Key-based SSH logins rely on the idea of public-key cryptography.

In the process, your client computer generates two keys: a public key and a private key. The idea is that you can encrypt data with the public key, but only decrypt it with the private key. We’ll put the public key on the server and ask it to encrypt all outgoing communication with it. This makes sure that only those clients with the private key can decrypt and read the data.