---
title: "Charmhub | Deploy Local Users\n using Charmhub - The Open Operator Collection"
description: "Deploy the latest version of Local Users\n on any cloud."
url: https://charmhub.io/local-users/docs/hardening
---

# Local Users

[Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")

* [Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")

Platform:

24.04

22.04

20.04

18.04

stable 216

```
juju deploy local-users
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

# Security Hardening Guidance

## [SSH keys](https://charmhub.io/local-users/docs/hardening#p-36773-ssh-keys)

It is highly recommended to periodically review the SSH keys that have been added to your juju units and ensure that only authorized users have access. SSH keys provide secure, (potentially) passwordless login to your systems, but if not properly managed, they can become a security risk.

Over time, it’s common for employees or contractors to leave the company or change roles. If their SSH keys are not promptly removed, they may retain access to sensitive systems and data, potentially exposing the organization to unauthorized access.

By regularly auditing the SSH keys:

* You can identify unused or outdated keys.
* Ensure that only current and authorized personnel have access.
* Remove keys associated with users who no longer need access, such as employees who have left the company.
* This proactive measure helps maintain security hygiene and reduces the risk of data breaches or misuse of system resources.

An easy way to check the authorized users is:

1. Find what is the configuration file on ssh-authorized-keys. E.g: `$HOME/.ssh/authorized_keys`
2. List the users on this file:

```
awk '{print $NF}' ~/.ssh/authorized_keys

lp:johndoe
gh:janedoe
```

1. In case you need to remove an user, access the file and remove the line from the identified user.

---