Quick answer
An SSH key pair contains a public key that you authorize on the hosting account and a private key that stays on your computer. Never paste a private key into a chatbot, support ticket or website file.
Create a key on your computer
If you use OpenSSH, this command creates a widely compatible RSA key pair:
ssh-keygen -t rsa -b 4096
When prompted, choose a unique filename in your private SSH folder and set a strong passphrase. Do not overwrite an existing key. The matching public-key file ends in .pub; the file without that extension is private.
Authorize the public key
- Sign in to your hosting account's cPanel.
- Open Security > SSH Access > Manage SSH Keys.
- Choose Import Key and paste the contents of your
.pubfile into the public-key field. Leave the private-key field empty when the private key was generated on your computer. - Import the key, then choose Manage > Authorize for that public key.
- Connect using the correct account, server, SSH port and local private-key file.
Importing a key and authorizing it are separate steps. The account must also have SSH/SFTP access. If AI Hosting Starter's limited dashboard does not show these controls, contact support with the public key and your service details, never the private key.
Keep control of access
Use a separate key for a device or person when practical. Revoke a public key when that access is no longer needed. If a private key is lost or exposed, stop using it, remove its authorization and create a replacement. Removing a key does not undo changes already made using it.
Related help
- Import and authorize a public SSH key in cPanel
- Create a local SSH alias for a website coding assistant
- Verify the SSH server fingerprint before connecting an AI tool
Related documentation
Updated October 30, 2026.