Securing SSH Without Locking Yourself Out

Keep one working SSH session open while testing changes in a second terminal.

Validate before reload

sudo sshd -t
sudo systemctl reload sshd

Use key authentication

ssh-keygen -t ed25519
ssh-copy-id administrator@example-server

Disable root login

PermitRootLogin no

Disable password authentication only after keys are proven to work.

Need help applying this?

e-NetSec provides practical Linux, networking and cybersecurity consultancy.