SSH Keys: Separate Workstations and Rotate Access
One shared private key makes incident response and access removal difficult. This guide gives you a small, testable way to approach the issue before changing a live system.
A practical workflow
- Give each authorized device its own key and use an agent with appropriate protection.
- Remove a lost device's public key and review server access logs.
What to check
Never put a private key in a repository or send it as a chat attachment. Compare the result with the original problem and record what changed. If a measurement or test does not support the change, revisit the assumption rather than adding more complexity.
Keep the experiment small enough to reverse. Document the starting state, the change and the result so another person can repeat the process. Product menus and versions can change, so check the current documentation for your environment.
Official reference: Read the documentation.