October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

How to Use PuTTY to Connect to a VPS Over SSH

A practical Windows guide to connecting to a VPS with PuTTY over SSH, including host-key verification, password login, PuTTYgen keys, Pageant, saved sessions, and troubleshooting.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To connect to a VPS with PuTTY, open putty.exe, enter the server’s public IPv4 address or hostname, select SSH, set the VPS’s SSH port, and click Open. On the first connection, verify the server’s host-key fingerprint through a trusted channel. Then authenticate with the VPS account password or with a private key in PuTTY’s .ppk format.

This guide covers the complete Windows workflow: the information to collect first, password and key-based logins, PuTTYgen, host-key warnings, reusable sessions, Pageant, and the failure messages most often seen when a VPS connection does not work.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you need before opening PuTTY

PuTTY is a free, MIT-licensed Windows Telnet and SSH client. The PuTTY project also provides PuTTYgen for key creation and conversion, Pageant for holding keys in memory, and command-line tools such as Plink, PSCP, and PSFTP.

A VPS is the remote computer. Collect these details from your VPS provider or server administrator:

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
  • Public address: the VPS’s public IPv4 address or a hostname that resolves to it.
  • Login username: for example, a distribution-provided account such as ubuntu, if that is the account your provider created.
  • SSH port: use the administrator’s configured port. Port 22 is the default only when SSH has not been moved to another port.
  • Authentication method: either the account password or a private key whose matching public key is installed on the VPS.

Do not guess the username or port. A reachable server can still reject a login when the account name, authentication policy, or port is wrong.

Install PuTTY and open a first session

  1. Install PuTTY from a distribution maintained by the PuTTY project, then start putty.exe.
  2. In the left-hand category list, select Session.
  3. In Host Name (or IP address), enter the VPS address. Some provider instructions show the username in the same field, such as [email protected]. If your setup does not accept that form, enter only the address and provide the username when PuTTY prompts for it.
  4. Enter the VPS’s SSH port in Port. Leave it at 22 only if the server administrator has not configured another port.
  5. Select SSH under Connection type.
  6. Click Open. PuTTY opens a terminal window and attempts the SSH handshake.

The first connection normally displays a security alert containing the server’s host-key fingerprint. This is expected for a new client, but it is not a prompt to accept blindly.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify PuTTY’s host-key warning

SSH uses a host key to identify the remote machine. PuTTY warns when it has never seen that key before, because accepting an unverified key could connect you to the wrong server.

  1. Obtain the expected fingerprint from your VPS provider or administrator through a trusted channel. Use the value for the exact VPS and key type you are connecting to.
  2. Compare every character of the fingerprint shown by PuTTY with that trusted value.
  3. Accept the key only when the values match.

PuTTY can continue with Connect Once, which does not cache the key; the warning will appear again on the next connection. A normal accept option stores the key for later checks. If a warning appears for a VPS whose key was already accepted, stop instead of accepting automatically: investigate a server rebuild, a changed SSH key, a DNS or address mistake, or a possible interception attempt with the administrator.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

How to connect with a VPS password

Password authentication is the shortest setup when the provider has issued an account password and the server permits password logins.

  1. Complete the Session settings described above and click Open.
  2. If PuTTY asks whether to cache the new host key, perform the fingerprint check before accepting it.
  3. At login as:, type the VPS account username and press Enter, unless you already supplied the username in the host field.
  4. At the password prompt, type the account password and press Enter.

PuTTY does not echo password characters in the terminal. The cursor may not move and no asterisks appear; type the password carefully and press Enter once. A successful authentication produces the account’s shell prompt. The exact prompt and available commands depend on the VPS operating system and the permissions assigned to that account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Password access is convenient for a one-off connection, but it requires a password to be transmitted for each login and is exposed to password-guessing attempts if the SSH service is reachable from the internet. Follow the provider’s account policy and use a long, unique password when password authentication is necessary.

How to use a .ppk key in PuTTY

Public-key authentication separates the key that is installed on the server from the private key kept on your Windows computer. The VPS stores the public key; PuTTY proves possession of the matching private key during login. A passphrase on the private key protects it if the file is copied.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Generate a key pair with PuTTYgen

  1. Start puttygen.exe, the key-generation utility included with PuTTY.
  2. Generate a key pair using the utility’s key-generation controls. Move the pointer in the generation area if PuTTYgen requests random input.
  3. Enter a strong passphrase in the passphrase fields. The passphrase protects the private key and is separate from the VPS account password.
  4. Save the private key with Save private key. Keep the resulting .ppk file private and back it up securely.
  5. Copy the complete public-key text shown for pasting into an OpenSSH authorized_keys file. Keep it as one uninterrupted line; do not wrap it or insert line breaks.

The public key can be shared with the server administrator. The .ppk private key and its passphrase should not be sent to anyone who does not need administrative access.

Install the public key on an existing Linux VPS

You need an available login method—such as the initial provider password or another administrator account—to install a new key. Work as the target VPS user, or ensure that ownership is corrected when an administrator installs it for that user.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Create the user’s SSH directory if it does not already exist:
mkdir -p ~/.ssh
chmod 700 ~/.ssh
  1. Open or create ~/.ssh/authorized_keys and paste the complete public-key text on one line. A text editor such as nano can be used:
nano ~/.ssh/authorized_keys
  1. Save the file and restrict its permissions:
chmod 600 ~/.ssh/authorized_keys

The VPS must be configured to permit public-key authentication, and the SSH service must be reloaded or restarted when the server’s setup requires it. The exact service command varies by operating system, so use the procedure supplied by the administrator. If the key was pasted with an extra line, missing characters, or text from the wrong key pair, PuTTY will not be able to authenticate with it.

Convert an existing OpenSSH private key

A private key created by an OpenSSH tool is not automatically the same file format as a PuTTY private key. If your provider gave you an OpenSSH private-key file, import or convert it with PuTTYgen, then save the converted private key as a .ppk file. Select the converted file in PuTTY rather than the original file when the provider’s format requires conversion.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Select the .ppk file in PuTTY

  1. Open PuTTY and select Connection → SSH → Auth → Credentials.
  2. Under the private-key setting, click Browse.
  3. Select the correct .ppk file.
  4. Return to Session.
  5. Enter the VPS address, configured SSH port, and connection type. Supply the username in the host field if your provider’s procedure uses that form, or wait for PuTTY’s login prompt.
  6. Click Open.

PuTTY asks for the private-key passphrase, then sends the corresponding public-key proof to the server. The account name still matters: a valid key installed for one VPS user will not authenticate as a different user unless that user also has the public key in its own authorized_keys file.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Save a connection for future use

Use Saved Sessions

In Session, enter a name under Saved Sessions and click Save after setting the host, port, SSH type, and key path. Later, select that name and click Load to restore the settings. Saving a session stores connection configuration, including the selected key path; it does not make the private key safe to share and does not remove the need to verify an unexpected host-key change.

Use Pageant for repeated key logins

Pageant is PuTTY’s authentication agent. Load the .ppk into Pageant once, enter its passphrase when requested, and leave Pageant running while you work. PuTTY can then use the loaded key without asking you to browse to the file for every session. Remove the key from Pageant or exit the agent when you finish on a shared or untrusted Windows account.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to do after you connect

Once the shell prompt appears, commands run on the VPS rather than on Windows. Confirm that you are on the intended host before changing files, installing packages, or restarting services. When finished, log out with:

exit

You can also use the terminal’s end-of-file shortcut where supported. Logging out closes the remote shell; it does not shut down the VPS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshoot PuTTY connection errors

PuTTY symptom Checks to make Corrective action
Connection refused The VPS may be stopped, the SSH service may not be listening, the port may be wrong, or a firewall may be rejecting the connection. Confirm that the VPS is running, verify the address and administrator-specified SSH port, check that the SSH service is listening, and allow that port through the VPS and any provider firewall.
Connection timed out The address may be wrong or unreachable, or a network firewall may be silently dropping traffic. Recheck the public address, confirm that the VPS has network connectivity, and have the administrator inspect provider and server firewall rules for the configured SSH port.
Host-key warning appears unexpectedly The VPS may have been rebuilt, its SSH host key may have changed, the address may point to another machine, or the connection may be intercepted. Stop and compare the displayed fingerprint with a trusted provider or administrator value. Do not accept the key until the change is explained and the fingerprint matches.
Server refused our key The public key may not match the selected .ppk, the key may be in the wrong user’s file, or authorized_keys may contain a wrapped or damaged line. Confirm that the public key on the VPS is the exact counterpart of the selected private key, that it is in the intended user’s ~/.ssh/authorized_keys, and that the entry remains one uninterrupted line.
Unable to use key file The file may be in an OpenSSH format, damaged, inaccessible, or not the file you intended to select. Import or convert an OpenSSH private key with PuTTYgen, save it as .ppk, check the file path and permissions, and select the converted file under Connection → SSH → Auth → Credentials.
Authentication fails after the network connection succeeds The username, account policy, password, key passphrase, or server authentication settings may be wrong. Verify the account name, re-enter the password or key passphrase, confirm whether the VPS permits password or public-key authentication, and ensure the account is authorized for SSH access.

These checks distinguish transport failures from login failures. A successful TCP connection only proves that PuTTY reached an SSH service; it does not prove that the selected account is permitted to log in.

Password, public key, Pageant, and command-line choices

The right method depends on whether you need a quick one-time login, repeatable administration, or automation.

Choice Setup effort Repeat use Security and workflow consideration
Password authentication Lowest when the provider already supplied a password. Requires entering the account password for each login. Convenient, but internet-facing SSH accounts can be exposed to password-guessing attempts.
Public-key authentication in PuTTY Requires generating or converting a key, installing the public key, and selecting a .ppk. Repeatable; PuTTY uses the selected key and asks for its passphrase. Keeps the private key on the client and avoids sending an account password for each login. Protect the key and passphrase.
PuTTY with Saved Sessions Save the host, port, SSH type, and key selection after configuring them. Loads the same connection settings with one selection. Reduces typing errors but does not replace host-key verification or private-key protection.
PuTTY with Pageant Load a .ppk into the running agent and unlock it with its passphrase. PuTTY can reuse the loaded key for multiple sessions. Useful for frequent work; remove keys from the agent when the work session ends.
OpenSSH or Plink command line Requires command-line configuration rather than PuTTY’s graphical fields. Well suited to scripts and repeatable terminal commands. Provides automation, while PuTTY’s GUI is easier for visual configuration and first-time setup.

Provider-specific examples of usernames, addresses, and ports are not universal settings. Record the values for your own VPS and use those values in the session profile.

Operational checklist for a reliable VPS login

  • Keep the VPS address, SSH port, and username in a secure record so you do not substitute a different machine.
  • Verify a new or changed host-key fingerprint before accepting it.
  • Use a passphrase-protected .ppk for key-based access and keep a protected backup of the private key.
  • Paste public-key text into authorized_keys as one complete line.
  • Choose the correct VPS user when installing the key; each user has a separate home directory and key file.
  • Use the administrator’s actual SSH port rather than assuming the default.
  • When a connection fails, first separate address, port, service, and firewall problems from username and authentication problems.
  • Close the shell with exit when finished, and remove an unlocked key from Pageant on shared Windows machines.

With those details in place, PuTTY provides a straightforward graphical SSH path to a VPS: configure the destination, verify its identity, authenticate with the permitted method, and save the session only after the connection works.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.