FlashPanel

Server SSH Keys ​

This page manages the SSH keys installed on one server, per system user. Use it to give SSH/SFTP access as a specific user, for example to a developer or a partner, and to take it away when it is no longer needed.

Global SSH Keys or Server SSH Keys?

  • Global SSH Keys: your own keys, installed automatically on every new server for root and flashpanel.
  • Server SSH Keys (this page): apply to one server and one user you choose.

New to SSH keys? See SSH keys: create one and log in to your server.

Open the management page ​

Inside the server, open the Security > SSH Keys menu.

The table lists every SSH key on the server, including installed global keys:

  • Name: a label for the key
  • System User: the Linux user that can log in with this key. A key installed for several users shows one row per user
  • Created By: the team member who added the key
  • Date Created: when the key was added

Add SSH Key to the server ​

  1. Click Add SSH Key at the top right of the page. The Add SSH Key dialog opens.

  2. Choose one of two ways:

    Option 1: Let FlashPanel create the key

    1. Click Generate SSH Key at the top right of the dialog. FlashPanel creates an RSA 4096-bit key pair and fills in the Name and Public key.
    2. Click the 3 buttons in the yellow warning box one by one to download the files:
      • OpenSSH Key: private key for the ssh command (no extension)
      • PuTTY Key: private key for PuTTY, WinSCP, FileZilla (.ppk)
      • Public Key: the public key (.pub)

    Option 2: Use an existing key

    • Name: a label, e.g. "An's laptop", "CI deploy"
    • Public key: paste the public key, starting with ssh-ed25519 AAAA... or ssh-rsa AAAA...

  3. In User, choose the system user that will log in with this key, e.g. flashpanel, root or a website's user.

  4. Click Add SSH Key.

The key appears in the list and is installed on the server right away. You (or whoever holds the private key) can now log in with the SSH key as the selected user.

WARNING

  • With Option 1, the private key is shown only once. If you close the dialog without downloading it, you need to generate another key.
  • A website's system user must have Can Access SSH/SFTP turned on in System Users to log in.

Delete an SSH key ​

  1. Find the key in the list and click the trash icon at the end of the row.
  2. In the Delete SSH Key? dialog, click Confirm.

The key is removed from the server immediately and this cannot be undone: whoever holds the private key can no longer log in as that user. Before deleting your own key, make sure you have another way to log in.

When you delete a system user, that user's SSH keys are deleted too.

Use cases ​

  • Development team: one key per developer, tied to the user that fits their role.
  • Automated deployment: a dedicated key for your CI/CD pipeline.
  • Several devices: one key per computer, so you can delete the key of a lost device.
  • Partners, clients: give temporary access with their public key, and delete it when the work is done.