Showing posts with label allow login only using key file. Show all posts
Showing posts with label allow login only using key file. Show all posts

Saturday, May 16, 2020

ssh - Disable password login and allow login only using key file

If you allow password login for your ssh server, a Brute Force attack can be originated on your server. Key file login is more secured and it reduces possibilities of server hack. Best practice is you should disable password login for your server.

Here are steps to disable password login.

Update the line in the file /etc/ssh/sshd_config. The line might be commented, uncomment the line and change the attribute to no
PasswordAuthentication no
Restart ssh service.