How do we force passphrases in ssh keys?

[Nate Case]

Hello, 

Is there a way to force ssh keys to that have access to our Bitbucket cloud instance to use passphrases? 

Also is there a place that logs the use of our current SSH keys in bitbucket cloud? 

https://bitbucket.org/littlerapps

[Mark C]

Hi @Nate Case 

Please allow me to answer your questions:

Is there a way to force ssh keys to that have access to our Bitbucket cloud instance to use passphrases?

I'm afraid creating/generating SSH keys are based on the client-side and It's not possible to do that on the server-side at the moment.
For now, I've gone ahead and created a feature request for it that can be located through this link. - https://jira.atlassian.com/browse/BCLOUD-21182

As a workaround and added security, you can use the below Premium features for your workspace:

• Requiring two-step verification: Require that the users who can access your private content are only able to view or interact with that content if they've enabled two-step verification.
• Allowlisting IP addresses: Restrict access of your private content to users on certain IP addresses.

Reference: Control access to your private content

Also is there a place that logs the use of our current SSH keys in bitbucket cloud?

Currently, you can see the "Last used" date field for your SSH key under your workspace settings.

1. Go to your workspace
2. Click Settings
3. Click SSH keys

For better logging of SSH keys usage, I've also created a feature request for it here. - https://jira.atlassian.com/browse/BCLOUD-21183

You can upvote and watch those feature request tickets for now so that you'll be notified of any updates from our product team.
Please do note that we don't have an exact ETA on those new features as all new features will be implemented according to our policy here.

Please feel free to let me know if you have any questions.

Regards,
Mark C