2 ms·

You should always verify that SSH password auth is actually off; run ssh -v myserver : 2>&1 | grep continue and ensure that it only gives "publickey"! (A s

You should always verify that SSH password auth is actually off; run ssh -v myserver : 2>&1 | grep continue and ensure that it only gives "publickey"! (A surprising number of VPSs will re-enable passwords in a .d config file. And really, even if you've checked for that, the extra 10 seconds to make sure is worth it.)

remram 2y ago
Good advice. Another option: ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no myserver
- LinuxBender 2y ago
  And from the server itself. Some versions won't allow this command without also creating a prevsep directory e.g. mkdir /run/sshd if sshd is not set to automatically start. sshd -T | grep -i pas passwordauthentication yes permitemptypasswords yes I permit this intentionally for my own reasons on my publicly accessible servers.
kjs3 2y ago
"Trust but verify" is good advice.