SSH security
Key formats, algorithms, host identity, account authorization, recovery, and cross-device key handling.
5 currently maintained articlesSSH Login Keys Explained: A Deep Comparison of Ed25519, ECDSA, RSA, FIDO2, and Certificates
SSH keys are not one thing: algorithm, file format, hardware protection, and certificate policy solve different problems. This guide compares the major choices and gives practical defaults for personal servers, teams, and production fleets.
SSH Key Formats Explained: Why Mac and iPhone Need Different Private-Key Files
A practical guide to using one Ed25519 identity across a Mac, iPhone, and Linux server without confusing OpenSSH, PKCS8, public keys, or key algorithms.
SSH Permission Denied (publickey): A Layer-by-Layer Debugging Checklist
A repeatable way to debug public-key authentication by separating network reachability, key selection, server authorization, permissions, and account policy.
SSH Host Key Changed: A Safe Recovery Guide for Rebuilt Servers and Reused IPs
How to distinguish a legitimate server rebuild from a man-in-the-middle warning, remove a stale known_hosts entry, and verify the new host key before reconnecting.
A Safer SSH Key Workflow Across Mac, iPhone, and Remote Development Tools
Design a cross-device SSH setup that is recoverable, auditable, and easy to revoke—without passing private keys through chat or weakening host verification.