ssh keys - should public keys be removed? confused...

[aww]

So ssh keys are noted as being more secure and password login should be disabled.

But if both the private and public keys are stored in cpanel (well, on the server and cpanel links to them) isn't that just as dangerous if a hacker could find a way to collect those files?

Should public keys be removed from the server or does it actually need them for the auth process?

 

[cPanelTristan]

Both keys are needed, since the public key is used to decrypt the private key.

 

[AunRaza]

Nothing is 100 % perfect, but public key has many advantages over normal password authentications. Only those with the private key will be able to connect..

 

[sparek-3]

The private key should be removed from the server. It is not needed on the server. The private key needs to remain private. It should only exist on your local computer or locally to you.

The public key will have to remain on the server (on the cPanel account) in order to connect to the account.

Just don't ever lose the private key. If you lose it, then the public key that was generated with the lost private key will be useless.