---
title: User Group Key Management
slug: reference-guide-3-0-0/user-group-key-management
description: Learn how to manage SSH Key and SSH Password authorizations based on user groups. Enable or disable SSH Key and Password Authentication, and enforce the use of both authentication methods together. Set a customizable time-to-live (TTL) for SSH Keys, ensur
docTags: 
createdAt: 2022-08-03T10:28:24.000Z
---

In this tab, users can manage SSH Key and SSH Password authorizations based on user groups. Users can disable/enable **SSH Key Authentication**, **SSH Password Authentication**, force **SSH Key +Password Auth** to be used together and set **SSH Key TTL**. 

**SSH Key Time-to-live (TTL) Day**: Defines the maximum time allowed to use the SSH key. If this value is set to "**-1**" and “**0**”, the SSH Key will never expire. TTL value can be set between -1 and 10000.



::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/f3ID_4-XIE3GB6o1BF9wC_image.png" size="80" width="980" height="374" caption="User Group Key Management" position="center" showCaption="true"}

:::hint{type="info"}
If the **SSH Key + Pass Auth**. method is set as **Force**, users can only connect to the SSH proxy using both the SSH key and Password. If the method is set as the default value **Don’t Force**, users can connect to the SSH Proxy according to the value of the  **SSH Key Auth**.  and **Password Auth**. options. If any of these two methods is set as **enabled**, users can connect to the SSH proxy with whichever method is enabled. If both of these methods are set as **enabled**, users can connect to the SSH proxy with the enabled method of their choice.
:::