#SSH KEYS EXPLAINED PASSWORD#

Yes, this is an oversimplified analogy - but this concept really helped me understand how the whole system works at a very high level. If this happens I would recommend generating a new public/private key pair immediately.

#SSH KEYS EXPLAINED PASSWORD#

Even if your private key does fall into the wrong hands, the person must still know the password to use the private key. From there you can use the private key to unlock the public key just as before. In order to use the private key, you must first retrieve it out of the safe with the right combination. What does this mean? In our analogy, this would be the equivalent of putting the private key in a combo-lock safe. Now, if you want to take it one step further - ssh-keygen allows you to put a password on the private key. With this, you can make copies of id_rsa.pub (public key/padlock) and put them onto the computers that you want someone with the private key (probably just you) to have access to. You have both the master lock and the key to open it. So when you run вЂssh-keygenвЂ™ - it produces both a private (id_rsa) and a public (id_rsa.pub) key for usage. This holds true for public/private key models as well. Just like a real life key system, you wouldnвЂ™t care if there were hundreds of the same padlock locking your things, as long as you never lost possession of the key. As long your private key is never compromised, it doesnвЂ™t matter where your public key is living. Your public key (padlock) can be distributed anywhere. Just like a regular key you keep it secret, safe, and out of the wrong hands. This is what you use to open the padlock that is stored on the other machine. Think of a private key as being the actual key.For example, if you want to put your вЂpadlockвЂ™ on an ssh account on another machine, you would copy it to вЂauthorized_keysвЂ™ in the ~/.ssh folder. ItвЂ™s not actually a key, itвЂ™s a padlock you can make lots of copies of and distribute wherever you want. add the public key to the list of authorized SSH keys on the remote cluster check that the password-less SSH connection works properly. Think of a public key as being the lock.I came up with a good analogy that might help others in the future. Some of the terms went right over my head. I found countless tutorials online that described the procedures for setting up key based authentication with ssh, but very few explained it in a conceptual way that was easy to understand. If you arenвЂ™t aware ssh can use public/private key methods for authorization and authentication. When I started to use ssh in my workflow many years ago, the concept of public and private keys came up as quite confusing.

Ssh keys explained