Revoking and Blocking Keys

Instantly revoke SSH access by blocking keys or deleting assignments.

Revoking and Blocking Keys

Soft Revocation

Delete an assignment to remove a key from specific hosts. The key itself remains available for future assignments.

Hard Block

Block a key to immediately prevent it from being deployed anywhere:

  1. Navigate to Keys and find the key
  2. Click Block Key
  3. Choose a block duration or block indefinitely

Blocked keys are removed from all authorized_keys files on the next sync cycle.

Emergency: Break-Glass

For security incidents, use Break-Glass to freeze all SSH access across the team instantly. See the Security section for details.