> For the complete documentation index, see [llms.txt](https://docs.exavault.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.exavault.com/connection-methods/sftp/ssh-key-authentication/creating-an-ssh-key-on-linux.md).

# Creating an SSH Key on Linux

Use the built-in `ssh-keygen` command to generate an RSA key pair on Linux.

Using a terminal, enter the command:

```bash
ssh-keygen -t rsa -b 4096 -C "your_email@example.com"
```

Replace `your_email@example.com` with an email address or another comment that identifies the key.

You'll see a prompt like:

```
Enter file in which to save the key (/home/yourname/.ssh/id_rsa):
```

Press Enter to accept the default, or enter a custom path. The path must be in a restricted directory that others do not have permission to access.

When prompted, either supply a passphrase or press Enter to create the key without one. The passphrase is separate from the ExaVault account password.

The process generates two files: a private key with no extension, and a public key with the extension `.pub`.

Upload the public key to ExaVault and configure the SFTP client with the private key. Never give the private key to anyone.