How to Log SSH Key Usage for Shared Accounts
Tracking SSH activity on shared accounts can be challenging. By default, logs only show that a public key was accepted, not which key. With a simple tweak to your sshd configuration, you can log the fingerprint of each key used, making it easy to trace access back to individual users. In this article, we’ll show you how to enable verbose logging, locate the right log files, and map fingerprints to people—giving you a reliable audit trail of SSH access.