Comment on Why isn't using a key file the most common way to log into self-hosted servers?

poVoq@slrpnk.net ⁨1⁩ ⁨week⁩ ago

As others have mentioned there are ssh keys and generally you can and should of course use a password manager.

However there is IMHO a huge blindspot of people using only SSH keys to long in, and that is that your day-to-day dev PC is actually more likely to be compromised in some way than the server that only runs specific, relatively well defined applications and overall just has less attack surface. And the ssh keys on your dev PC are really not very securely stored and thus quite easily compromised.

Hardware keys are of course a better solution, but I would personally recomment to use a 2FA solution that prevents access even when one factor (ssh keys or passwords) is compromised.

source
Sort:hotnewtop