Skip to main content

​
What are SSH Keys?

SSH (Secure Shell) keys are a robust and secure way to log into your Strettch Cloud compute instances without typing a password. They work using a cryptographic key pair consisting of two interacting parts:
  1. The Public Key: Think of this as a padlock. You upload this to Strettch Cloud, and we install it on your compute instances. It is perfectly safe to share.
  2. The Private Key: Think of this as the physical key that opens the padlock. This stays securely on your personal computer and should never be shared with anyone.
Never upload your private key to any dashboard, share it over email, or commit it to version control (like GitHub). Anyone with your private key has full access to your resources.
When you log in, your server verifies that your private key matches its public padlock. If they match, you are granted access automatically. Why do we need them and why are they recommended?
  • Enhanced Security: Traditional passwords can be guessed, stolen, or cracked using automated “brute-force” attacks. SSH keys use complex cryptographic algorithms that make them virtually impossible to decipher by brute force.
  • Convenience: Once set up, you no longer need to remember or type a long, complex password every time you log into your server. The authentication happens instantly in the background.
By using SSH keys, you ensure that only authorized users who possess the correct private key file can access your infrastructure.

​
Generating an SSH Key

If you don’t already have an SSH key, follow the instructions below to generate one on Linux, MacOS & Windows:
Windows Users: The commands below can be securely executed natively in modern Windows via PowerShell or Windows Terminal.
1

Generate a new SSH Key

Open your terminal and run:
Then press Enter to accept the default file location. Add a passphrase for extra security. It’s optional but highly recommended.
2

Add the public key

Run:
(Note: If your system generated an RSA key by default, use cat ~/.ssh/id_rsa.pub instead)Copy and paste the output into the SSH key content field in the next section.

​
Adding SSH Keys to Your Team

In Strettch Cloud, SSH keys are managed at the team level. Adding an SSH key to your team settings makes it available to select whenever a team member creates a new compute instance.
1

Navigate to Team Settings

Go to your Strettch Cloud dashboard and open your Team Settings.
2

Go to SSH Keys

Find the SSH Keys section within your team settings.
3

Add a New Key

Click on Add SSH Key. You will be prompted to paste your Public Key and give it a recognizable name. Since SSH keys are shared at the team level, we recommend using a Firstname@Computer format (e.g., Sam@MacBookPro).
4

Save

Click save to store the key. It is now securely associated with your team and ready for use.
The team SSH key list shows every active member’s keys, each labelled with the name of the member who added it. This makes it easy to see who owns which key when several people contribute keys to the same team.

​
Using SSH Keys During Compute Creation

Once you have added at least one SSH key to your team, it becomes highly recommended to apply it when provisioning a new Compute instance. This replaces the default insecure password authentication method.
1

Create a New Instance

Start the process to create your compute instance from the dashboard.
2

Select SSH Keys

In the Authentication section during compute creation, you will see a list of the SSH keys attached to your team.
3

Apply Keys

Check the box next to one or more SSH keys that you want to add to this instance.
4

Launch Compute

Finalize the creation of your compute instance. Once it’s running, you can connect to it securely using the corresponding private key on your computer!
Adding an SSH key during creation configures the ~/.ssh/authorized_keys file for the default user on your compute instance, ensuring you have immediate secure access the moment it boots up.

​
Adding SSH Keys to an Existing Compute

If you already created a compute instance without an SSH key, you can still add one manually.
1

Access the Instance

Log into your running compute instance using your existing password.
2

Add the Public Key

Open the ~/.ssh/authorized_keys file on your instance and paste your public key on a new line to enable secure access.
3

Disable Password Auth (Optional)

Edit /etc/ssh/sshd_config, set PasswordAuthentication no and restart the SSH service with sudo systemctl restart ssh. Make sure accessing Compute via SSH Key works before this!