How do I set up ssh keys to log into my RPi

Question

Using ssh keys to log into your RPi is much more convenient than typing the password everytime.

It's especially handy if you want to log in from automated scripts or use programs such as scp or rsync

So how do I set up ssh keys to log into my RPi?

And here: https://raspberrypi.stackexchange.com/questions/66613/how-can-i-use-scp-ssh-in-a-cron-script-without-entering-a-password?noredirect=1&lq=1 — SDsolar, May 03 '17 at 03:47

score 16 · Answer 1 · edited Jun 16 '20 at 10:47

16

Linux

If you've never heard of ssh-keys before, you'll need to generate one like this

$ ssh-keygen -t dsa

This creates a directory ~/.ssh/ and stores the key files

$ ls -l .ssh/
-rw------- 1 gnibbler gnibbler 668 Aug 22  2004 .ssh/id_dsa
-rw------- 1 gnibbler gnibbler 603 Aug 22  2004 .ssh/id_dsa.pub

You need to copy id_dsa.pub to the RPi. There is a very easy way to do this using a helper script.

$ ssh-copy-id -i ~/.ssh/id_dsa.pub pi@raspberrypi.local

You'll need to type the pi user password one last time

Next time you log in, you won't be prompted for a password

$ ssh pi@raspberrypi.local
Linux raspberrypi 3.1.9+ #174 PREEMPT Sun Jul 22 19:04:28 BST 2012 armv6l
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Type 'startx' to launch a graphical session

How do I disable password logins?

Once you have set up key-based logins, you don't need to log in using a password anymore; you can disable it, which is much more secure.

First, log in to your Raspberry Pi and open /etc/ssh/sshd_config as root; for example, run sudo vim /etc/ssh/sshd_config.
Find the line containing PasswordAuthentication; it probably reads #PasswordAuthentication yes.
Change this line so it reads

PasswordAuthentication no
Restart your Raspberry Pi, or just sshd.

Arch Linux

To restart sshd on Arch, run sudo rc.d restart sshd.

Debian/Raspbian

To restart sshd on Debian based distributions, run sudo /etc/init.d/sshd restart.

edited Jun 16 '20 at 10:47

Community

1

answered Aug 22 '12 at 22:09

John La Rooy

11,947
9
47
75

Please be aware that password-less ssh should only be used where you know the connection is already secure. Otherwise you are putting yourself at risk to save 10 seconds. – Jivings Aug 22 '12 at 22:26
@Jivings Explain? Keys are always more secure than passwords. – Alex Chamberlain Aug 23 '12 at 06:12
@gnibbler Would you accept an edit on how to disable password logins? – Alex Chamberlain Aug 23 '12 at 06:13
@AlexChamberlain, of course – John La Rooy Aug 23 '12 at 06:20
@AlexChamberlain This answer says how to set up password-less keys. That's to what I was referring – Jivings Aug 23 '12 at 06:31
@Jivings O I see, but that's nothing to do with the connection. Passworded keys are decrypted locally. – Alex Chamberlain Aug 23 '12 at 06:39
@jivings and gnibbler: The Debian restarting sshd needs to be checked; it might be sudo /etc/init.d/ssh restart. – Alex Chamberlain Aug 23 '12 at 07:08
@AlexChamberlain The encryption strength is reduced. And if a key is compromised then they can be easily used. All I'm saying is that you are sacrificing a layer of security for the sake of a few seconds – Jivings Aug 23 '12 at 07:21

How do I set up ssh keys to log into my RPi

1 Answers1

Linux

How do I disable password logins?

Arch Linux

Debian/Raspbian

Linked