---
title: User Group Key Management
slug: singleconnect-reference-guide-3-1-0/user-group-key-management
description: Learn how to effectively manage SSH Key and SSH Password authorizations based on user groups with this comprehensive document. Discover how to control settings such as enabling or disabling SSH Key Authentication and SSH Password Authentication, and how t
docTags: 
createdAt: 2022-08-03T10:28:24.000Z
---

In this tab, users can manage SSH Key and SSH Password authorisations based on user groups. Users can disable/enable **SSH Key Authentication**, **SSH Password Authentication**, force **SSH Key +Password Auth** to be used together and set **SSH Key TTL**. 

**SSH Key Time-to-live (TTL) Day**: Defines the maximum time allowed to use the SSH key. If this value is set to "**-1**" and “**0**”, the SSH Key will never expire. TTL value can be set between -1 and 10000.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/f3ID_4-XIE3GB6o1BF9wC_image.png" size="74" width="980" height="374" caption="User Group Key Management" position="center" showCaption="true"}

:::hint{type="info"}
If the **SSH Key + Pass Auth**. method is set as **Force**, users can only connect to the SSH proxy using both SSH key and Password. If the method is set as the default value **Don’t Force**, users can connect to the SSH Proxy according to the value of the  **SSH Key Auth**.  and **Password Auth**. options. If
any of these two methods is set as **enable**, users can connect to the SSH proxy with whichever method is enabled. If both of these methods are set as **enable**, users can connect to the SSH proxy with the enabled method of their choice.
:::