Reputation: 861
I'm new in setting up a VPS (DigitalOcean droplets), and the recommendation is to set up an SSH key rather than logging in with username and password. I've successfully added the SSH key to my VPS, but I'm not the only user of this VPS or I will be using another computer. I am not sure if it's a good idea to pass around private keys.
Upvotes: 1
Views: 435
Reputation: 25966
I will be using another computer. I am not sure if it's a good idea to pass around private keys.
No, it is not a good idea to move the keys around (unless they are stored on secure hardware -- HSM). Otherwise it is good practice to create separate keys (encrypted) on the computers you plan to use and add them to the VPS. Then you can simply revoke the one, if they got potentially compromised and avoid exchanging all the keys on all you computers.
Upvotes: 0
Reputation: 24184
Others can access the droplet by using the username/password
of that machine (DigitalOcean droplet).
Or, you can login from a machine (SSH already added
). Now add a new ssh-key
in ~/.ssh/known_hosts
file of the DigitalOcean droplet.
There is one default root/password for every droplet. You can reset root password
using the DigitalOcean GUI (Reset Root Password):
Upvotes: 1