# Remote Administration Via SSH



# Set SSH protocol to 2

### Set SSH protocol to 2

SSH has two protocols it may use, protocol 1 and protocol 2. The older protocol 1 is less secure and should be disabled unless you know that you specifically require it.

1. Open the sshd config  
    `vi /etc/ssh/sshd_config`
2. Add or amend as shown below  
    `# Protocol 2,1<br></br>Protocol 2`
3. Restart the sshd service  
    `systemctl restart sshd.service`

# Disable SSH root login

### Disabling root login via SSH

Disabling SSH root login will add an extra layer of security. It would be more secure to brute force  
attacks or in case your password is stolen.

1. Create a non-root user  
      
    `adduser username`  
    `passwd username`
2. Open the ssh configuration file with your editor.  
      
    `vi /etc/ssh/sshd_config`
3. Add the line “PermitRootLogin no.” Or uncomment the line "#PermitRootLogin yes" and  
    change yes to no.  
      
    `#LoginGraceTime 2m`  
    `#PermitRootLogin yes`  
    `#StrictModes yes`  
    `#MaxAuthTries 6`  
    `#MaxSessions 10`  
    `PermitRootLogin no`
4. Save and exit the file.
5. Restart the ssh service  
      
    `systemctl restart sshd.service`

# Set SSH permitemptypasswords to no

### Set SSH permitemptypasswords to no

1. Open the ssh configuration file with your editor.  
      
    `<span role="presentation" style="padding-right: 0.1px;">vi /etc/ssh/sshd_config</span>`
2. Add or amend as shown below  
      
    `PermitEmptyPasswords no`
3. Restart the sshd service  
      
    `systemctl restart sshd.service`