SSH keys provide is that it's nearly impossible to be deciphered, while a password could be cracked or intercepted by brute-force password attacks. Furthermore, authentication by SSH keys is more convenient than using a password, you will be able to connect a server or multiply server without any need to remember and enter your password each time.

SSH keys are always generated in pairs with the private and public keys. The private key should be safely guarded and known only by you. The public key can be shared with any server, which you would like to access.

To generate SSH keys run the command:

Then you will be asked in which file key should be saved:

Secondly, you will be asked for a passphrase:

It is not required but highly recommended because passphrase provides more security. Without a passphrase, your private key would be stored on your computer in an unencrypted form. We recommend enter a passphrase and choose something that will be hard to guess in order to ensure the security of your private key.

Finally, you will see a message, where your private and public keys were saved:

PuTTYgen is a free utility, which we will use to generate SSH keys for use in PuTTY to connect server. PuTTYgen and PuTTY client could be downloaded here. Run downloaded PuTTYgen and press button Generate:

After pressing Generate start moving the mouse within the window, because Putty uses mouse movements to collect randomness. When key would be generated enter passphrase to Key passphrase: and Confirm passphrase: fields. Note: it is not required, but highly recommended because passphrase provides more security. Without a passphrase, your private key would be stored on your computer in an unencrypted form. We recommend enter passphrase and choose something that will be hard to guess in order to ensure the security of your private key.

Then press buttons Save public key and Save private key, enter names for files and choose the folder where files should be stored:

For set up SSH keys to your server you could to install / re-install OS. First of all open saved public key file and perform these changes:

You may see such key:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4H28lnMmxT6c+6KzlNGuUDH7C+bWwyaMpp4gV/iOyX0R/laSeliolW1fxJdVHkLKUL7uewMu+h6RDsjkprFZKP7XEdzxYFRzOKzB541QjIunl33qhd6XLgdc4o0ddJs6RGYaxJJgxYWmBNS+1HKEGWK9uCONRv9CJD/QY/BTaMXfHMMf2FLrYJcIebVPsciz0HngAJ04I/KptGf+ILQQ+kLEeKJJIFRC4Zu0+pbX1niF7oMXXHdvf7xypF8pleDLJzWD92KF7AFlQ+973v/sL2bM5yRPZlX7LcG6GsNdc34Ht2drbmfFEwsN12W7jCEomCIucoXieInxECOI9AUTj [email protected]

Change [email protected] to root@, where is your server IP address. After changes public key should look like as:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4H28lnMmxT6c+6KzlNGuUDH7C+bWwyaMpp4gV/iOyX0R/laSeliolW1fxJdVHkLKUL7uewMu+h6RDsjkprFZKP7XEdzxYFRzOKzB541QjIunl33qhd6XLgdc4o0ddJs6RGYaxJJgxYWmBNS+1HKEGWK9uCONRv9CJD/QY/BTaMXfHMMf2FLrYJcIebVPsciz0HngAJ04I/KptGf+ILQQ+kLEeKJJIFRC4Zu0+pbX1niF7oMXXHdvf7xypF8pleDLJzWD92KF7AFlQ+973v/sL2bM5yRPZlX7LcG6GsNdc34Ht2drbmfFEwsN12W7jCEomCIucoXieInxECOI9AUTj [email protected]

Choose actual OS from the drop-down list, mark Use SSH key and paste the public key to the field below.

You may see such key:

—- BEGIN SSH2 PUBLIC KEY —-
Comment: “rsa-key-20170914”
AAAAB3NzaC1yc2EAAAABJQAAAQEAhdTLlJz6DiY25lj1nmjULToCqbkVideWg3xM
JQa0TEpCxy/IYdmsg6T4thWD0Y42btuKT8x7gKwjlttuRoQPCQomlyCBoVsdM+ax
/U6PxvjWNpVVrk6qXORslLsRU/LvCn2NkfLZiYZGIE3SrcPvQIiYQJ/yZBCJg/7L
OnTkGbzJq9SR+iyAVmL3xduMKx8KOB8Ohk3o6N/1onFizBCnrUAXpN3vh2dCZCPF
nOb+lcjqn8LplFUv205kSJH8kHbRsc8N1QBl0U9UX+Ij72KKq0HyG21lZdF1UF4H
NTyuzaS1luknL6QuhQQ9IcYmedw7BxcIIBkDsorE4cFquU+gjQ==
—- END SSH2 PUBLIC KEY —-

Copy key between comment Comment: “rsa-key-20170914” and end of key —- END SSH2 PUBLIC KEY —-. Also delete all new lines, which could be by opening file via Notepad. Choose actual OS from drop-down list and mark Use SSH key. To the filed below enter “ssh-rsa “, then paste copied public key and enter “ root@“, where is your server’s IP address. Pasted public key should look like as:

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlnlhLnzD3+8yEYQoO724H86b/zjHEJWNy/W8AEYsQTCnkhY2lC+O6lVjBI3Fssr4cTNTZ6H+Yh0nbqUdBoYJjkXjAMHVNDo0FYJH5Urgq6OeV3EaxZeuQxcSTzSU4zXBB2SlQ5ZYNGsEGW71nnXPWB4ji8dbJTyodiMlcR/1GuW2d8cPNXUj/gk381NypSvdLF9T4XNAOfQWtFR13wg/YtgnIM1m3jjbtoLo1GKgau68NEp5oQVOMHWQC7/cHqJaWWsbEt/lQjr9wUoMIjjwzThJlWwF86rNVRkz+ORBDyoDioFTXcOSe93hy2Hm4ow8F2kDqlS+05v/qShOTiKWWw== [email protected]

Choose the VPS service and find the button “SSH Key Management” on the left menu.

You can see in the screenshot above, that you can add a new SSH Key by pressing the button “Add new SSH Key”, you will see the following menu then:

You simply name your SSH Key, enter the exact SSH Key that you generated and save it. Once this is done, you can reinstall the server and add the SSH Key to it

In the picture above you can see when installing/reinstalling OS, you choose the OS, then you need to mark a checkbox “User SSH Key“, it will display a drop-down menu, which you can then choose your saved SSH Key and continue installing OS.

The most convenient is to create and save a profile for connection in PuTTY. First of all open PuTTY and in the Host Name (or IP address) field enter your server hostname or IP address. Enter the port for SSH into field Port (default is 22) and mark SSH as Connection type:

On the left-hand side of the window select Data under Connection. To the field Auto-login username enter root (or your username):

Expand SSH under Connection and select Auth. Click the button Browse on the right-hand side of the window and choose your private key.

Select the Session category and enter the profile name in the Saved Sessions field. Click the button Save in the Load, Save or Delete a stored session area.

Now you are to log in with a saved profile – just choose it in the list under Saved Sessions and click the button Open. You will not be asked for a password, but, if you had set a passphrase, you would be asked for it at every time you log in.

Firstly you need to create a ~/.ssh/config file on your computer and add key and server details to it:

Host shortcut
HostName serverIPAddress
User root
IdentityFile /home/username/.ssh/id_rsa

Where:

* Host is the name of shortcut you will use to connecting your server
* HostName is the IP address of the server you would connect
* User is the root
* IdentityFile is the full route to your private key

After ~/.ssh/config file would be created, you will be able to connect the server by shortcut name via command:

You will not be asked for a password, but, if you had set a passphrase, you would be asked for it at every time you log in.