Bureaucrats, cc_docs_admin, cc_staff, rsnt_translations
2,837
edits
Securing your account: Difference between revisions
Jump to navigation
Jump to search
Marked this version for translation
(bit of harangue about treating private keys) |
(Marked this version for translation) |
||
| Line 17: | Line 17: | ||
SSH keys can be a good way to authenticate to your account without typing your password every time. However, to be secure, it is '''imperative that SSH keys use a strong passphrase''' that is treated like a password. | SSH keys can be a good way to authenticate to your account without typing your password every time. However, to be secure, it is '''imperative that SSH keys use a strong passphrase''' that is treated like a password. | ||
<!--T:7--> | |||
Treat the private key as a security token, even when encrypted with a passphrase. Avoid putting a private key on any shared machine. Placing an unencrypted private key on the clusters is a huge security hole. | Treat the private key as a security token, even when encrypted with a passphrase. Avoid putting a private key on any shared machine. Placing an unencrypted private key on the clusters is a huge security hole. | ||