Skip to content

Comment on Improving the security of your SSH private key filesparent

Comments

> In other words, how much additional security does password-protecting your private key gain you?

Someone took your laptop, they could now have one of two things:

(a) - Just your laptop

(b) - your laptop and every server you're using your key for access to.

b is prevented by the passphrase.

No, I think more like one of three things:

a) just your laptop, b) your laptop and all files, or c) your laptop and all your files, and access to servers as per above.

I like "a" the best, and it's achieved through full-disk encryption. You don't even need a new passphrase for that, considering that you probably already password-protect your computer.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.