Connect over SSH · No control panel
Connect a WordPress site over SSH without a control panel
No panel, just a server. Adding WebCrew's SSH key takes ten minutes and unlocks the file-level checks, faster updates with a full restore point, and cleanup help when a site is compromised. The key goes to the user that owns the WordPress files, never root.
Free for one site. No card. Nothing on the site changes by connecting it.
Step by step
Adding the WebCrew key in No control panel
Before you start: your WebCrew dashboard open at Add a site → SSH (that is where the public key is), and a login to the server with rights on the site.
Find the user that owns WordPress
SSH in and run ls -l wp-config.php in the WordPress folder. The owner shown is the user the key belongs to. Never root.
Add the WebCrew key for that user
As that user: mkdir -p ~/.ssh && chmod 700 ~/.ssh, append the public key from your WebCrew dashboard to ~/.ssh/authorized_keys, then chmod 600 ~/.ssh/authorized_keys.
Check the SSH daemon
In /etc/ssh/sshd_config: PubkeyAuthentication yes, and the user needs a shell (/bin/bash, not nologin). Reload sshd.
Enter host, user and path in WebCrew
Host: IP or hostname. User: that user. Path: the WordPress root.
Good to know
If the files are owned by www-data, create a deploy user in the www-data group instead of giving www-data a shell. If the server only accepts a bastion or a non-standard port, enter those in WebCrew as well.
Menu names follow your distribution's current release. If yours looks different, the same setting lives in the panel's SSH or Security section.
Why SSH
What the key unlocks that the plugin cannot reach
The connector plugin sees what WordPress reports. SSH sees the files themselves.
Plugin and SSH side by side- File-level integrity. Every file compared, not only what WordPress reports; changed and added files listed with their time.
- Restore points at file and database level. The way back covers the whole site, not one plugin.
- Cleanup help when a site is compromised. Changed core files replaced, unknown administrators removed, the plugin that let the attacker in updated or removed, with a restore point before each step. No guarantee it stays clean; no tool can give one.
- Staging copies, when they ship.
Questions
Before you add the key
Does the key give WebCrew root?
No. You add it for the site's own user. WebCrew can do what that user can do in that user's folders, and nothing else. Every action taken over the key is in the site's log.
My host does not allow SSH on my plan.
Use the connector plugin. Monitoring, the security scan, vulnerability matching, updates with a restore point and the assistant all work through it. File-level cleanup then becomes a list of steps for you or the host.
Can I remove the key later?
Yes. Revoke it in your WebCrew dashboard, or delete it in authorized_keys. The site keeps running exactly as before; only the deeper checks stop.
Do I still need the connector plugin?
Not for monitoring or updates. Keep it if you want the assistant inside wp-admin later; the two work side by side on one site.
Do I have to install anything besides No control panel?
One of two things: the WebCrew connector plugin, uploaded in wp-admin like any plugin, or one SSH key for the site's own user. Nothing else changes on the site.
Can I use my own Claude or ChatGPT with a site that runs No control panel?
Yes. Connect your tool to WebCrew over MCP and ask about the site from your own chat. Reading is instant; changes are made for you, logged, and undone in one click.
What does it cost for a site running No control panel?
The first site is free, for as long as you like. Every site after that is billed per site per day, monthly, for the days it was on. Plugins are never counted.
Is my content or No control panel's data used to train anything?
No. Your content is never sold and never used to train a model, by WebCrew or by a provider it uses.
What if No control panel is a premium plugin with a licence?
It updates through its own licence. WebCrew shows the pending version, takes the restore point first and keeps the code difference, the same as for any other plugin.
Other panels
Not a bare server? Pick your panel
Add the key now. The first file-level check is done within the hour.
Free for one site. No card.