I would like to request a feature that allows users to enforce SSH key-only authentication on Cloudways servers without requiring IP whitelisting.

Currently, Cloudways provides the Block All IP option under Security > Shell Access, which restricts access to whitelisted IP addresses using registered SSH keys. However, this approach requires users to manage allowed IP addresses and does not provide an independent option to disable password-based authentication while allowing SSH key authentication from any IP address.

Proposed Enhancement

Introduce a configurable option under Security > Shell Access to enforce SSH key-only authentication.

When enabled:

Disable password-based authentication for SSH and SFTP connections.

Allow authentication only through registered and authorized SSH public keys.

Deny login attempts that rely on account passwords, even when the correct password is provided.

Allow authorized SSH key authentication regardless of the client's IP address, subject to other existing security restrictions.

Keep this setting independent of the existing IP whitelisting and Block All IP feature.

Benefits

Improved server security: Reduces the risk of unauthorized access through compromised or weak account passwords.

Simplified access management: Eliminates the need to maintain an IP whitelist solely to enforce SSH key-based authentication.

Greater flexibility: Allows authorized developers and administrators to securely connect from different networks and changing IP addresses.

Better access control: Ensures that server access follows a key-based authentication policy.

Expected Outcome

Administrators should be able to disable password-based SSH/SFTP authentication while keeping SSH key authentication available globally, without enabling Block All IP or restricting access to specific IP addresses.

This would provide greater control over server security while maintaining the flexibility needed for development and server administration.