---
title: User Group Key Management
slug: kronpam-reference-guide-3-8-0/user-group-key-management
description: Learn how to manage SSH Key and SSH Password authorizations within user groups. Enable or disable SSH Key Authentication and Password Authentication, force the use of both simultaneously, and set a maximum SSH Key usage time. Get detailed information on a
docTags: 
createdAt: 2022-08-03T10:28:24.000Z
---

In this tab, users can manage SSH Key and SSH Password authorizations based on user groups. Users can disable/enable **SSH Key Authentication**, **and SSH Password Authentication**, force **SSH Key +Password Auth** to be used together, and set **SSH Key TTL**. 

**SSH Key Time-to-live (TTL) Day**: Defines the maximum time allowed to use the SSH key. If this value is set to **-1** or **0**, the SSH Key will never expire. TTL value can be set between -1 and 10000.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2xnxyb3Jj1hE64iPeiiLw_image.png "User Group Key Management ")

:::hint{type="info"}
If the **SSH Key + Pass Auth**. method is set as **Force**, users can only connect to the SSH proxy using both SSH key and Password. If the method is set as the default value **Don’t Force**, users can connect to the SSH Proxy according to the value of the  **SSH Key Auth**.  and **Password Auth**. options. If only one of these two methods is set as **enabled**, users can connect to the SSH proxy with whichever method is enabled. If both of these methods are set as **enabled**, users can connect to the SSH proxy with the method of their preference.
:::