---
title: Using SSH Keys
eleventyNavigation:
  key: Using SSH Keys
  parent: SSH
  order: 2
---

Connecting in SSH mode with its public key (with or rather than use the connection via password) offers some advantages: enhanced security, the ability to define a "blank" password, etc. Here are the steps to follow to configure your SSH account with a public key.

> [!NOTE]
> SSH access is **disabled by default**. You will need to activate password connection at least temporarily to add your SSH keys.


## In Windows

The actions are performed using *PuTTY*, an SSH client [available free of charge](https://www.chiark.greenend.org.uk/~sgtatham/putty/download.html).

1.  Generate the private key:
    - Start **PuTTYGen** (supplied by PuTTy),
    - Generate a pair of **SSH-2 ED25519** keys,
    - Save the private key on your station,

2.  Declare the key on the server by copying this key to the `$HOME/.ssh/authorized_keys` file in your alwaysdata account,

3.  Configure your **PuTTY** session to connect in SSH:
	- Go to **SSH > Auth** menu, to load the path to your private key in *Private Key file for authentication*.

## In Unix / OS X

1.  Generate keys:
    ```sh
    $ mkdir -p $HOME/.ssh
    $ chmod 0700 $HOME/.ssh
    $ ssh-keygen -t ed25519 -f $HOME/.ssh/id_ed25519
    ```

> [!TIP]
> To never have to enter your password when connecting in SSH mode, specify a blank "passphrase".


2.  Declare the public key (.pub) on the server:
    ```sh
    $ ssh-copy-id -i $HOME/.ssh/id_ed25519.pub [account]@ssh-[account].alwaysdata.net
    ```

    Or by copying the content of this file to the `$HOME/.ssh/authorized_keys` file in your alwaysdata account.


Users of the [Private Cloud](/en/docs/admin-billing/billing/choose-its-paas) can state them [directly in the administration interface](/en/docs/web-hosting/remote-access/ssh/install-globally-ssh-keys), they will be global to the entire server and all accounts can use them.


3.  Connecting with SSH: on the next SSH connection, you will be prompted to enter your passphrase (or nothing at all if your passphrase is blank).

> [!NOTE]
> DSA keys are [not accepted](https://www.openssh.com/legacy.html).