How often should I rotate my SSH keys?

Re:How often should I rotate my SSH keys? by Ciantic on Friday February 26, 2021 @08:03AM (#26274339)

If you use GPG and YubiKey approach, you can create the keys in offline computer, store them to YubiKey, and make paper copy of the private key. Also you probably shouldn't have only single way to access the remote computer, I still intend to store password for root that I never use.

I wrote about my endeavour with this approach just few days ago [1].

[1]: https://github.com/Ciantic/thoughts/blob/master/2021/yubikey...

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by sneak on Friday February 26, 2021 @09:03AM (#26274818)

You should totally disable password authentication for SSH.

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by Ciantic on Friday February 26, 2021 @09:56AM (#26275354)

You are right, but you can still use password for recovery purposes even if it's not used for SSH authentication.

Most VPS provides "web console" access. It connects like terminal, like Digital Ocean's web-console that doesn't require SSH access [1].

[1]: https://www.digitalocean.com/docs/droplets/resources/console...

[ Parent | on HN ]