Hardening SSH
Summary It’s about time I get a standard sshd_config file that doesn’t rely on sane defaults. Disabling Password-based Authentication You should disable password-based authentication altogether. Make sure to only do this once you have verified that you can log in with an account that can escalate to root - or that you have an alternate way of getting back onto your machine. To lock down your server, edit your /etc/sshd/sshd_config and set the following options: ...