3 ms·The answer is really easy: You should do both. Disable password auth for root, and change the SSH port.by moe 14y agoThe answer is really easy: You should do both. Disable password auth for root, and change the SSH port.