> For the complete documentation index, see [llms.txt](https://docs.bastionzero.com/openpubkey-ssh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bastionzero.com/openpubkey-ssh/openpubkey-ssh.md).

# OpenPubkey SSH

OpenPubkey SSH (OPK SSH) enables SSH access without the use of SSH keys by leveraging [OpenPubkey](https://github.com/openpubkey/openpubkey), an open source project created in partnership with [BastionZero](https://www.bastionzero.com/), [Docker](https://www.docker.com/), and the [Linux Foundation](https://www.linuxfoundation.org/). OPK SSH is free and available for use with remote servers and containers that run Linux. 

OpenPubkey introduces a protocol for binding OpenID Connect (OIDC) identities to public keys. OPK SSH builds on top of OpenPubkey's functionality by packaging the bound OIDC identity and public key (called a PK Token) into an SSH certificate. (For full details on how a PK Token is generated and to learn more about OpenPubkey, take a look at the [GitHub repository.](https://github.com/openpubkey/openpubkey))

This frees users from the headache of setting up SSH access to hosts, VMs, and containers that requires distributing SSH keys, remembering to revoke and rotate them, or worrying that credentials may inadvertently be exposed or lost.

OPK SSH also innovates on collaborating across individuals and organizations. Because access is tied to the OpenID Connect Provider (OP) and an associated OIDC identity and *not* a specific organization id, any individual who uses Gmail or G Suite can have access to a remote host. 

## To get started, follow our guides below:

<table data-view="cards" data-full-width="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>Step 1</strong></td><td>Installation &#x26; Deployment</td><td></td><td><a href="/pages/mG9JORZ15BBzX6nqppYi">/pages/mG9JORZ15BBzX6nqppYi</a></td></tr><tr><td><strong>Step 2</strong></td><td>Managing Personal &#x26;  </td><td>Collaborative Access</td><td><a href="/pages/kBXTP9w8dI4hmrivUx6l">/pages/kBXTP9w8dI4hmrivUx6l</a></td></tr><tr><td><strong>Step 3</strong></td><td>Accessing Your Remote</td><td>Host</td><td><a href="/pages/FGxfFsR083DZtXspe6WH">/pages/FGxfFsR083DZtXspe6WH</a></td></tr></tbody></table>

***

To learn more about OpenPubkey, check out the [GitHub repository](https://github.com/openpubkey), join us on [Slack](https://github.com/openpubkey/community?tab=readme-ov-file#join-our-community-on-slack), or drop in to a [community meeting](https://github.com/openpubkey/community?tab=readme-ov-file#community-meetings) to say "hi." :relaxed: