SSH

Secure Your Business with SSH Key Authentication: A Step-by-Step Guide

Serhii Shypylov

11 січ 2025 • 2 min read

The Problem: Weak Password Security Risks Your Business

For many small and medium-sized businesses, servers are the backbone of operations—hosting websites, storing client data, and running business applications. Yet, most still rely on password-based SSH authentication, which is increasingly vulnerable to brute-force attacks, phishing, and credential leaks.

A single compromised password can lead to downtime, data breaches, or compliance violations. At 1it.pro, we’ve seen how switching to SSH key authentication not only strengthens security but also makes server management faster and more efficient.

The Solution: SSH Key Authentication

SSH (Secure Shell) key authentication replaces passwords with cryptographic keys, making brute-force attacks nearly impossible. Here’s a streamlined, business-friendly setup guide based on our DevOps expertise at 1it.pro.

1. Generate Your SSH Key Pair

On your local machine, open a terminal and run:

ssh-keygen -t rsa -b 4096 -C "your@email.com"

Press Enter to save in the default location.
Optionally, set a passphrase for extra security.

Pro Tip from 1it.pro: For stronger and faster cryptographic performance, use ed25519:

ssh-keygen -t ed25519 -C "your@email.com"

2. Install Your Public Key on the Server

Add your public key to the server using:

ssh-copy-id user@your-server.com

Replace user and your-server.com with your actual username and host.

3. Configure the SSH Server for Key Authentication

sudo nano /etc/ssh/sshd_config

Ensure these settings:

PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no

Restart the SSH service:

sudo systemctl restart sshd

4. Verify Your Connection

Connect from your local machine without a password prompt:

ssh user@your-server.com

If configured correctly, you’re in—securely!

Automating SSH Key Setup with a Script

For teams managing multiple servers, manual setup can be time-consuming. Here’s a Bash script we use at 1it.pro to streamline SSH key generation:

#!/bin/bash
echo "Enter key comment (optional):"
read comment
comment=${comment:-""}

echo "Enter passphrase (leave empty for none):"
read -s password

echo "Enter filename (default 'homelab'):"
read filename
filename=${filename:-"homelab"}

if [ -z "$password" ]; then
  ssh-keygen -t ed25519 -C "$comment" -f "$filename"
else
  ssh-keygen -t ed25519 -C "$comment" -N "$password" -f "$filename"
fi

echo "Key generated and saved as $filename"

Usage:

Save as generate_ssh_key.sh.
Make it executable:
```
chmod +x generate_ssh_key.sh
```
Run:
```
./generate_ssh_key.sh
```

The Result: Stronger Security & Streamlined Access

By adopting SSH key authentication, you’ll achieve:

Enhanced Security: Cryptographic keys are virtually immune to brute-force attacks.
Faster Access: No more typing passwords for every login.
Better Compliance: Aligns with industry security standards.
Simplified Team Management: Easily add or remove keys without changing passwords.

At 1it.pro, we’ve helped dozens of clients—from healthcare clinics to e-commerce stores—reduce unauthorized access attempts by over 95% through SSH key authentication.

Summary for Busy Readers

Problem: Password-based SSH logins are insecure and inefficient.
Solution: SSH key authentication offers robust security and faster access.
Result: 95% fewer unauthorized login attempts and smoother operations.
Next Step: Partner with 1it.pro to secure your infrastructure.

Take Action Today

Protect your business and streamline operations with SSH key authentication. At 1it.pro, we’ll craft a personalized DevOps and automation plan to secure your servers, reduce costs by up to 40%, and accelerate your growth. Don’t let weak security hold you back—act now!

🚀 Explore more guides on our blog 👉 blog.1it.pro
📧 Contact us: admin@1it.pro for expert IT guidance.
🌐 Explore more: Visit 1it.pro for top-tier IT solutions.

Github

Home