A bit of theory
Wikipedia has a good article on this concept, but I will briefly cover the main points here.
In public-key authentication, a pair of unique keys are generated, one of which is used to encrypt data, and the other is used to decrypt. As implemented, these are respectively known as public and private keys.
Image RemovedImage Added
When you run
ssh-keygen, this key pair is generated as two files called
id_rsa.pub contains your public key, and the contents of this file are added to a list of authorized keys (usually a file called
authorized_keys) on the SSH server to grant access to the user with the matching private key. It is important to keep your private key secret, as anyone who possesses it can potentially log in as you without a password (we'll get to protecting your private key with a passphrase in a bit).