How to manage passphrase of an SSH key

Public and private key pair can be created and used for publickey authentication method in SSH. During the SSH key pair creation process you have the option to whether or not assign passphrase to the key.

How to generate SSH key pair using ssh-keygen

A key without passphrase would allow passwordless login to SSH servers whereas if passphrase is assigned, you'll need to key in the passphrase during the publickey login process.

How to configure passwordless SSH login

This can be changed after the fact as you can still add, edit or remove the passphrase on your existing SSH private key using ssh-keygen.

Methods to manage passphrase of an SSH key.

Add passphrase to an SSH key
Edit passphrase of an SSH key
Remove passphrase from an SSH key

Steps to add passphrase to an SSH key

Run ssh-keygen with -p option.
```
$ ssh-keygen -p 
```
Specify the location of your SSH private key.
```
Enter file in which the key is (/home/user/.ssh/id_rsa):
```
Default location is selected by default
Comment of the private key will be displayed.
```
Key has comment '[email protected]'
```

Enter a passphrase for the key twice.

Enter new passphrase (empty for no passphrase):
Enter same passphrase again:

Confirmation message will be displayed.

Your identification has been saved with the new passphrase.

Steps to edit passphrase of an SSH key

Run ssh-keygen with -p option .
```
$ ssh-keygen -p 
```
Specify the location of your SSH private key.
```
Enter file in which the key is (/home/user/.ssh/id_rsa):
```
Default location is selected by default
Enter existing passphrase for the private key.
```
Enter old passphrase:
```
Comment of the private key will be displayed.
```
Key has comment '[email protected]'
```

Enter a new passphrase for the key twice.

Enter new passphrase (empty for no passphrase):
Enter same passphrase again:

Confirmation message will be displayed.

Your identification has been saved with the new passphrase.

Steps to remove passphrase from an SSH key

Run ssh-keygen with -p option .
```
$ ssh-keygen -p 
```
Specify the location of your SSH private key.
```
Enter file in which the key is (/home/user/.ssh/id_rsa):
```
Default location is selected by default
Enter existing passphrase for the private key.
```
Enter old passphrase:
```
Comment of the private key will be displayed.
```
Key has comment '[email protected]'
```

Press [ENTER] twice without entering any passphrase.

Enter new passphrase (empty for no passphrase):
Enter same passphrase again:

Confirmation message will be displayed.

Your identification has been saved with the new passphrase.

Support us on Patreon for just $1 a month.

Discuss the article:

Comment anonymously. Login not required.