Meta tags:
description=Supported SSH key types and how to create secure SSH keys for BorgBase connections.;

Headings (most frequently used words):

ssh, step, keys, for, key, create, borgbase, introduction, supported, types, how, to, ensure, openssh, is, available, keypair, using, the, public, part, backups, references,

Text of the page (most frequently used words):
ssh (28), the (24), key (24), and (17), you (15), keys (10), will (8), can (8), this (8), rsa (7), command (7), openssh (7), secure (6), your (6), server (6), #borgbase (6), ed25519 (6), public (6), using (6), ecdsa (6), keygen (5), use (5), backup (5), for (5), than (5), borg (4), also (4), private (4), step (4), password (4), which (4), with (4), remote (4), keypair (3), machine (3), used (3), id_rsa (3), macos (3), get (3), recommended (3), installed (3), nist (3), curve (3), sha2 (3), transfer (3), files (3), docs (3), restore (3), best (2), shell (2), simply (2), any (2), when (2), repository (2), have (2), backups (2), sure (2), copy (2), manu (2), cat (2), pub (2), id_ed25519 (2), find (2), format (2), length (2), save (2), default (2), later (2), generate (2), faster (2), older (2), because (2), create (2), install (2), client (2), ubuntu (2), debian (2), distributions (2), output (2), already (2), like (2), most (2), run (2), following (2), 521 (2), 384 (2), 256 (2), longer (2), types (2), more (2), uses (2), connect (2), faq (2), restic (2), link (2), mozilla, infosec, guidelines, what, are, practices, references, during, repo, initialization, without, further, settings, adding, new, choose, good, practice, one, per, each, only, access, its, own, finally, assign, else, won, now, clipboard, add, under, account, com, aaaac3nzac1lzdi, lqrjw, 2bj, nyx, print, please, don, upload, chose, done, newly, generated, view, part, after, choosing, appropriate, ask, series, questions, regarding, place, location, generally, easily, optionally, store, keychain, 4096, 100, shorter, comparable, prefer, version, computers, encryption, needs, adjust, that, why, algorithm, has, changed, over, years, generation, setting, apt, above, gives, error, still, other, may, differ, generating, pair, enter, file, users, sample, see, cancel, proceed, ctrl, linux, comes, utilities, pre, time, make, works, ensure, available, how, recommend, they, provide, security, performance, characteristics, nistp521, nistp384, nistp256, 1024, bit, notes, identifier, type, supports, authentication, supported, need, consists, should, always, stay, local, added, services, authenticate, yourself, service, convenient, much, typical, borgbackup, securely, does, starting, another, end, makes, quicker, sftp, subset, directly, was, invented, replacement, forward, traffic, anything, remotely, related, websites, probably, heard, about, telnet, introduction, free, hosting, site, documentation, theme, jekyll, just, api, pricing, borgmatic, mount, browse, archives, verify, import, export, databases, truenas, synology, nas, ansible, containers, pika, vorta, line, setup, strategy, home, copied, search, document, external, expand, menu, skip, main, content,

Text of the page (random words):
ssh keys borgbase docs skip to main content link menu expand external link document search copy copied borgbase docs home strategy setup borg command line vorta pika backup containers ansible synology nas truenas databases restic import and export verify restore borg mount and browse archives restore with borg restore with borgmatic restic pricing api faq ssh keys this site uses just the docs a documentation theme for jekyll get 10 gb free backup hosting faq ssh keys ssh keys for borgbase introduction ssh or secure shell was invented as a more secure replacement for telnet it is used to connect to a remote server and run command transfer files or forward traffic if you do anything remotely related to server or websites you probably heard about it borgbackup also uses ssh to securely connect to a backup server and transfer files it does this by starting another server on the remote end which makes it quicker than using sftp a subset of ssh to transfer files directly to use ssh you need a keypair which consists of a public and a private key the private key should always stay on your local machine the public key can be added to remote services like borgbase so you can authenticate yourself to the remote service this is more convenient and secure than using a password because a key is much longer than a typical password supported ssh key types borgbase supports the following ssh key types for secure authentication key type identifier notes rsa ssh rsa longer than 1024 bit ecdsa p 256 ecdsa sha2 nistp256 nist p 256 curve ecdsa p 384 ecdsa sha2 nistp384 nist p 384 curve ecdsa p 521 ecdsa sha2 nistp521 nist p 521 curve ed25519 ssh ed25519 recommended we recommend using ed25519 keys as they provide the best security and performance characteristics how to create ssh keys step 1 ensure openssh is available openssh is the default ssh server and client used on most linux distributions and on macos it comes with utilities to generate keys it s already pre installed on macos on ubuntu or debian it will be installed most of the time run the following command to make sure it works ssh keygen if openssh is already installed you will see output like this cancel the command with ctrl c and proceed to step 2 ssh keygen sample output generating public private rsa key pair enter file in which to save the key users manu ssh id_rsa if the above command gives an error you can still install openssh using this command on ubuntu or debian on other distributions this may differ apt get install openssh client step 2 create keypair as computers get faster encryption needs to adjust that s why the recommended key algorithm and key length has changed over the years the recommended key generation setting 1 2 3 is ssh keygen t ed25519 this will generate an ed25519 key which is shorter and faster than a comparable rsa key if you prefer to use the older rsa format or because you have an older openssh version you can also use ssh keygen t rsa b 4096 o a 100 after choosing an appropriate key format and length the command will ask you a series of questions regarding place to save the key and password using the default location in ssh id_ed25519 or ssh id_rsa is generally ok and openssh will easily find keys later optionally you can also use a password and store it in macos keychain later step 3 using the public key part for backups when done you will find your newly generated key in ssh to view your public key cat ssh id_ed25519 pub or if you chose a rsa key cat ssh id_rsa pub this will print your public key please don t upload your private key ssh ed25519 aaaac3nzac1lzdi lqrjw dl e 2bj manu nyx you can now simply copy it to the clipboard and add it to borgbase com under account ssh keys finally be sure to also assign the key to a backup repository else it won t be used when adding a new backup repository you can choose any of your ssh keys it s good practice to have one keypair per server or machine so each machine can only access its own backups during repo initialization borg will simply use the key without any further settings references secure secure shell what are ssh keygen best practices mozilla infosec guidelines