How to Disable SSH Password Authentication on Linux VPS


The majority of people use password authentication to connect to their servers via SSH command line and do not even consider that this authentication method may not be as safe as they expected. Consider this: if any hacker manages to collect your SSH password, all of your valuable information is at risk. That is why authenticating with SSH keys is a better option.

Before you begin this guide you’ll need the following

  1. A working Linux OS based server / VPS
  2. Root access to your server / VPS via SSH command line

1.Configuring SSH Key authentication on your server

you should note that if you do not set up another authentication method beforehand and disable password authentication right away, you will have a hard time connecting to your server.

It is very IMPORTANT to configure another way of authentication before you proceed with this guide. We recommend SSH Key authentication. This is a full tutorial on how to configure SSH Key authentication on your server: How To Set Up SSH Keys

IMPORTANT! Continue with this tutorial only after you configure your SSH Keys because you may be locked out of your own server!

2.Editing SSH configuration file

Proceed with this only if you have completed Step 1 and successfully connected to your VPS using [SSH keys]how-to-set-up-ssh-keys because you may be locked out of your own server.

  • Connect to your server/VPS with root SSH credentials.
  • Open /etc/ssh/sshd_config configuration file with a text editor like nano or vim via SSH command line. nano /etc/ssh/sshd_config
  • When editor opens you should see a similar view:
disable ssh password auth01 1
  • Now you need to find a line: PasswordAuthentication yesNano has a search feature so you can simply search for this line by pressing CTRL + W on your keyboard, writing a search keyword PasswordAuthentication and clicking Enter.
disable ssh password auth02
  • Your pointer should point to the necessary area.
disable ssh password auth03
  • And here you need to change PasswordAuthentication yes to PasswordAuthentication no:
disable ssh password auth04
  • To save changes and exit press Ctrl + X, type in Y and press Enter button.
  • Additionally, you need to restart the SSHD service to apply the changes. Run the following command: service sshd restart
SSH password authentication has been disabled. From this point no one will be able to connect to your server / VPS using SSH password. Only privileged users who have their SSH keys added to your server will be able to connect.

You have learned how to disable SSH password authentication on your server / VPS. This makes your server a lot safer because no one will be able to connect to your server via SSH using a password. Only privileged users using SSH keys or other advanced authentication methods will be able to connect.

please leave a comment lt’s very important for us


Please enter your comment!
Please enter your name here