---
title: "Zone SSH access policy"
canonical_url: "https://www.zone.eu/support/kb/zone-ssh-access-policy/"
post_type: "ht_kb"
published: "2017-06-06T08:23:03+00:00"
modified: "2024-11-12T12:55:51+00:00"
language: "en"
author: "Gustav"
taxonomies:
  ht_kb_category:
    - name: "SSH / Shell"
      url: "https://www.zone.eu/support/kb-categories/ssh-shell/"
    - name: "Technical"
      url: "https://www.zone.eu/support/kb-categories/technical-en/"
  ht_kb_tag:
    - name: "sftp"
      url: "https://www.zone.eu/support/kb-tags/sftp/"
    - name: "SSH"
      url: "https://www.zone.eu/support/kb-tags/ssh/"
---

# Zone SSH access policy

You can get an overview of **SSH** via server management.

The **SSH access log** can be accessed via the “**`Logs`**” section.

[![](https://www.zone.eu/static/sites/5/ssh_ap-1.png)](https://www.zone.eu/support/ssh_ap-2/)

Zone is using **asymmetric encryption** (public key cryptosystem) instead of the usual password to authorize SSH users. You can find the “fingerprint” of the public key for each of the available algorithms in the SSH control panel.

The system performs authorization with a key pair, the public key is copied to the virtual server, and the private key remains with the user.
These algorithms are supported using the public key: **RSA, ECDSA, ED25519**.

Public keys must use the **OpenSSH**-compatible format (e.g. *ssh-ed25519 AAAA…).*

By default, SSH access is allowed from whitelsited IP-adresses but you can allow access for **everyone**. The list of allowed IP addresses can also contain blocks of IP addresses described in the **CIDR** format, which allows using an entire network (or several networks) instead of one IP-address.