SSH password auth vs. key auth

By default all linux OS's have SSH password authentication disabled.

The reason for this setting is that we honor the privacy and data security of our customers.

Password authentication belong to the past. Nowadays its just a matter of time until a password is hacked and the server compromised with most probably dataloss or reduce of performance.

Already during the botnet "knocking" on the SSH daemon having password authentication enabled will have significant impact on the performance of the server compared to key auth.

Key auth is by default the only way to authenticate with all major cloud providers ( amazon, google, .... ).

Password auth is disabled by default on all official cloud-images of the different OS vendors nowadays.

 

Customers who want to activate it are free to do so by adjusting the serverconfiguration. They can also try out the password auth enable helper function in our clientarea that MIGHT work.

We explicitly do NOT recommend activating password auth! Please do not do it.

If you are unfamiliar with key auth, this is the perfect chance to extend your knowledge. All in all there is a reason why password auth is not activated and should not be activated!

  • Permission denied, publickey, gssapi-keyex, gssapi-with-mic, ssh, password, auth
  • 1 Els usuaris han Trobat Això Útil
Ha estat útil la resposta?