Why Your SSH Key Setup Is Probably Wrong

Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering · May 22, 2026 · 8m · transcript

Episode 4 of Linux Server Admin looks at the single most common server authentication mistake: misconfigured SSH keys. Lucas and Luna walk through a real post-mortem from a fintech startup that left port 22 open with password authentication enabled for six months — not a breach, but a near-miss that triggered a full security audit. They break down SSH key anatomy, explain why 'ssh-keygen -t rsa -b 4096' is still fine but ed25519 is better, and show how a proper authorized_keys file with from= restrictions and command= rules could have prevented a supply chain attack. If you manage even one…