What is SSH?

SSH provides secure shell and SFTP access to a TurboStack host using public-key authentication, with keys settable per host or inherited from the group.

SSH (Secure Shell) is the standard protocol for secure, encrypted access to a server. On TurboStack it gives you a shell for running commands on a host and SSH File Transfer Protocol (SFTP) for transferring files, all over an encrypted connection.

Access is granted with public-key authentication: you upload your public key, keep the matching private key safe, and SSH verifies you without ever sending a password. This is both more convenient and far more secure than password logins.

On TurboStack

SSH access is configured at the host level, with optional inheritance from the group.

  • You authorize access by adding public keys to a host. Each authorized key can open a shell or SFTP session.

  • SSH keys can also be set at the group level and are inherited by member hosts, so you can grant a team access across many hosts in one place.

  • You can change the SSH listening port and choose whether to allow password authentication - which we recommend keeping disabled in favor of keys.

Best practices

  • Use key-based authentication and keep password authentication disabled.

  • Protect your private keys with a passphrase and never share them.

  • Grant access per person with their own key, so you can revoke individuals cleanly.

  • Manage shared team access at the group level and let hosts inherit it.

  • Remove keys promptly when someone no longer needs access.