# SSH Remote Access

## SSH Keys Explained

***

### **What Are SSH Keys?**

When a **Node Operator (Administrator)** builds a **VPS (Virtual Private Server)** in the cloud, they need a **secure method** to access and administer that instance. This is typically done by connecting to the VPS from a **local machine** (e.g., a laptop or desktop) over the Internet.

***

### **Why Do We Use SSH?**

Data traveling across the Internet is vulnerable to interception by malicious actors who may attempt to **steal**, **monitor**, or **manipulate** the connection. To defend against this, we use **encryption** to create a **secure tunnel** between the local and remote systems.

***

### **How SSH Keys Work**

SSH keys are a **pair of cryptographic keys**:

* A **public key**, which is shared with the remote server
* A **private key**, which is kept securely on your local machine

These keys are used to:

* **Authenticate your identity**
* **Establish an encrypted connection**
* **Securely transmit commands and data**

***

### Create SSH keys

{% content-ref url="/pages/StWxkojAivRRSCSubSn6" %}
[Create SSH Keys](/run-a-node/references/ssh-remote-access/create-ssh-keys.md)
{% endcontent-ref %}

***

### **Encryption in Action**

In the context of connecting to a cloud VPS:

* The **public key** (stored on the VPS) is used to **encrypt** the data
* The **private key** (on your local machine) is used to **decrypt** it

This ensures that **only your local machine**—with the private key—can access and interpret the data sent by the server.

***

> 🛡️ SSH key authentication is significantly **more secure** than using a password alone and is the **standard method** for managing Constellation Network nodes in cloud environments.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.constellationnetwork.io/run-a-node/references/ssh-remote-access.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.