eolas/neuron/465c3f1a-96c8-4f3f-9682-19d3ebacfb4a/Disable_non-root_ssh_access.md

473 B

tags created
servers
ssh
procedural
linux
Saturday, February 15, 2025

Disable non-root SSH access

Best practice is to:

  • Disallow root login
  • Block password-based login
  • Allow only SSH-based login

Do this by editing /etc/ssh/sshd_config:

PasswordAuthentication no
ChallengeResponseAuthentication no

Then restart the SSH service:

sudo systemctl restart sshd

(Assumes you have already set-up SSH-based login for a non-root user!)