SSH Keys
Register a public key once and Aquanode injects it into every VM you deploy after that. The console shows each key's fingerprint and exactly which running instances it opens.
Public keys only
Aquanode stores public keys and nothing else — it never accepts a private key, and there is no flow anywhere in the product that asks for one. Keys are held encrypted and used for one purpose: provisioning new VMs. ed25519 is the recommended type.
The most recently added key becomes the default for new VMs and is pre-selected in the deploy form, so the common case is one click. Every VM deployment needs a key attached before it launches.
Knowing which key opens which box
The keys page lists each key with its name, fingerprint, type, the date you added it, and the running instances it is currently attached to. That last column is the one that saves you: with a handful of keys accumulated over a few months, "which of these can still get into something" stops being a question you have to guess at.
Deleting a key removes it from your account so it is no longer offered for new deployments. It does not retroactively change VMs that are already running with it — if you need to lock an existing box out, replace the key on the box or close the deployment.
Keys belong to you, not to the team
Unlike deployments, volumes and the credit balance — which are scoped to the team — SSH keys are personal. Each member registers their own, and a key is only usable on deployments by the person who added it, so your key never travels with the workspace. If you want a teammate on a box without exchanging keys at all, the browser terminal gets them a root shell on a supported provider.
FAQ
Does Aquanode ever ask for my private SSH key?
No. Aquanode accepts public keys only, stores them encrypted, and uses them solely to provision new VMs. There is no flow in the product that asks for a private key.
Which key gets used when I deploy?
The most recently added key is the default for new VMs and comes pre-selected in the deploy form; you can pick any other registered key instead. Every VM deployment must have a key attached before launching.
What happens to running VMs if I delete a key?
Deleting a key removes it from your account and from future deployments, but it does not alter VMs already running with that key. Replace the key on the box or close the deployment if you need to revoke existing access.
Can I see which instances a key unlocks?
Yes. The SSH keys page shows each key's name, fingerprint, type, date added, and the running instances it is currently attached to.
