skip to content
shipanjodder.com

Enable SSH Root Access & Password Authentication on Linux

Updated:
ssh , root , authentication

Step 1: Edit the SSH Configuration File

Open the SSH server configuration file with a text editor (e.g., nano or vim):

Terminal window
sudo nano /etc/ssh/sshd_config

Step 2: Modify Key Settings

Find and update the following lines in the file:

Terminal window
# Allow root login via password
PermitRootLogin yes          # Change from "prohibit-password" or "no" to "yes"


# Enable password authentication
PasswordAuthentication yes  # Change from "no" to "yes"

Step 3: Save and Validate Syntax

Terminal window
sudo sshd -t

Step 4: Restart the SSH Service

Terminal window
sudo systemctl restart sshd
  • Use SSH Keys Instead: Disable password authentication and use key-based authentication for root.
  • Install Fail2Ban: Block brute-force attacks.
  • Use a Strong Password: Ensure the root password is complex.
  • Restrict Root Access: Limit root login to specific IPs:
/etc/ssh/sshd_config
PermitRootLogin yes
PasswordAuthentication yes
AllowUsers [email protected]

Troubleshooting

Locked Out? If you lose access, reboot the server and use a local console (or recovery mode) to revert the changes.

Firewall Issues: Ensure your firewall allows SSH traffic on port 22:

Terminal window
sudo ufw allow 22/tcp  # For UFW