SSH keys

What’s the right way to revoke a departing employee’s access to servers and databases?

I'm trying to understand what a practical offboarding process looks like for a small team without a dedicated security person. When a developer or contractor leaves, there may…

Is Ansible Secure Enough for Managing Sensitive Servers?

I need to manage seven Ubuntu 22 servers running a MERN application in a load-balanced setup. The infrastructure will include a local machine acting as the Ansible control…

Is Ansible Secure Enough for Managing Servers with Sensitive Data?

I manage seven Ubuntu 22.04 servers running a MERN application in a load-balanced setup. The servers handle sensitive data, and I'm considering using Ansible to automate administration and…

What’s the right way to revoke access when an employee or contractor leaves?

I'm trying to understand what a solid offboarding process looks like for a small engineering team. When someone leaves, we may have SSH keys on several servers, shared…

Should I disable direct root SSH when using key-only authentication?

I'm hardening a Linux server and keep seeing advice to disable direct SSH login for root. If root authentication is restricted to SSH keys, how much safer is…

Can Bash provide an SSH password without sshpass or expect?

I need to automate an SSH login to a host where public-key authentication is not currently available. Tools such as sshpass and expect can detect the password prompt…

Best Practices for Managing SSH Keys Across Multiple Servers

I'm currently managing SSH keys for six servers, and I'm concerned about security after one of them got compromised. If an attacker steals SSH keys and gains access…

Are SSH Keys with Passphrases Considered Two-Factor Authentication?

I'm wondering if using SSH keys that are protected by passphrases can be counted as two-factor authentication (2FA). I'd appreciate some detailed explanations or insights on this!