I have security concern here.
I have enabled SSH to my droplet and if i wanted to access the droplet via GitBash via windows10 i need to have my SSH public key saved to my DigitalOcean account.

when i do ssh root@123.456.789.101 it will check for my public key and ask for droplet password.

If my desktop side doesn’t have the SSH key, it will show “permission denied (public key)”

But, when i access the droplet via mobile app JuiceSSH, it only asks for droplet password provided i didn’t generate any SSH nor didn’t save any new public key to DigitalOcean Account.

What did i do wrong here?

Note: I followed this Disable root password guide but the saved public keys are all unusable.