Hackers use automated bots to guess millions of passwords every day (Brute Force Attacks). If you are using a standard password on your Dedicated Server, it is only a matter of time before you are targeted.
SSH Keys utilize cryptographic pairs (Public & Private) that are mathematically impossible to crack. By switching to keys and disabling passwords, you make your server "invisible" to login attackers.
You must do this step on your Local Computer (Your Laptop/PC), not on the server.
Open your terminal (PowerShell on Windows, Terminal on Mac/Linux) and run:
We use ed25519 because it is faster and more secure than older RSA keys. Press Enter to save the file.
Now, send the Public Key to your ServerMO server. This tells the server: "Only the person with this key allows inside."
You will be asked for your root password one last time. Once successful, try logging in:
Did it log you in without a password? If yes, proceed. If no, stop here and check your steps.
Now that your Key works, let's close the door on hackers by disabling password authentication completely.
Login to your server and edit the SSH config file:
Find and change these lines to match below:
Save the file (Ctrl+O, then Enter) and exit (Ctrl+X).
Apply the changes by restarting the SSH service.
Since passwords are disabled, losing your private key means you cannot login via SSH. However, ServerMO has you covered:
Congratulations! Your server is now immune to password brute-force attacks. While managing keys requires a bit more care (backups are essential!), the security benefits for your dedicated server are unmatched.
Need a secure server to practice on? Explore ServerMO Dedicated Servers β
Power. Performance. Precision.
Unwrap the ultimate power! Get massive holiday discounts on all Dedicated Servers. Offer ends soon grab yours before the snow melts!