TopicLadder
Remote access

SSH Keys and Known Hosts for Makers

Learn how SSH identity, authorized keys, host keys, and file modes fit together before deleting warnings.

Topic goal to ladder route

Know the destination, then climb the route.

A topic is the maker goal. A ladder is the route from what you understand now to one visible proof you can build, sketch, test, or explain. This one ties back to Deploy a Static Site on a VPS.

Start point

Name what you already understand before the build gets bigger.

Topic goal

Debug SSH access without exposing private keys or blindly removing known_hosts entries.

Ladder route

Read the short lesson, watch one source tutorial, sketch the idea, check the math, then practice.

Project proof

Describe how you would tell apart a publickey failure from a changed host key warning.

Ladder steps

Each step should prove one idea before the project asks for the next one.

1
Separate identity from host trustYour key proves who you are; the host key proves which server answered. Identify whether the error is publickey or host key related.
2
Check local key filesPrivate keys need restrictive permissions. ls -l ~/.ssh shows file modes.
3
Check remote authorized_keysThe server must have the right public key for the right user. authorized_keys contains public keys, not private keys.
4
Verify host changes out of bandA changed host key can be normal or a security warning. Confirm fingerprint before editing known_hosts.

Examples to inspect

Use examples to read signals, not as blind recipes.

Inspect SSH auth flow

Project signal

ssh -vvv user@example.com

Expected signal: Debug lines naming keys attempted and server response

Caution: Do not paste full debug output publicly without reviewing it.

Find a host in known_hosts

Project signal

ssh-keygen -F example.com

Expected signal: Known host lines for that host

Check local SSH file modes

Project signal

ls -l ~/.ssh

Expected signal: Private keys should not be world-readable

Common traps

  • Posting private keys.
  • Deleting known_hosts blindly.
  • Debugging the wrong remote user.

Practice task

Describe how you would tell apart a publickey failure from a changed host key warning.

Next steps

  • Use LinuxOneLiners SSH publickey path.
  • Learn permissions.
  • Learn server log search.

Practice path

  • Near-Copy Rebuild: Recreate one example, decision path, or worked explanation from SSH Keys and Known Hosts for Makers. Keep most givens the same, then apply, explain, and check while naming each cue you used. Use the lesson's example block when it helps.
  • One-Change Transfer: Change exactly one condition, number, input, symptom, material, or constraint from the near-copy case. Then apply, explain, and check again and explain what changed.
  • Mixed Review Set: Interleave this topic with one prerequisite or adjacent idea. Write three short prompts: one recall, one application, and one comparison.
  • Find And Fix The Error: Invent a plausible wrong answer, unsafe step, invalid assumption, or bad classification. Mark the first point where it goes wrong, then correct it using the lesson's check.

Flashcard preview

What is the difference between your SSH key and a host key?

Your key authenticates you; the host key helps verify the server you reached.

What does the 'Separate identity from host trust' step prove?

Your key proves who you are; the host key proves which server answered. Check: Identify whether the error is publickey or host key related.

What does the 'Check local key files' step prove?

Private keys need restrictive permissions. Check: ls -l ~/.ssh shows file modes.

What does the 'Check remote authorized_keys' step prove?

The server must have the right public key for the right user. Check: authorized_keys contains public keys, not private keys.

What does the 'Verify host changes out of band' step prove?

A changed host key can be normal or a security warning. Check: Confirm fingerprint before editing known_hosts.

When would you use `ssh -vvv user@example.com`?

Use it to inspect ssh auth flow. Expected signal: Debug lines naming keys attempted and server response

Downloadable study pack

Export the same lesson as a plain Markdown note or Anki-compatible TSV. Commands and code blocks stay plain so they work in local notes.

Related paths

Study pack check passed. Notes, cards, examples, and practice tasks are meant to keep the lesson useful outside the page.

Connected routes

Use these links like a project map: what helps before this, what this unlocks, and where it fits.

What this unlocks

  • Use LinuxOneLiners SSH publickey path.
  • Learn permissions.
  • Learn server log search.

Text lesson and video notes

This page works as a text lesson first. If you later watch a matching tutorial, use the notes pattern here to capture the build decision, timestamps, warnings, and the next practical task instead of saving a raw link.

Attach a video note

Save useful workshop or tutorial videos into an Obsidian note with timestamps, source links, and what each segment proves. The site does not need the video to be useful.

Turn a video into notes and cards

Review and practice

Download the cards, then finish the practice task before adding more links to your project notebook.

Open practice tasks

Source video for this ladder

Use the video as source material for notes, cards, and practice. The written ladder still works without playback.

Use the source as a companion, not as a replacement for the written ladder.

Suggest a better source video

If another tutorial explains this topic more clearly, send the title and YouTube URL. Suggestions should help the ladder, not replace it.

Suggestions are reviewed before they appear.

Topic: SSH Keys and Known Hosts for Makers

Continue learning this topic

Use this page as part of a project path, not as a one-off article. Save the note, review the cards, try the practice task, then choose the next lesson based on what your project exposes.

Share this maker lesson

Send the context, not just a snippet.

Use the page so the lesson, source videos, notes, cards, and practice task stay attached.

Buy me a cup of coffee

TopicLadder is free to read. Coffee support helps turn rough maker ladders into clearer project paths, notes, cards, and practice labs.

Last reviewed: July 5, 2026. TopicLadder pages are curated for practical learning and may be updated as examples improve.