SSH Key Authentication

Using SSH keys to authenticate SFTP sessions instead of passwords provides enhanced security, convenience, and automation capabilities. SSH keys are significantly harder to compromise than passwords, making them a more secure option for protecting file transfers.

Why Use SSH Keys?

Many organizations rely on automated scripts to handle secure file transfers over SFTP. When scripts use password-based authentication, there's a risk of accidentally exposing credentials—whether in plain text, in shared files, or in version control systems.

By using SSH key authentication:

• You eliminate the need to store passwords in scripts

• You reduce the risk of credential leakage

• You streamline authentication for automated and scheduled file transfers

Supported Key Types

ExaVault supports the following SSH key formats:

• RSA

• ed25519

All public keys must be provided in OpenSSH format when uploading or configuring them in your user profile or automation system.

No Shell Access

SSH keys grant access to the SFTP service only. Even with a valid key, users will not be able to open an interactive shell or terminal session on the server. This helps maintain a secure and controlled environment focused solely on file transfer.