Skip to main content
An SSH account lets people open a shell on a Linux or Unix server without seeing the server’s password or key. They connect in a browser terminal or through the Infisical CLI, and Infisical records each session.

​
Prerequisites

  • The Admin role on the folder you’ll add the account to
  • A Gateway that can reach the server on its SSH port

​
Create an account

1
Go to Privileged Access Management > Accounts and select Add Account.
2
Select the Folder to add the account to and an SSH Account Template, such as the default ssh template, then select Next.
3
Enter a Name for the account and the server’s connection details:
4
Select an Auth Method, enter the Username to log in as, and fill in the fields for that authentication method.
5
Select Create.

​
Authentication methods

Use Certificate where you can. Infisical issues a short-lived certificate for each session, so the account stores no password or key that could leak.

​
Connect

People can open a terminal in the browser or connect through the CLI. To learn how to launch a session, see Connect to an account. The CLI opens a shell on the server:
To run one command instead of opening a shell, put the command after --:
To use your own SSH client, or to copy files with scp, sftp, or rsync, add --proxy. The CLI then starts a local proxy and prints the port to connect to.

​
Next steps

SSH certificate auth

Let people connect to SSH servers with short-lived certificates instead of stored credentials.