<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="../assets/xml/rss.xsl" media="all"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Diego A. Carrasco Gubernatis | Personal Website (Posts about ssh-keys)</title><link>https://diegocarrasco.com/</link><description></description><atom:link href="https://diegocarrasco.com/categories/ssh-keys.xml" rel="self" type="application/rss+xml"></atom:link><language>en</language><copyright>Contents © 2026 &lt;a href="mailto:hi@diegocarrasco.com"&gt;Diego Carrasco G.&lt;/a&gt; </copyright><lastBuildDate>Sat, 11 Apr 2026 08:03:45 GMT</lastBuildDate><generator>Nikola (getnikola.com)</generator><docs>http://blogs.law.harvard.edu/tech/rss</docs><item><title>(Quick-note) SSH Keys Permissions</title><link>https://diegocarrasco.com/quick-note-ssh-keys-permissions/</link><dc:creator>Diego Carrasco G.</dc:creator><description>&lt;figure&gt;&lt;img src="https://diegocarrasco.com/images/social-images/quick-note-ssh-keys-permissions.jpg"&gt;&lt;/figure&gt; &lt;h2 id="context"&gt;Context&lt;/h2&gt;
&lt;p&gt;You want to add a SSH Key to your SSH Agent and you get an error &lt;code&gt;Permissions are too open.&lt;/code&gt;&lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;❯&lt;span class="w"&gt; &lt;/span&gt;ssh-add&lt;span class="w"&gt; &lt;/span&gt;~/.ssh/id_rsa&lt;span class="w"&gt;  &lt;/span&gt;
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@&lt;span class="w"&gt;  &lt;/span&gt;
@&lt;span class="w"&gt;         &lt;/span&gt;WARNING:&lt;span class="w"&gt; &lt;/span&gt;UNPROTECTED&lt;span class="w"&gt; &lt;/span&gt;PRIVATE&lt;span class="w"&gt; &lt;/span&gt;KEY&lt;span class="w"&gt; &lt;/span&gt;FILE!&lt;span class="w"&gt;          &lt;/span&gt;@&lt;span class="w"&gt;  &lt;/span&gt;
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@&lt;span class="w"&gt;  &lt;/span&gt;
Permissions&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;0644&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="k"&gt;for&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s1"&gt;'/home/daco/.ssh/id_rsa'&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;are&lt;span class="w"&gt; &lt;/span&gt;too&lt;span class="w"&gt; &lt;/span&gt;open.&lt;span class="w"&gt;  &lt;/span&gt;
It&lt;span class="w"&gt; &lt;/span&gt;is&lt;span class="w"&gt; &lt;/span&gt;required&lt;span class="w"&gt; &lt;/span&gt;that&lt;span class="w"&gt; &lt;/span&gt;your&lt;span class="w"&gt; &lt;/span&gt;private&lt;span class="w"&gt; &lt;/span&gt;key&lt;span class="w"&gt; &lt;/span&gt;files&lt;span class="w"&gt; &lt;/span&gt;are&lt;span class="w"&gt; &lt;/span&gt;NOT&lt;span class="w"&gt; &lt;/span&gt;accessible&lt;span class="w"&gt; &lt;/span&gt;by&lt;span class="w"&gt; &lt;/span&gt;others.&lt;span class="w"&gt;  &lt;/span&gt;
This&lt;span class="w"&gt; &lt;/span&gt;private&lt;span class="w"&gt; &lt;/span&gt;key&lt;span class="w"&gt; &lt;/span&gt;will&lt;span class="w"&gt; &lt;/span&gt;be&lt;span class="w"&gt; &lt;/span&gt;ignored.
&lt;/pre&gt;&lt;/div&gt;

&lt;h2 id="solution"&gt;Solution&lt;/h2&gt;
&lt;p&gt;If your keys need to be only readable by you:&lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;chmod&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;400&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;~/.ssh/id_rsa
&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;If your keys need to be read-writable by you:&lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;chmod&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;600&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;~/.ssh/id_rsa
&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;After that you can add your key&lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;ssh-add&lt;span class="w"&gt; &lt;/span&gt;~/.ssh/id_rsa
&lt;/pre&gt;&lt;/div&gt;

&lt;h3 id="could-not-open-connection-to-your-authentication-agent"&gt;Could not open connection to your authentication agent&lt;/h3&gt;
&lt;p&gt;If you get this error &lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;❯&lt;span class="w"&gt; &lt;/span&gt;ssh-add&lt;span class="w"&gt; &lt;/span&gt;~/.ssh/id_rsa&lt;span class="w"&gt;  &lt;/span&gt;
Could&lt;span class="w"&gt; &lt;/span&gt;not&lt;span class="w"&gt; &lt;/span&gt;open&lt;span class="w"&gt; &lt;/span&gt;a&lt;span class="w"&gt; &lt;/span&gt;connection&lt;span class="w"&gt; &lt;/span&gt;to&lt;span class="w"&gt; &lt;/span&gt;your&lt;span class="w"&gt; &lt;/span&gt;authentication&lt;span class="w"&gt; &lt;/span&gt;agent.
&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;just eval your agent&lt;/p&gt;
&lt;div class="code"&gt;&lt;pre class="code literal-block"&gt;&lt;span class="nb"&gt;eval&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="sb"&gt;`&lt;/span&gt;ssh-agent&lt;span class="sb"&gt;`&lt;/span&gt;
&lt;/pre&gt;&lt;/div&gt;

&lt;p&gt;and then proceed to add your keys.&lt;/p&gt;
&lt;h2 id="reference"&gt;Reference&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://stackoverflow.com/a/9270753"&gt;Answer in StackOverflow to ssh "permissions are too open"&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;</description><category>command-line</category><category>ssh</category><category>ssh-keys</category><category>technical</category><category>terminal</category><guid>https://diegocarrasco.com/quick-note-ssh-keys-permissions/</guid><pubDate>Thu, 23 Feb 2023 08:00:00 GMT</pubDate></item></channel></rss>