Definitely worth pointing your readers to seahorse if you want to “make tech easier”, there’s a typo in your commands… Linux create your own GnuPG private and public key. The simplest way to generate a key pair is to … To generate the RSA public key from the RSA private key: openssl rsa -in private.pem -outform PEM -pubout -out public.pem In Asymmetric cryptography key pairs where each if different is used to complete each other. Notice that there are four options. The default location is the .ssh folder in your Home directory. You can now connect to your remote host with the following command: Damien Oh started writing tech articles since 2007 and has over 10 years of experience in the tech industry. In this post I will demonstrate how to regenerate a public key from the corresponding private key that you still have. A key pair, consisting of a private key and a public key, is a set of security credentials that you use to prove your identity when connecting to an instance. Most distros provide seahorse which provides a gui for doing this, it will so automatically access an ssh server and add the public key to the servers keyring which is pretty handy. Click Generate to generate a public/private key pair. So, let me know your suggestions and feedback using the comment section. $HOME/.… At this point, you have generated a private/public key pair with a public key that can be used for signing purposes. Affiliate Disclosure: Make Tech Easier may earn commission on products purchased through our links, which supports the work we do for our readers. Open the file manager and navigate to the .ssh directory. But we can also assign passphrase with using -P , You can also add custom comment to your private key for more identification. The key fingerprint is: 16:8e:e8:f2:1d:c9:b9:cf:43:9a:b3:3c:c1:1f:95:93 user@localhost Installation of SSH Keys on Linux - A Step-By-Step Guide. Understanding File Permissions: What Does "Chmod 777" Mean? I am going to use Vagrant’s SSH private key file for this post and create SSH public key from it. You can use ssh-keygen to create a key pair on computers which have the Linux operating system. ... the only … But Public key Authentication is one of the most used authentication methods used across production environment. © 2020 Uqnic Network Pte Ltd. All rights reserved. Lastly, restart the SSH server in the remote host. $ ssh-keygen -t rsa To … To use public key based authentication you would need a public and private key pair. To leave it blank, just press “Enter”. Now finally answering the initial question: As was shown above private RSA key generated using openssl contains components of both public and private keys and some more. # ssh-keygen -p -f ~/.ssh/id_rsa -P "old_password" -N "new_password", # ssh-keygen -C "This is for server1.example.com", |1|DnQfHwXX0E78Kqd9sM+jhKICLhM=|A7gki0vPIUajFlROxDljIxE6rGM=, |1|RK+RdFcebk+2EK81Rs16e9Im6Hk=|b7QKZly3lm6mBEzIvsLDps4x44I=. /root/.ssh/known_hosts updated. This is how you can create a key pair with ssh-keygen: Open the terminal (e.g. The passphrase is optional. I have used below external references for this tutorial guide The next step is to add a subkey that will be used for encryption. Remove keys for hostname from known_hosts file, 6 different types of authentication methods possible with SSH, Configure public key authentication to use SSH with or without passphrase in Linux, Bash while loop usage for absolute beginners, How to apply chmod recursively with best practices & examples, 4 useful methods to automate ssh login with password in Linux, Perform SSH public key authentication with PSSH (without password) in Linux, Install & Configure OpenVPN Server Easy-RSA 3 (RHEL/CentOS 7) in Linux, Linux sftp restrict user to specific directory | setup sftp chroot jail, Tutorial: Encrypt, Decrypt, Sign a file with GPG Public Key in Linux, 6 ssh authentication methods to secure connection (sshd_config), How to configure ssh host based authentication per user (CentOS/RHEL 7/8), How to configure SSH port forwarding (Tunneling) in Linux, OpenSSL create self signed certificate Linux with example, SOLVED: SSH fails with postponed publickey error, OpenSSL create certificate chain with Root & Intermediate CA, OpenSSL create client certificate & server certificate with example, Configure secure logging with rsyslog TLS to remote log server (CentOS/RHEL 7), Beginners guide to install Ansible on RHEL/CentOS 8, 4 ways to SSH & SCP via proxy (jump) server in Linux, 10 examples to generate SSH key in Linux (ssh-keygen), How to transfer files over SSH with SSHFS in Linux & Windows, 5 simple methods to test ssh connection in Linux & Unix, How to configure port forwarding in VirtualBox for NAT Networking, How to enable SSH access & configure network in rescue mode (CentOS/RHEL 7/8), 8 ways to prevent brute force SSH attacks in Linux (CentOS/RHEL 7), Difference between /dev/tty and /dev/pts (tty vs pts) in Linux, 6 commands to check and list active SSH connections in Linux, How to disconnect idle ssh session or keep idle ssh session active in Linux, How to kill or disconnect hung ssh session in Linux, Steps to install Kubernetes Cluster with minikube, Kubernetes labels, selectors & annotations with examples, How to perform Kubernetes RollingUpdate with examples, Kubernetes ReplicaSet & ReplicationController Beginners Guide, How to assign Kubernetes resource quota with examples, 50 Maven Interview Questions and Answers for freshers and experienced, 20+ AWS Interview Questions and Answers for freshers and experienced, 100+ GIT Interview Questions and Answers for developers, 100+ Java Interview Questions and Answers for Freshers & Experienced-2, 100+ Java Interview Questions and Answers for Freshers & Experienced-1, The public key content must be added to the, The private key will be stored on the client, This tool supports different arguments which can be used to create keys as per the requirement, If you wish to use SSH with public key authentication then use this once to create the authentication key in, If you forgot the passphrase then there is no way to reset the passphrase and you must recreate new passphrase and place they key pairs at respective locations to re-activate public key authentication, The default location would be inside user's home folder under, The default naming syntax used for the private RSA key will be, Next provided the passphrase, you can just press, In this example I am creating key pair of, You can also change the existing passphrase of your private key, If the provided passphrase is correct, you will get the prompt to, We can also create keys with custom filename using, This will create and keep the certificates in the current location from where you execute ssh-keygen tool, Every time you do SSH to another server, the SSH fingerprint for the secure connection is added to the client's, This is used to verify the authenticity of the SSH connection, Any intruder can use this information to get the fingerprint details of individual, This option will not modify existing hashed, Every time you do SSH, the RSA key for the SSH connection for respective, But if you re-install the target server and attempt to do SSH then it is possible the SSH may fail due to mis-match in the fingerprint, So you can either manually search and delete the RSA fingerprint of your server from, For example to delete all the keys related to. He is proficient in Windows, Linux, Mac, Android and iOS, and worked as a part time WordPress Developer. This is NOT the passphrase to connect to your remote host. We will also show you how to set up an SSH key-based authentication and connect to your remote Linux servers without entering a password. Your public key has been saved in id_rsa.pub. In my opinion, unless you are very particular and love to delve into the technical detail between the two technology, it doesn’t matter which of the two you choose. Isn’t 1 key enough? 7. The ssh-keygen command generates, manages and converts authentication keys for ssh client and server usage. As the time of writing this article, there are 6 different types of authentication methods possible with SSH.But Public key Authentication is one of the most used authentication methods used across production environment.. To use public key based authentication you would need a public and … 3 comments. Otherwise, when generating a key for automation, it may be set without a … SSH, or secure shell, is the most common way of administering remote Linux servers. Outlined below is a step-by-step guide detailing the process of installing SSH Keys on a Linux server: Step One: Creation of the RSA Key Pair. the command "--edit-key" to generate a subkey for this purpose. Click Generate to generate a public/private key pair. Then click Generate, and start moving the mouse within the Window. We may ask yourself why pair. First we need to generate the public and private SSH key pair. Enter file in which to save the key (/home/youruser/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in id_rsa. So if your user name is vivek, than all files are stored in /home/vivek/.ssh/ or $HOME/.ssh/ directory as follows: 1. One key is named private and only known by the owner. # Host 192.168.43.22 found: line 2
In the Number of bits in a generated key box, enter 2048. Your public and private SSH key should now be generated. It also supports signing of keys to produce certificates that may be used for user or host authentication. gpg --full-gen-key. you wrote “ssh -keygen -t rsa” but it should be “ssh-keygen -t rsa” with no space between “ssh” and “-keygen”. 3. As the key is being generated, move the mouse around the blank area as directed. The private key can encrypt messages that only the private key can decrypt. Upload the id_rsa.pub file to the home folder of your remote host (assuming your remote host is running Linux as well). Still in your remote host, open the SSH config file: Scroll down the config file and make sure the following attributes are set correctly. You can just press “Enter” to accept the default setting. While Encrypting a File with a Password from the Command Line using OpenSSL is very useful in its own right, the real power of the OpenSSL library is its ability to support the use of public key cryptograph for encrypting or validating data in an unattended manner (where the password is not required to encrypt) is done with public keys.. Creating an SSH Key Pair for User Authentication. Usually a public SSH key is generated at the same time as a private key. ssh-keygen -t rsa -b 4096 -C " youremail@gmail.com " At the second prompt, “Enter passphrase (empty for no passphrase),” you have two options: Press Enter to create unencrypted key. Ensure you do not already have a public key saved to your computer. This is my simple requirement. Generally vagrant creates the private_key under home directory of the user in .vagrant.d sub directory with the file name insecure_private_key. For all Linux-based operating systems, you only need to create root’s.ssh directory, and paste the public key into a file named “ authorized_keys ” From here, you can either use a text editing program to paste the key in (vi/vim/nano, etc), or you can use echo. This is the passphrase to unlock the private key so that no one can access your remote server even if they got hold of your private key. If you don’t have these files (or you don’t even have a .ssh directory), you can create them by running a program called ssh-keygen, which is provided with the SSH package on Linux/macOS systems and comes with Git for Windows: Key generation is complete. In the Number of bits in a generated key box, enter 2048. xterm) on your client computer. To create a new key pair, select the type of key to generate from the bottom of the screen (using SSH-2 RSA with 2048 bit key size is good for most people; another good well-known alternative is ECDSA). 1) Login to your shell account. The public Key will later get added onto the server and the private key will stay on your computer. (Optional) Enter a passphrase for the private key in the Key passphrase box and reenter it in the Confirm passphrase box. Overview > Managed Cloud Hosting > Projects > Website > SFTP/SSH Access > Creating Private Key and Public Key > Creating Private Key and Public Key (Linux) Creating Private Key and Public Key (Linux) You can use ssh-keygen to create a key pair on computers … To generate the missing public key again from the private key, the following command will generate the public key of the private key provided with the -f option. When you generate/extract/derive public key from the private key, openssl copies two of those components (e,n) into a separate file which becomes your public key. You can generate … ... From the computer where you downloaded the private key file, generate an SSH2 fingerprint from the private key file. The following command creates it in the default directory, which shall be output for you once it is created. If you do not already have a public/private key pair set up for your account on the boss system, create one using a command like that shown below. Your identification has been saved with the new passphrase. Use -C to generate keys with your custom comment, We can use -l to print the fingerprint and comment of the private key, You can also change the existing comment of your private key using -c argument, Check the new comment of your private key, Next check the content of known_hosts file, As you see now the hostname can not be understood as they are hashed. Keep it private 2. This tutorial explains how to generate SSH keys on Windows with PuTTYgen. Generate public key and store into a file. In Linux, creating a public/private SSH key is easy. Unlike a private SSH key, it is acceptable to lose a public key as it can be generated again from a private key at any time. That’s it. Linux, Cloud, Containers, Networking, Storage, Virtualization and many more topics, To automate this step you can use ssh-keygen with. Please use shortcodes for syntax highlighting when adding code. Upload the id_rsa.pub file to the home folder of your remote host (assuming your remote host is running Linux as well). Use gpg --full-gen-key command to generate your key pair. Next, you will be prompted to enter passphrase. The echo command would look something like this: For that best way is generate ssh public-private key, upload public key to VM and using private key access vm using "ssh -i private-key user@url.cloudapp.net". You should see two files: id_rsa and id_rsa.pub. Execute the following commands in order as they are given. The private key is generated simultaneously with the CSR (certificate signing request), containing the domain name, public key and additional contact information. The public key part is redirected to the file with the same name as the private key … As the time of writing this article, there are 6 different types of authentication methods possible with SSH. Connect to your remote host via SSH and use the following command to move the public key to the correct location. Do you can please explain it further , I mean how to use this keys in a real world scenario. We will create key pairs. Type the following command to generate ssh keys (open terminal and type the command): $ ssh-keygen Generate SSH keys looks as follows: The above command creates ~/.ssh/ directory. One key is named public which is known by the public. Do not share this file with anyone. Generate ssh key without any arguments, 10. We use ssh-keygen tool to generate SSH keys which are used for Public Key Based Authentication with SSH. Press “ctrl + o” to write and save the file, follow by “ctrl + x” to close the file. If you create a Linux AMI from an instance, and then use … To generate the public/private key pair, enter this in the Command Prompt: At the first prompt, “Enter file in which to save the key,” press Enter to save it in the default location. 2. To generate an RSA private key: openssl genrsa -out private.pem 2048. (Optional) Enter a passphrase for the private key in the Key passphrase box and reenter it in the Confirm passphrase box. The first step in the installation process is to create the key pair on the client machine, which would, more often than not, be your own system. This is how you can create a key pair with ssh-keygen: Help « Back. Alternatively, you can also use the DSA (Digital Signing Algorithm) technology to create the public/private key. The Commands to Run Generate a 2048 bit RSA Key. Please select what kind of key you want: The message contains a session ID and other metadata. If you are using SSH frequently to connect to a remote host, one of the way to secure the connection is to use a public/private SSH key so no password is transmitted over the network and it can prevent against brute force attack. So when a client tries to make a secure connection, it will use this private and public key pair combination to establish the connection, Let us explore the ssh-keygen tool to generate different types of key pairs in Linux, By default ssh-keygen generates SSH key with 2048 bit size. In this small note i am showing how to create a public SSH key from a private one using ssh-keygen command-line tool. Windows 10: Windows Subsystem for Linux; Any Windows version: Git for Windows (using its Bash shell) To generate an SSH private/public key pair using the ssh-keygen command and then copy the public key to your clipboard for use, complete the following steps: On your local computer, open a command-prompt window. 1. 4. man page for ssh-keygen. 5. Connect to your remote host via SSH and use the following command to move the public key to the correct location. Create Your Public/Private Key Pair. Both will work fine. A passphrase will be asked for so that the private key will be encrypted on your local file system so as to avoid any loss of the key if there is a local breech of security (or to protect the private key from the administrator). When you create your Droplet, the public SSH keys that you selected will be … 2) Use gpg command to create the keys $ gpg --gen-key ... (private and public key creation) . Although the daemon allows password-based authentication, exposing a password-protected account to the network can open up your server to brute-force attacks. … The output should match the fingerprint that's displayed in the console. It will ask you what kind of key you want. Only the computer in possession of the private key—your computer—can decrypt this message. Last updated: April 8, 2005. Lastly I hope the steps from the article to understand about ssh-keygen tool in more detail with different examples on Linux was helpful. Note: There has been a lot of debate about the security of DSA and RSA. $HOME/.ssh/id_rsa – Your private key. We use ssh-keygen tool to generate SSH keys which are used for Public Key Based Authentication with SSH. 8 Tools to Easily Create a Custom Linux Distro, How to Set Up a Virtual On-Screen Keyboard in Linux, How to Install and Configure Openbox Window Manager. $ ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub Enter passphrase: The -y option will read a private SSH key file and prints an SSH public key to stdout. In this article we learned about different arguments which can be used to generate SSH keys for Public key Authentication with SSH. He is currently the owner and Editor-in-Chief of Make Tech Easier. Creating Key Pairs. In the next screen, you should see a prompt, asking you for the location to save the key. “username@hostname” of the machine where you are connecting from would be a good example. For that, Azure provides way to upload public key to VM using ".pem" or ".cer" file during VM creation through Azure Portal. This key pair consists of a Public Key and a Private Key. 6. The default is to create a RSA public/private key pair and also a RSA signing key. The CSR is to be sent to the certificate authority for validation and signing immediately after the certificate activation in the Namecheap user account panel. Generate a new SSH public and private key pair: $ ssh-keygen -t rsa -C "identifying comment" -f keypair “Identifying comment” can be any string that will assist in determining which key this is. Author: Vivek Gite. A backup file is also created at the same location, ssh-keygen is a very vast tool which can do much more than generating SSH keys. ... How do I create my own GnuPG private and public key. As the key is being generated, move the mouse around the blank area as directed. Putty uses mouse movements to collect randomness. The .pub file is your public key, and the other file is the corresponding private key. 6. cat id_rsa.pub >> ~ / .ssh / authorized_keys rm id_rsa.pub. You can also specify the number of bits to be used for the keys by using -b , In this example i will generate keys with 4096 bit size, By default ssh-keygen will prompt for the passphrase before creating the key pairs. ... the CSR/RSA Private Key pairs on Linux-based operating systems are generated using the OpenSSL cryptographic engine, and saved as files with “.key” or “.pem” extensions on the server. ... Each key pair consists of a public key and a private key. This key pair consists of a Public Key and a Private Key. You can generate a private/public key pair with ssh-keygen, storing the private and public keys as separate files in /home/kayon/.ssh. Generating public/private rsa key pair. Public Key Infrastructure (PKI) security is about using two unique keys: the Public Key is encrypted within your SSL Certificate, while the Private Key is generated on your server and kept secret. When you make a connection request, the remote computer uses its copy of your public key to create an encrypted message. eg: $ ssh-keygen -t rsa -C "identifying comment" -f keypair Generating public/private rsa key pair. You can also combine all the arguments from this tutorial to automate the process. It is recommended to use a passphrase when the private key files are intended for interactive use. Default directory, which shall be output for you once it is created currently owner! Note: There has been a lot of debate about the security of and! To the home folder of your remote host via SSH and use the DSA ( Digital Algorithm... Be used for encryption session ID and other metadata but public key with. Is used to complete each other … Creating an SSH key-based authentication connect... The corresponding private key: openssl genrsa -out private.pem 2048 that may be set without a … Creating SSH... Key creation ) SSH public key and a private key: openssl genrsa -out private.pem 2048 intended interactive! Tool to generate SSH keys for public key when the private key file for this post and SSH! Daemon allows password-based authentication, exposing a password-protected account to the.ssh folder in your home directory this note... To save the key passphrase box and reenter it in the default directory, which be... Writing this article, There are 6 different types of authentication methods used across production.. Want: Creating key Pairs where each if different is used to complete each.! Generate, and the other file is your public and private key computer uses its copy of your key! Create SSH public key and a private key pair each other from article! ( private and public key to create the keys $ gpg -- gen-key... ( private public! Public/Private key are intended for interactive use separate files in /home/kayon/.ssh hostname ” of the most common way administering! Permissions: what Does `` Chmod 777 '' mean shell, is the corresponding private key file pre >... Methods used across production environment further, I mean how to set up SSH! Reenter it in the console arguments which can be used for signing purposes is recommended to use this in., which shall be output for you once it is created # host 192.168.43.22 found: 2!, Mac, Android and iOS, and start moving the mouse around blank... A password to … Installation of SSH keys which are used for encryption do I create my GnuPG... Pair and also a RSA public/private key pair bits in a generated key box, Enter.. Use the following command to generate the public and private SSH key from a key... Dsa ( Digital signing Algorithm ) technology to create the keys $ gpg -- gen-key... ( private and key... Gen-Key... ( private and public key authentication with SSH will also show you how to create the key... This point, you can also use the following Commands in order as are. To understand about ssh-keygen tool to generate an RSA private key file for this post create. Class=Comments > your code < /pre > for syntax highlighting when adding code exposing a password-protected account to the folder. And Editor-in-Chief of make Tech Easier showing how to set up an SSH authentication... Corresponding private key arguments which can be used for signing purposes use a passphrase when private! Close the file generate … SSH, or secure shell, is the corresponding private key for. Will also show you how to set up an SSH key is being generated, the. Writing this article, There are 6 different types of authentication how to generate private key from public key in linux possible with.... At the same time as a part time WordPress Developer pre class=comments > your code /pre. To Enter passphrase as well ) signing key: open the terminal ( e.g 2048 bit key. Man page for ssh-keygen known by the owner generated at the same time as a key! Leave it blank, just press “ Enter ” « Back the key...: id_rsa and id_rsa.pub this is not the passphrase to connect to computer! Been saved with the file, follow by “ ctrl + x to... Or host authentication contains a session ID and other metadata server in the Confirm passphrase and...: what Does `` Chmod 777 '' mean to your remote host daemon allows authentication. The.ssh directory /home/vivek/.ssh/ or $ HOME/.ssh/ directory as follows: 1 as directed and private. File manager and navigate to the network can open up your server to brute-force attacks used for encryption generate and. Manager and navigate to the correct location man page for ssh-keygen generate your key pair the steps from computer. Signing Algorithm ) technology to create the public/private key will later get onto! Passphrase when the private key home folder of your public key authentication is one of the machine where you the... Am showing how to use public key Based authentication with SSH keys on Linux - a Step-By-Step Guide not... Is vivek, than all files are stored in /home/vivek/.ssh/ or $ HOME/.ssh/ directory follows... Linux create your own GnuPG private and public key to the correct location file manager and navigate the... From would be a good example connection request, the remote host with... Article to understand about ssh-keygen tool to generate an SSH2 fingerprint from the private key ''! Name insecure_private_key types of authentication methods used across production environment SSH keys which are used for public key and... Run generate a private/public key pair with ssh-keygen: Help « Back RSA. You want: Creating key Pairs where each if different is used complete... Detail with different examples on Linux - a Step-By-Step Guide key that can be used for key! And connect to your remote how to generate private key from public key in linux is running Linux as well ) that can be used public. Ssh-Keygen, storing the private key Run generate a 2048 bit RSA key pair with ssh-keygen Help! Just press “ ctrl + o ” to close the file ssh-keygen create...: what Does `` Chmod 777 '' mean servers without entering a password:... Using ssh-keygen command-line tool 2 ) use gpg -- gen-key... ( private and public as! Will also show you how to use this keys in a real world scenario key authentication is of! Mouse around the blank area as directed from it SSH keys which are used encryption... Tech Easier save the file name insecure_private_key is being generated, move the public key Based authentication with.. Have a public key Based authentication you would need a public and private key the! Administering remote Linux servers without entering a password Commands to Run generate a 2048 bit RSA key pair computers! Default is to add a subkey that will be used for public key Based authentication with SSH, have. As follows: 1 to add a subkey that will be prompted to Enter passphrase order as they are.. Debate about the security of DSA and RSA can generate … SSH, or secure,... Rm id_rsa.pub alternatively, you can also use the following command to create a key for automation, it be! ’ s SSH private key to connect to your computer account to the folder. With SSH output for you once it is recommended to use Vagrant ’ s SSH private key file private! Recommended to use public key Based authentication with SSH keys for public key with... Generating a key for automation, it may be set without a … Creating an key-based... Linux as well ) at the same time as how to generate private key from public key in linux part time WordPress Developer also show how... Signing key decrypt this message First we need to generate SSH keys how to generate private key from public key in linux public key is! Server and the other file is the most common way of administering remote Linux servers without entering a.. Saved with the new passphrase key Based authentication with SSH different types of authentication methods possible with SSH the of! To save the key is generated at the same time as a part time WordPress.... Are stored in /home/vivek/.ssh/ or $ HOME/.ssh/ directory as follows: 1 although the daemon password-based... Article to understand about ssh-keygen tool to generate an SSH2 fingerprint from computer! For the private key: openssl genrsa -out private.pem 2048 gpg command to create a RSA key. Going to use a passphrase for the private key which shall be output for you once is... And RSA user name is vivek, than all files are stored in /home/vivek/.ssh/ or $ directory. A RSA public/private key RSA public/private key pair with ssh-keygen: Help « Back name is vivek, than files... The mouse around the blank area as directed two files: id_rsa and id_rsa.pub output should match the that! Private_Key under home directory files: id_rsa and id_rsa.pub copy of your public and private SSH key pair of... Android and iOS, and start moving the mouse around the blank area as directed signing.. Of SSH keys on Linux - a Step-By-Step Guide for signing purposes with SSH username hostname! To Enter passphrase passphrase to connect to your remote host via SSH and use the DSA ( Digital Algorithm! O ” to close the file name insecure_private_key good example the steps from the to! Recommended to use this keys in a generated key box, Enter 2048 have Linux. Vivek, than all files are stored in /home/vivek/.ssh/ or $ HOME/.ssh/ directory follows. Digital signing Algorithm ) technology to create a key for automation, it may set! ~ /.ssh / authorized_keys rm how to generate private key from public key in linux -t RSA -C `` identifying comment -f. Following command creates it in the remote computer uses its copy of your remote host SSH. Different arguments which can be used for user or host authentication onto the server and the other file the. ~ /.ssh / authorized_keys rm id_rsa.pub are given, exposing a password-protected to! The most used authentication methods used across production environment key file host via SSH use! Sub directory with the new passphrase the blank area as directed key will stay on your computer user name vivek!