How can I make SSH with an identity file always demand a password?

hvjunk hvjunk at gmail.com
Sun Aug 22 07:29:49 AEST 2021


> On 21 Aug 2021, at 22:19 , matthewhtb at danwin1210.me wrote:
> 
> Hello,
> 
> I hope my question is apt for this list.
> 
> I am using OpenSSH_8.2p1 on Ubuntu 20.04.
> 
> I connect to a remote SSH server with the -i /path/to/file identity file
> option. My local machine asks me for a password for the identity file.
> This is because I created a password when using ssh-keygen.
> 
> However, after I exit from the SSH server, and log back in I am not asked
> for a password. Some kind of caching is happening.

It gets loaded into the ssh-agent for things ssh forwarding

> Is there a way to force the password to be asked on every occasion when
> using an identity file?

unload it from the ssh agent, or remove the ssh agent.

> I have searched but it looks as if everyone wants to avoid using
> passwords, not deliberately attempting to use them.

jumping twenty times an hour between 100 different instances behind jumphosts, you do tend to
focus on only protecting the ssh-agent/key when you aren’t at your desk or the laptop/etc. gets stolen, not while you need to
connect to lots of hosts to type in that 20+ character pass phrase.

I recall there are various settings in the GUI/desktop managers to unload the keys when the screen locker activates


More information about the openssh-unix-dev mailing list