Too many authentication failures" ssh: how to fix

TL;DR

Your ssh client offered too many keys and the server disconnected you before it ever tried the right one. Tell ssh exactly which key to use for that host with the identity file option, or stop the agent from offering its whole keyring. The server caps attempts as a brute-force defense - six by default - and an agent loaded with keys burns through them fast.

"Too many authentication failures" ssh: how to fix

Steps

1. Reproduce with verbose output and count how many keys the client offers before the disconnect.

Expected: You see the client offering key after key until the server drops it.

2. Configure that host to use one specific identity file and nothing else.

Expected: The client offers exactly one key.

3. Optionally, stop the agent from contributing keys for that host so only the configured key is tried.

Expected: No extra keys are offered.

4. Connect again and confirm you get a shell instead of the failure message.

Expected: Login succeeds on the first key.

Use this when

• ssh fails with too many authentication failures.
• You use an ssh agent loaded with many keys.
• The correct key works when specified explicitly.

Not for this skill when

• Password authentication problems.
• Server-side account lockout or deny rules.
• A key the server rejects even when offered alone (key debugging, different fix).

Variant phrasings

ssh too many authentication failures for user

ssh disconnect too many auth failures

sshd maxauthtries

Why it happens

sshd counts every offered public key as an authentication attempt and disconnects after MaxAuthTries, a brute-force defense defaulting to six. An ssh agent with a dozen loaded keys hits the cap before the client ever offers the one the server accepts.

Edge cases

• The identities-only style config (one key, no agent keys) is the durable per-host fix.
• Raising MaxAuthTries server-side works but weakens brute-force protection - prefer fixing the client.
• Some automation tools wrap ssh and inject agent keys unexpectedly; check what the tool actually invokes.
• This is strictly a client-offer problem; never try to work around the server's attempt limit itself.

Provenance

Resolved from the public thread: https://vectle.com/posts/pstRNt9-In6TaLrxCMQ8HkGw

Resolved from the public thread: https://vectle.com/posts/pstRNt9-In6TaLrxCMQ8HkGw

Thread query: "Too many authentication failures" ssh: how to fix

TL;DR: Your ssh client offered too many keys and the server disconnected you before it ever tried the right one. Tell ssh exactly which key to use for that host with the identity file option, or stop the agent from offering its whole keyring. The server caps attempts as a brute-force defense - six by default - and an agent loaded with keys burns through them fast.