SSH keys

SSH keys let you connect to your server securely without entering a password each time. You create a key pair: a private key that stays on your computer and a public key that gets installed on the server. When you connect, the two keys verify each other and you’re in.

Go to Security > SSH keys to get started.

Generating a key pair#

On the Generate key tab:

1. Enter a name for the key (letters, numbers, spaces, dashes, underscores, and dots – up to 64 characters).
2. Optionally enter a password (passphrase) to encrypt the private key. If set, you’ll need to enter this password each time you use the key. It must be at least 12 characters and include a lowercase letter, uppercase letter, number, and special character.
3. Click Generate key.

Hostney generates the key pair on the server and stores both keys. The public key is automatically added to your account’s authorized keys, so you can connect immediately.

Download your private key from the key’s dropdown menu. It’s available in two formats:

• Private key – OpenSSH format, works with Terminal.app, Windows Terminal, Linux terminal, and most SSH clients
• PuTTY key – PPK format, works with PuTTY and WinSCP on Windows

Importing an existing key#

If you already have a key pair, you can import just the public key on the Import key tab:

1. Enter a name for the key.
2. Paste your public key in the RSA key field. It must be in  ssh-rsa  format with a minimum of 2048-bit strength.
3. Click Add key.

Since Hostney only receives the public key, the private key and PuTTY key download options won’t be available for imported keys. Keep your private key stored securely on your own system.

Managing your keys#

The key list shows all your SSH keys as cards with the key name, type, and which IPs are allowed to use it. Each key is tagged as either “Generated” (green) or “Imported” (blue).

The dropdown menu on each key gives you these options:

SSH credentials

Shows the connection details you need for your SSH client:

• Hostname – Your server’s address (with copy button)
• Username – Your account username (with copy button)
• Port – 22 (with copy button)
• Authentication – SSH key

A ready-to-copy SSH command is shown at the bottom: ssh username@hostname

There’s also a Terminal link that opens the browser-based terminal directly.

Public key

Displays the full public key in OpenSSH format with a copy button. Use this if you need to install the key on another server or service.

Private key

Displays the private key in OpenSSH format with a copy button. Only available for keys generated through Hostney, not imported keys.

PuTTY key

Displays the private key in PuTTY PPK format with a copy button. Only available for generated keys. Use this format with PuTTY or WinSCP on Windows.

Manage IP addresses

Restricts which IP addresses can use this key to connect. By default, all IPs are allowed.

Enter one or more IP addresses or CIDR ranges:

• IPv4:  192.168.1.100
• IPv4 CIDR:  10.0.0.0/24
• IPv6:  2001:db8::1
• IPv6 CIDR:  2001:db8::/32

Click the + button to add more entries. You can add up to 50 IP addresses per key.

Click Update IPs to save. Leave all fields empty to allow connections from any IP.

IP restrictions are enforced through the SSH authorized_keys file on the server, so they apply regardless of which SSH client is used.

Rename

Changes the key’s display name in the control panel. This doesn’t affect the key itself or your ability to connect.

Delete

Permanently removes the key pair from Hostney and revokes access. The key is removed from the server’s authorized keys file, so any SSH client using this key will no longer be able to connect. Type DELETE to confirm.

Connecting to your server#

Once you have a key set up, use these settings in your SSH client:

• Host – Your server hostname (shown in SSH credentials)
• Port – 22
• Username – Your account username
• Authentication – Point to your private key file (OpenSSH format for most clients, PPK format for PuTTY)

Or use the SSH command shown in the credentials modal:

ssh username@hostname

If you set a passphrase when generating the key, your SSH client will ask for it when connecting.

You can also connect directly from the control panel using the browser-based terminal without needing an external SSH client at all.