Hi,
There's a long-standing request to implement a way for customers to
disable password authentication on their Xen Shell SSH accounts
(i.e. ssh username(a)username.console.bitfolk.com):
https://tools.bitfolk.com/redmine/issues/116
This has now been implemented¹, so if you go to:
https://panel.bitfolk.com/account/security/#toc-allow-xen-shell-ssh-access-…
you can set that if you wish. You will first need to have added at
least one SSH public key, as that is the only way you'll be able to
log in to the Xen Shell after that.
I don't anticipate many people using this or it changing frequently,
so I haven't bothered to implement immediate update of our SSH
config. Instead you might have to wait up to 30 minutes for the
sshd_config on the host machine to actually be updated.
The other already existing way to further secure your Xen Shell
login is to use 2 factor authentication, as described on the same
page. Enabling that will require you to supply a code from a TOTP
app such as Google Authenticator, 1Password, etc.
Cheers,
Andy
¹ 11 days short of 5 years since it was requested, woohoo!
--
https://bitfolk.com/ -- No-nonsense VPS hosting