https://blog.planethawleywood.com/tags/ssh/Recent content in Ssh on Planet HawleywoodHugoen-usMon, 15 Aug 2022 00:00:00 +0000https://blog.planethawleywood.com/posts/hardening-ssh/Mon, 15 Aug 2022 00:00:00 +0000https://blog.planethawleywood.com/posts/hardening-ssh/<h2 id="summary">Summary</h2> <p>It&rsquo;s about time I get a standard sshd_config file that doesn&rsquo;t rely on sane defaults.</p> <h2 id="disabling-password-based-authentication">Disabling Password-based Authentication</h2> <p>You should disable password-based authentication altogether. Make sure to only do this once you have verified that you can log in with an account that can escalate to root - or that you have an alternate way of getting back onto your machine. To lock down your server, edit your <code>/etc/sshd/sshd_config</code> and set the following options:</p>