---
title: User Group Key Management
slug: singleconnect-reference-guide-3-2-0/user-group-key-management
description: Learn how to manage SSH Key and SSH Password authorizations based on user groups in this comprehensive document. Discover how to disable or enable SSH Key Authentication, SSH Password Authentication, or use them together. Set the SSH Key Time-to-live (TTL
docTags: 
createdAt: 2022-08-03T10:28:24.000Z
---

In this tab, users can manage SSH Key and SSH Password authorisations based on user groups. Users can disable/enable **SSH Key Authentication**, **SSH Password Authentication**, force **SSH Key +Password Auth** to be used together and set **SSH Key TTL**. 

**SSH Key Time-to-live (TTL) Day**: Defines the maximum time allowed to use the SSH key. If this value is set to "**-1**" and “**0**”, the SSH Key will never expire. TTL value can be set between -1 and 10000.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/f3ID_4-XIE3GB6o1BF9wC_image.png" size="74" width="980" height="374" caption="User Group Key Management" position="center" showCaption="true"}

:::hint{type="info"}
If the **SSH Key + Pass Auth**. method is set as **Force**, users can only connect to the SSH proxy using both SSH key and Password. If the method is set as the default value **Don’t Force**, users can connect to the SSH Proxy according to the value of the  **SSH Key Auth**.  and **Password Auth**. options. If
any of these two methods is set as **enable**, users can connect to the SSH proxy with whichever method is enabled. If both of these methods are set as **enable**, users can connect to the SSH proxy with the enabled method of their choice.
:::