{"id":3074,"date":"2026-10-24T12:30:00","date_gmt":"2026-10-24T09:30:00","guid":{"rendered":"https:\/\/narhost.com\/blog\/?p=3074"},"modified":"2026-10-15T11:47:32","modified_gmt":"2026-10-15T08:47:32","slug":"ssh-key-mi-sifre-mi","status":"publish","type":"post","link":"https:\/\/narhost.com\/blog\/ssh-key-mi-sifre-mi\/","title":{"rendered":"SSH Anahtar\u0131 m\u0131 Parola m\u0131, VPS&#8217;e G\u00fcvenli Giri\u015f Karar\u0131"},"content":{"rendered":"<div id=\"ai-ozet\" class=\"ai-box\">\n<p class=\"ai-box-title\">K\u0131saca \u00f6zet<\/p>\n<ul>\n<li>SSH key mi \u015fifre mi sorusunun k\u0131sa cevab\u0131: internete a\u00e7\u0131k bir VPS&#8217;te anahtarla giri\u015f kullan\u0131lmal\u0131, parolayla giri\u015f kapat\u0131lmal\u0131d\u0131r; anahtar tahmin edilemez, parola edilebilir.<\/li>\n<li>Parolayla giri\u015f a\u00e7\u0131k her sunucuya, en \u00e7ok root kullan\u0131c\u0131s\u0131 denenerek s\u00fcrekli otomatik tahmin denemesi yap\u0131l\u0131r; g\u00fc\u00e7l\u00fc parola riski azalt\u0131r ama ortadan kald\u0131rmaz.<\/li>\n<li>Anahtarla giri\u015fte gizli anahtar bilgisayar\u0131n\u0131zdan \u00e7\u0131kmaz; sunucuda yaln\u0131z a\u00e7\u0131k anahtar durur ve sunucu ele ge\u00e7se bile ba\u015fka sunucuya giri\u015f sa\u011flamaz.<\/li>\n<li>Yeni bir anahtar i\u00e7in Ed25519 t\u00fcr\u00fc yeterlidir; OpenSSH 9.5&#8217;ten beri ssh-keygen varsay\u0131lan olarak bu t\u00fcr\u00fc \u00fcretir.<\/li>\n<li>Anahtar\u0131n kendi riski kaybolmas\u0131 ve \u00e7al\u0131nmas\u0131d\u0131r; gizli anahtara parola (passphrase) koymak ve yedeklemek bu riski y\u00f6netir.<\/li>\n<li>Ge\u00e7i\u015f s\u0131ras\u0131 \u00f6nemlidir: \u00f6nce anahtarla giri\u015f denenir, sonra parolayla giri\u015f ve root giri\u015fi kapat\u0131l\u0131r; taray\u0131c\u0131 konsolu yedek eri\u015fim olarak kal\u0131r.<\/li>\n<\/ul>\n<\/div>\n<p>Yeni ald\u0131\u011f\u0131n\u0131z VPS&#8217;in giri\u015f bilgileri e-postan\u0131za geldi: bir IP adresi, root kullan\u0131c\u0131 ad\u0131 ve bir parola. Birka\u00e7 saat sonra sunucunun kay\u0131tlar\u0131na bakt\u0131\u011f\u0131n\u0131zda, d\u00fcnyan\u0131n d\u00f6rt bir yan\u0131ndan y\u00fczlerce ba\u015far\u0131s\u0131z giri\u015f denemesi g\u00f6r\u00fcrs\u00fcn\u00fcz. Sorulacak soru bu noktada netle\u015fir: anahtar m\u0131 parola m\u0131? Bu yaz\u0131 iki y\u00f6ntemin fark\u0131n\u0131, hangisinin neden se\u00e7ildi\u011fini ve ge\u00e7i\u015fin g\u00fcvenli s\u0131ras\u0131n\u0131 anlat\u0131yor.<\/p>\n<h2>SSH Key mi \u015eifre mi, Fark Nerede<\/h2>\n<p>Parolayla giri\u015fte sunucu, g\u00f6nderdi\u011finiz parolay\u0131 kendi kayd\u0131yla kar\u015f\u0131la\u015ft\u0131r\u0131r. Parolay\u0131 bilen herkes girer; bilmeyen de tahmin etmeyi deneyebilir. Anahtarla giri\u015fte ise iki par\u00e7a vard\u0131r: bilgisayar\u0131n\u0131zda duran gizli anahtar ve sunucuya koydu\u011funuz a\u00e7\u0131k anahtar. Sunucu, ba\u011flanan ki\u015fiden yaln\u0131z gizli anahtarla \u00fcretilebilecek bir imza ister. Gizli anahtar a\u011f \u00fczerinden hi\u00e7 g\u00f6nderilmez.<\/p>\n<table>\n<thead>\n<tr>\n<th>\u00d6l\u00e7\u00fct<\/th>\n<th>Parolayla giri\u015f<\/th>\n<th>Anahtarla giri\u015f<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Tahmin sald\u0131r\u0131s\u0131<\/td>\n<td>A\u00e7\u0131k; zay\u0131f parola dakikalar i\u00e7inde k\u0131r\u0131labilir<\/td>\n<td>Pratikte imk\u00e2ns\u0131z<\/td>\n<\/tr>\n<tr>\n<td>A\u011fda ne gider<\/td>\n<td>Parola (\u015fifreli kanalda)<\/td>\n<td>Yaln\u0131z imza; gizli anahtar gitmez<\/td>\n<\/tr>\n<tr>\n<td>Sunucu ele ge\u00e7erse<\/td>\n<td>Ayn\u0131 parola ba\u015fka yerde kullan\u0131l\u0131yorsa risk yay\u0131l\u0131r<\/td>\n<td>Sunucuda yaln\u0131z a\u00e7\u0131k anahtar vard\u0131r<\/td>\n<\/tr>\n<tr>\n<td>Birden fazla ki\u015fi<\/td>\n<td>Ortak parola payla\u015f\u0131l\u0131r<\/td>\n<td>Her ki\u015finin kendi anahtar\u0131; tek tek kald\u0131r\u0131labilir<\/td>\n<\/tr>\n<tr>\n<td>Kaybolma riski<\/td>\n<td>Unutulabilir, s\u0131f\u0131rlanabilir<\/td>\n<td>Gizli anahtar kaybolursa yedek eri\u015fim gerekir<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"highlight-box\">\n<p class=\"label\">Bilgi<\/p>\n<p>Tahmin denemelerinin mant\u0131\u011f\u0131 <a href=\"https:\/\/narhost.com\/blog\/brute-force-nedir\/\" title=\"Brute Force Nedir \u2014 Narhost Blog\">brute force nedir<\/a> yaz\u0131s\u0131nda, g\u00fc\u00e7l\u00fc parolan\u0131n neden yine de \u00f6nemli oldu\u011fu <a href=\"https:\/\/narhost.com\/blog\/guclu-sifre-neden-onemli\/\" title=\"G\u00fc\u00e7l\u00fc \u015eifre Neden \u00d6nemli \u2014 Narhost Blog\">g\u00fc\u00e7l\u00fc \u015fifre neden \u00f6nemli<\/a> yaz\u0131s\u0131nda anlat\u0131ld\u0131.<\/p>\n<\/div>\n<figure class=\"nh-sema\"><img loading=\"lazy\" src=\"https:\/\/narhost.com\/blog\/wp-content\/uploads\/2026\/10\/ssh-key-mi-sifre-mi-sema-narhost.webp\" alt=\"ssh key mi \u015fifre mi ge\u00e7i\u015f \u015femas\u0131 \u2014 anahtar \u00fcretme, sunucuya ekleme, deneme ve parolay\u0131 kapatma\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Anahtarla giri\u015f do\u011frulanmadan parolayla giri\u015f kapat\u0131lmaz.<\/figcaption><\/figure>\n<h2>Parolayla Giri\u015f Neden Yetersiz Kal\u0131r<\/h2>\n<p>\u0130nternete a\u00e7\u0131k 22 numaral\u0131 porta otomatik ara\u00e7lar s\u00fcrekli ba\u011flan\u0131r ve s\u00f6zl\u00fck listelerinden parola dener. En \u00e7ok denenen kullan\u0131c\u0131 ad\u0131 <code>root<\/code>&#8216;tur, \u00e7\u00fcnk\u00fc her Linux sunucusunda vard\u0131r. Uzun ve rastgele bir parola bu denemeleri fiilen sonu\u00e7suz b\u0131rak\u0131r; ama parolan\u0131n bir yerde s\u0131zmas\u0131, ba\u015fka bir hizmette tekrar kullan\u0131lmas\u0131 ya da ekipten ayr\u0131lan birinin bilmesi yeterlidir.<\/p>\n<p>Denemeleri azaltan \u00f6nlemler vard\u0131r: SSH portunu de\u011fi\u015ftirmek, belirli say\u0131da hatal\u0131 denemeden sonra IP adresini engelleyen ara\u00e7lar kurmak, g\u00fcvenlik duvar\u0131nda yaln\u0131z bilinen IP&#8217;lere izin vermek. Bunlar g\u00fcr\u00fclt\u00fcy\u00fc azalt\u0131r; as\u0131l \u00e7\u00f6z\u00fcm parolayla giri\u015fi tamamen kapatmakt\u0131r. Port de\u011fi\u015fikli\u011finin ad\u0131mlar\u0131 <a href=\"https:\/\/narhost.com\/destek\/ssh-portu-nasil-degistirilir\/\" title=\"SSH Portu Nas\u0131l De\u011fi\u015ftirilir \u2014 Narhost Destek Merkezi\">SSH portu nas\u0131l de\u011fi\u015ftirilir<\/a> kart\u0131nda.<\/p>\n<h2>Anahtarla Giri\u015f Nas\u0131l Kurulur<\/h2>\n<p>Anahtar \u00e7ifti bilgisayar\u0131n\u0131zda \u00fcretilir. Linux, macOS ve Windows 10 ile 11&#8217;deki OpenSSH istemcisinde komut ayn\u0131d\u0131r:<\/p>\n<pre><code class=\"language-bash\">ssh-keygen -t ed25519 -C \"ad.soyad@ornek.com\"<\/code><\/pre>\n<p>OpenSSH&#8217;nin <a href=\"https:\/\/www.openssh.com\/txt\/release-9.5\" title=\"OpenSSH 9.5 s\u00fcr\u00fcm notlar\u0131 \u2014 ssh-keygen varsay\u0131lan Ed25519\" target=\"_blank\" rel=\"noopener\">9.5 s\u00fcr\u00fcm notuna<\/a> g\u00f6re ssh-keygen art\u0131k varsay\u0131lan olarak Ed25519 anahtar\u0131 \u00fcretir; eski istemcilerde t\u00fcr\u00fc <code>-t ed25519<\/code> ile belirtmek yeterlidir. Komut gizli anahtar i\u00e7in bir parola (passphrase) sorar; bo\u015f b\u0131rakmay\u0131n. A\u00e7\u0131k anahtar\u0131 sunucuya eklemenin yollar\u0131 <a href=\"https:\/\/narhost.com\/destek\/ssh-anahtari-nasil-eklenir\/\" title=\"SSH Anahtar\u0131 Nas\u0131l Eklenir \u2014 Narhost Destek Merkezi\">SSH anahtar\u0131 nas\u0131l eklenir<\/a> kart\u0131nda.<\/p>\n<div class=\"senaryo-block\">\n<p class=\"label\">\u00d6rnek senaryo<\/p>\n<p>\u00dc\u00e7 ki\u015filik bir yaz\u0131l\u0131m ekibi m\u00fc\u015fterilerinin uygulamas\u0131n\u0131 bir VDS&#8217;te \u00e7al\u0131\u015ft\u0131r\u0131yor ve sunucuya ortak root parolas\u0131yla giriyordu. Ekipten biri ayr\u0131ld\u0131\u011f\u0131nda parolan\u0131n de\u011fi\u015ftirilmesi unutuldu. Bir g\u00fcvenlik denetiminde ayn\u0131 parolan\u0131n eski bir projede de kullan\u0131ld\u0131\u011f\u0131 ortaya \u00e7\u0131kt\u0131. Ekip her \u00fcyeye ayr\u0131 kullan\u0131c\u0131 ve ayr\u0131 Ed25519 anahtar\u0131 tan\u0131mlad\u0131, parolayla giri\u015fi ve root giri\u015fini kapatt\u0131. Art\u0131k ekipten ayr\u0131lan birinin eri\u015fimi, sunucudaki tek bir sat\u0131r\u0131n silinmesiyle kapan\u0131yor.<\/p>\n<\/div>\n<h2>Ge\u00e7i\u015fin G\u00fcvenli S\u0131ras\u0131<\/h2>\n<p>Sunucuya eri\u015fimi kaybetmemek i\u00e7in s\u0131ra \u015f\u00f6yledir: \u00f6nce anahtar \u00fcretilir ve sunucuya eklenir; ikinci bir terminalde anahtarla giri\u015f denenir; sudo yetkili ayr\u0131 bir kullan\u0131c\u0131 olu\u015fturulur; en son sunucu ayarlar\u0131nda parolayla giri\u015f (<code>PasswordAuthentication no<\/code>) ve root giri\u015fi kapat\u0131l\u0131r. Ayarlar\u0131n anlam\u0131 Ubuntu&#8217;nun <a href=\"https:\/\/manpages.ubuntu.com\/manpages\/noble\/man5\/sshd_config.5.html\" title=\"Ubuntu k\u0131lavuz sayfas\u0131 \u2014 sshd_config\" target=\"_blank\" rel=\"noopener\">sshd_config k\u0131lavuz sayfas\u0131nda<\/a>; ba\u011flant\u0131n\u0131n temelleri <a href=\"https:\/\/narhost.com\/destek\/sunucuya-ssh-ile-nasil-baglanilir\/\" title=\"Sunucuya SSH ile Nas\u0131l Ba\u011flan\u0131l\u0131r \u2014 Narhost Destek Merkezi\">sunucuya SSH ile nas\u0131l ba\u011flan\u0131l\u0131r<\/a> kart\u0131nda anlat\u0131l\u0131yor.<\/p>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Parolayla giri\u015fi kapatmadan \u00f6nce anahtarla giri\u015fin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 mutlaka ikinci bir oturumda do\u011frulay\u0131n. Gizli anahtar\u0131n\u0131z\u0131 kaybederseniz sunucuya SSH ile giremezsiniz; yeni anahtar eklemek i\u00e7in sunucunun konsol eri\u015fimine ihtiya\u00e7 duyars\u0131n\u0131z. Konsola nas\u0131l ula\u015faca\u011f\u0131n\u0131z\u0131 ge\u00e7i\u015ften \u00f6nce \u00f6\u011frenin, ula\u015fam\u0131yorsan\u0131z destek talebi a\u00e7\u0131n. Gizli anahtar\u0131 parolal\u0131 bir yedekte saklay\u0131n.<\/p>\n<\/div>\n<h2>Anahtar\u0131n Kendi Riskleri<\/h2>\n<p>Anahtar parolay\u0131 ortadan kald\u0131rmaz, riski bilgisayar\u0131n\u0131za ta\u015f\u0131r. Gizli anahtar dosyas\u0131 \u00e7al\u0131n\u0131rsa ve parolas\u0131 yoksa, onu ele ge\u00e7iren sunucuya girebilir. Bu y\u00fczden gizli anahtar parolal\u0131 olmal\u0131, yaln\u0131z g\u00fcvendi\u011finiz cihazlarda durmal\u0131 ve bir cihaz kayboldu\u011funda o cihaz\u0131n a\u00e7\u0131k anahtar\u0131 sunucudaki <code>authorized_keys<\/code> dosyas\u0131ndan silinmelidir. Her ki\u015fi ve her cihaz i\u00e7in ayr\u0131 anahtar kullanmak, tek bir anahtar\u0131 iptal etmeyi kolayla\u015ft\u0131r\u0131r.<\/p>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>SSH key mi \u015fifre mi sorusunda internete a\u00e7\u0131k sunucu i\u00e7in cevap anahtard\u0131r. Ed25519 anahtar \u00fcretin, gizli anahtara parola koyun, anahtarla giri\u015fi do\u011frulay\u0131n ve ard\u0131ndan parolayla giri\u015fi ve root giri\u015fini kapat\u0131n. Konsol eri\u015fimi, bir \u015feyler ters gitti\u011finde yedek kap\u0131n\u0131z olarak kals\u0131n.<\/p>\n<\/div>\n<h2>Kontrol Listesi<\/h2>\n<ul class=\"kontrol-listesi\">\n<li>Her ki\u015fi ve cihaz i\u00e7in ayr\u0131 Ed25519 anahtar\u0131 \u00fcretin.<\/li>\n<li>Gizli anahtarlara parola koyun ve parolal\u0131 bir yedekte saklay\u0131n.<\/li>\n<li>Anahtarla giri\u015fi ikinci bir oturumda do\u011frulay\u0131n.<\/li>\n<li>Sudo yetkili ayr\u0131 bir kullan\u0131c\u0131 olu\u015fturun.<\/li>\n<li>Parolayla giri\u015fi ve root giri\u015fini kapat\u0131n.<\/li>\n<li>Ekipten ayr\u0131lan ki\u015finin anahtar\u0131n\u0131 authorized_keys dosyas\u0131ndan silin.<\/li>\n<li>Konsol eri\u015fiminin nereden a\u00e7\u0131ld\u0131\u011f\u0131n\u0131 bilin.<\/li>\n<\/ul>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>SSH key mi \u015fifre mi, payla\u015f\u0131ml\u0131 hostingte de ge\u00e7erli mi?<\/h3>\n<p>Narhost payla\u015f\u0131ml\u0131 hosting paketlerinde SSH eri\u015fimi bulunmaz; dosya ve veritaban\u0131 i\u015fleri cPanel \u00fczerinden yap\u0131l\u0131r. Bu karar VPS, VDS ve fiziksel sunucular i\u00e7indir; oralarda k\u00f6k eri\u015fimi sizdedir ve giri\u015f g\u00fcvenli\u011fi de sizin sorumlulu\u011funuzdad\u0131r.<\/p>\n<h3>RSA anahtar\u0131m var, de\u011fi\u015ftirmem gerekir mi?<\/h3>\n<p>Yeterli uzunluktaki bir RSA anahtar\u0131 h\u00e2l\u00e2 g\u00fcvenlidir. Yeni anahtar \u00fcretecekseniz Ed25519 daha k\u0131sa ve h\u0131zl\u0131d\u0131r. Eski anahtar\u0131 hemen silmek zorunda de\u011filsiniz; yenisini ekleyip denedikten sonra eskisini kald\u0131rabilirsiniz.<\/p>\n<h3>Gizli anahtar\u0131m\u0131 kaybedersem ne olur?<\/h3>\n<p>Parolayla giri\u015f kapal\u0131ysa SSH ile giremezsiniz. Sunucunun konsol eri\u015fimiyle girip yeni bir a\u00e7\u0131k anahtar eklersiniz; konsola ula\u015fam\u0131yorsan\u0131z destek talebi a\u00e7\u0131n. Kaybolan anahtar\u0131n a\u00e7\u0131k k\u0131sm\u0131n\u0131 da sunucudan silmeyi unutmay\u0131n.<\/p>\n<h3>Anahtara parola koyarsam her giri\u015fte yazmam gerekir mi?<\/h3>\n<p>Gerekir, ama bilgisayar\u0131n\u0131zdaki SSH ajan\u0131 parolay\u0131 oturum boyunca hat\u0131rlayabilir. B\u00f6ylece g\u00fcvenlikten \u00f6d\u00fcn vermeden her ba\u011flant\u0131da yeniden yazmak zorunda kalmazs\u0131n\u0131z.<\/p>\n<h3>SSH portunu de\u011fi\u015ftirmek yeterli de\u011fil mi?<\/h3>\n<p>Port de\u011fi\u015fikli\u011fi otomatik taramalar\u0131n bir k\u0131sm\u0131n\u0131 azalt\u0131r ama parolay\u0131 tahmin edilemez yapmaz. Hedefli bir sald\u0131rgan yeni portu kolayca bulur. Port de\u011fi\u015fikli\u011fi ek bir \u00f6nlemdir; as\u0131l koruma anahtarla giri\u015ftir.<\/p>\n<\/div>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost&#8217;ta<\/p>\n<p>VPS sunucular\u0131m\u0131z an\u0131nda kurulur, k\u00f6k eri\u015fimi size aittir ve taray\u0131c\u0131 terminaliyle y\u00f6netilebilir.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/vps-sunucu\" title=\"Narhost VPS Sunucu paketleri\">VPS paketlerini incele<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>SSH key mi \u015fifre mi sorusunun k\u0131sa cevab\u0131: internete a\u00e7\u0131k bir VPS&#8217;te anahtarla giri\u015f kullan\u0131lmal\u0131, parolayla giri\u015f kapat\u0131lmal\u0131d\u0131r. Ed25519 anahtar \u00fcretimi, parolal\u0131 gizli anahtar, g\u00fcvenli ge\u00e7i\u015f s\u0131ras\u0131 ve anahtar kayb\u0131nda yap\u0131lacaklar.<\/p>\n","protected":false},"author":1,"featured_media":3075,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-3074","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/3074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/comments?post=3074"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/3074\/revisions"}],"predecessor-version":[{"id":3076,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/3074\/revisions\/3076"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media\/3075"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media?parent=3074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/categories?post=3074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/tags?post=3074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}