Skip to content
0333 090 4540
Snappyhost

Manage SSH access and keys

Use command-line access for approved administration, preferably with individual SSH keys.

Where Websites → your website → Advanced → Developer tools → SSH key manager

Enhance SSH keys and access settings

What this is for

  • Add a public SSH key.
  • Use the correct connection details.
  • Remove access when it is no longer needed.

Before you start

  • Confirm SSH is allowed for the package and the person is authorised for command-line access.
  • Create a personal key pair on the user's device; only the public key belongs in Enhance.

Take care

A private key must stay on its owner's device or approved secret store. Never paste a private key into Enhance or documentation.

Steps

  1. 1

    Open Websites, select the website, open Advanced and choose Developer tools.

  2. 2

    Select SSH key manager on the left. Choose Add and paste the user's public key—the line that normally starts ssh-ed25519 or ssh-rsa. Never paste the private key.

  3. 3

    Give the key a label that identifies its owner and device, such as Jane – work laptop, then save it.

  4. 4

    For the connection command, open SSH password authentication and copy the complete Login command shown by Enhance. It contains the correct username, host and port.

  5. 5

    Prefer the saved public key when connecting. Use password authentication only when your operating policy allows it.

  6. 6

    If a password may have been shared or exposed, use Reset to replace it and update the authorised person securely.

  7. 7

    Test the connection and confirm it opens the intended website environment.

  8. 8

    Remove old keys immediately after a staff, supplier or device change.

Check it worked

  • The key list shows a clear label for the correct person or automation.
  • A test connection reaches the intended website environment and an unauthorised old key no longer works after removal.

What the controls do

Control What it means
Public key The shareable half of an SSH key pair authorised by the server.
Login command A ready-made ssh command containing the website username, server address and port.
SSH password authentication An alternative sign-in method that should be tightly controlled when available.
Reset Generates or applies a replacement SSH password when the existing one should no longer be trusted.