October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Create a New SSH User on Ubuntu

A step-by-step Ubuntu guide to creating a user, granting sudo, configuring authorized_keys, fixing SSH permissions, and testing access safely.
Length8 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To create an Ubuntu account that can sign in over SSH and use administrative commands, run sudo adduser username, add the account to Ubuntu’s sudo group with sudo usermod -aG sudo username, then create /home/username/.ssh and its authorized_keys file. Set the directory to mode 700, the key file to mode 600, make both files belong to the new user, and paste the user’s public key one key per line.

Keep your existing SSH session open while testing. Confirm the account with id username, open a second session as that user, and run sudo -v before closing the original connection.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you need before starting

This procedure assumes you already have an Ubuntu server, an SSH connection that works, and an account with sudo privileges. The server must already be running an SSH service that accepts the authentication method you intend to use. You also need the new user’s public key if the account will authenticate with a key.

  • Stay connected through your current SSH session until the new login and sudo test succeed.
  • Replace every occurrence of username below with the account name you want to create.
  • Have the public key available on the computer from which the new user will connect. Paste the public key, never the private key, into authorized_keys.

The commands described here are used in third-party Ubuntu administration guides. A walkthrough labeled for Ubuntu 26.04 says the same commands apply, but that release-specific statement is not confirmed by Ubuntu release documentation, so check the defaults for the particular Ubuntu version you operate.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

1. Create the account with adduser

From the existing administrator session, run:

sudo adduser username

Ubuntu asks you to choose a password and then displays optional profile fields. Enter the password when prompted. For the optional full name, room number, work phone, home phone, and other fields, press Enter to leave them blank. Confirm the details when adduser asks whether they are correct.

The command creates the login account and its home directory. Use a simple, consistent name because the same name is used in the SSH path and in later verification commands. Do not disconnect your current administrator session after the account is created.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

adduser versus useradd

For an interactive Ubuntu account setup, adduser is the practical choice. An “Ubuntu Server 101” guide on Medium describes useradd as “a low level binary command compiled with the system,” while adduser is “a high level Perl script built on top of useradd.” The distinction matters because adduser leads you through the password and profile prompts instead of requiring you to assemble every account option yourself.

Command Description in the cited guide Use in this procedure
adduser High-level Perl script built on top of useradd Recommended for the interactive account-creation step
useradd Low-level binary compiled with the system Not needed for the steps below

2. Give the account administrative access

Add the new account to Ubuntu’s sudo group:

sudo usermod -aG sudo username

The -G option identifies supplementary groups. The -a option means “append”; it adds sudo without replacing groups the account already has. Omitting -a can remove existing supplementary-group memberships, so keep the combined -aG form.

On Ubuntu, members of the sudo group receive sudo privileges by default. This is broad administrative access: the user can run commands as root after authenticating as required by the system’s sudo policy. Give this membership only to people who should administer the server.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

3. Create the SSH directory and key file

SSH looks for the account’s public keys in a file named authorized_keys inside the user’s .ssh directory. Create the directory and file under the new account’s home directory:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo mkdir -p /home/username/.ssh
sudo touch /home/username/.ssh/authorized_keys

Set the permissions exactly as follows:

sudo chmod 700 /home/username/.ssh
sudo chmod 600 /home/username/.ssh/authorized_keys
Path Required mode Owner Purpose
/home/username/.ssh 700 The new user Private directory containing SSH configuration and keys
/home/username/.ssh/authorized_keys 600 The new user Public keys permitted to authenticate as that user

Fix ownership after creating the files:

sudo chown -R username:username /home/username/.ssh

The ownership and modes are important. Community Ubuntu guides note that an incorrect owner or permissions can cause SSH key login to fail even when the key itself is valid. If your system uses a nonstandard home-directory location, use that account’s actual home path instead of assuming /home/username.

4. Install the public key

Open the key file with an editor available on the server, for example:

sudo nano /home/username/.ssh/authorized_keys

Paste the complete public key on its own line. A typical public key is one long line beginning with a key type such as ssh-ed25519 or ssh-rsa, followed by encoded key data and an optional comment. Do not wrap one key across multiple lines, and do not paste the private key that stays on the client computer.

If more than one device should be allowed to log in as this account, put each device’s public key on a separate line. Save the file and exit the editor. Reapply the ownership and mode commands if you edited the file as a different account:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
sudo chown username:username /home/username/.ssh/authorized_keys
sudo chmod 600 /home/username/.ssh/authorized_keys

One key per line makes individual access easier to identify and remove later. Deleting one line revokes that particular public key without changing the account or other keys.

5. Verify the account and group membership

First check the account record and its groups from the original session:

id username

The output should identify the new user and include sudo among the listed groups. If sudo is absent, repeat the usermod -aG sudo username command and check the output again.

Next, keep the current administrator connection open and start a second SSH connection using the new account. The connection format is:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
ssh username@server-address

After logging in, validate sudo:

sudo -v

A successful command either refreshes the sudo credential timestamp silently or asks for the new user’s password, depending on the host’s sudo policy. The key test is that it completes without an error. Only after this second session works should you close the original administrator session.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Why the second-session test prevents lockout

Making an account, changing its groups, and editing its key file are separate operations. A typo in the username, a misplaced key, incorrect ownership, or an incorrect mode can leave the new account unable to authenticate. Testing through a second connection gives you a working path back to the server while you correct the problem.

  1. Leave the original SSH window connected and idle.
  2. Open a new terminal or SSH client window.
  3. Connect as username using the installed public key.
  4. Run id username after login if you want to inspect the account’s groups from its own session.
  5. Run sudo -v and confirm that sudo accepts the account.
  6. Close the original session only after both login and sudo have succeeded.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting common failures

id username does not show sudo

Run the group command again exactly as written:

sudo usermod -aG sudo username

Then start a fresh SSH login as username and run id username there. The verification procedure specifically relies on a second session, rather than assuming an earlier shell reflects the newly changed membership.

SSH reports “Permission denied (publickey)”

Check the three items most directly tied to the key-file setup:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • The key is in /home/username/.ssh/authorized_keys for the same username used in the SSH command.
  • The public key occupies one complete line and was not wrapped or truncated when pasted.
  • The .ssh directory is mode 700, the key file is mode 600, and both are owned by username.

From the administrator session, re-run:

sudo chown -R username:username /home/username/.ssh
sudo chmod 700 /home/username/.ssh
sudo chmod 600 /home/username/.ssh/authorized_keys

Then retry the second SSH connection. Keep the original connection open while making these corrections.

The account logs in but sudo -v fails

Confirm that sudo appears in the output of id username. If it does not, correct the group membership and reconnect. If it does appear, the host’s sudo policy may be requiring the password created during adduser; enter that password when prompted. A successful login alone does not prove that administrative access works, which is why sudo -v is a separate verification step.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

The optional adduser questions are confusing

Only the account password is required for this procedure. At each optional identity-field prompt, press Enter to leave the field empty, then confirm the summary when prompted. You can complete the SSH setup without entering a full name, phone number, room number, or other profile data.

You are unsure which key belongs in the file

Use the public key generated for the client device that will connect. Public keys are designed to be copied to the server; the matching private key must remain protected on the client. If several clients need access, add each public key as a separate line rather than replacing the existing entries.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Operational and security considerations

Sudo access is a privilege decision

Adding an account to sudo grants administrative capability, not merely permission to restart one service. If the person only needs a restricted task, do not add the account to the full sudo group unless that level of access is intended.

Protect the key file’s structure

Keep one public key per line and preserve the complete line when copying it. Accidental line breaks, missing characters, or pasted private-key material can prevent authentication. The required modes and ownership are part of the SSH setup, not optional cleanup.

Do not test by sacrificing your only connection

Never close the administrator’s existing SSH session immediately after changing the account. The second-session test is the recovery plan: it lets you repair the key path, permissions, ownership, or group membership without depending on an unverified account.

Ubuntu version notes

A third-party walkthrough titled for Ubuntu 26.04 states that these commands apply there. That statement has not been confirmed by official Ubuntu release notes, and defaults can change between releases. Treat the commands as the procedure described by the available Ubuntu guides, then verify behavior on the exact Ubuntu edition and image used by your server.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Complete command checklist

For reference, the essential sequence is:

sudo adduser username
sudo usermod -aG sudo username
sudo mkdir -p /home/username/.ssh
sudo touch /home/username/.ssh/authorized_keys
sudo chmod 700 /home/username/.ssh
sudo chmod 600 /home/username/.ssh/authorized_keys
sudo chown -R username:username /home/username/.ssh
id username
ssh username@server-address
sudo -v

Insert the public key between the ownership setup and the verification steps. The account is ready when the new user can establish a second SSH session and sudo -v succeeds, while the original administrator session remains available until that point.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.