---
title: How to disable root ssh completely
description: "Disabling root access via SSH is a common security measure to prevent unauthorized access to your server. Instead of logging in as root, users should log in as a regular user and elevate their privileges using `sudo`. ### **Prerequisites** Before…"
url: "https://truehost.com/support/knowledge-base/how-to-disable-root-ssh-completely/"
updated: "2024-10-08"
category: Cloud servers in Kenya
---

# How to disable root ssh completely

Disabling root access via SSH is a common security measure to prevent unauthorized access to your server. Instead of logging in as root, users should log in as a regular user and elevate their privileges using `sudo`.

### **Prerequisites**

Before disabling root SSH access, ensure the following:

- You must have SSH access to the server, either as the **root** user or a **sudo** user.
- Ensure that you have a non-root user with **sudo** privileges set up on the server. Use **[these](https://truehost.com/support/knowledge-base/how-to-create-a-sudo-user-on-your-server/)** steps to create one

##### **Step 1: Log in to Your Server. Check [these steps](https://truehost.com/support/knowledge-base/how-to-access-a-server-via-ssh-terminal/) on how to do that.**

##### **Step 2: Create or Verify a Sudo User**

- If you do not already have a sudo user, **[create one](https://truehost.com/support/knowledge-base/how-to-create-a-sudo-user-on-your-server/)** before disabling root SSH access.
- If you have a user already, very that the user can run **sudo** commands by running the command below.
- If the command returns `root`, the new user has sudo privileges. You may then proceed, otherwise refer to **[this](https://truehost.com/support/knowledge-base/how-to-create-a-sudo-user-on-your-server/)** article.

```
sudo whoami
```

##### **Step 3: Backup the SSH Configuration File**

- Before making any changes, create a backup of the SSH configuration file:
- This allows you to restore the configuration if necessary. Use the command below.

```
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
```

![](https://truehost.com/support/wp-content/uploads/2024/10/image-165.png)

##### **Step 4: Edit the SSH Configuration File**

- Open the SSH configuration file using a text editor, such as vim or nano:

```
vim /etc/ssh/sshd_config or nano /etc/ssh/sshd_config
```

![](https://truehost.com/support/wp-content/uploads/2024/10/image-166.png)

- Locate the line that allows root login:

```
PermitRootLogin yes
```

![](https://truehost.com/support/wp-content/uploads/2024/10/image-167-1024x535.png)

- Change it to:

```
PermitRootLogin no
```

This disables SSH access for the root user.

##### **Step 5: Reload SSH Service**

- After editing the SSH configuration file, reload the SSH service to apply the changes:

```
systemctl reload sshd OR systemctl reload sshd.service
```

![](https://truehost.com/support/wp-content/uploads/2024/10/image-168.png)

## **Important Links**

1. **[How to create a sudo user on your server](https://truehost.com/support/knowledge-base/how-to-create-a-sudo-user-on-your-server/)**
2. **[How to disable root ssh with password but enable via ssh keys](https://truehost.com/support/knowledge-base/how-to-disable-root-ssh-with-password-but-enable-via-ssh-keys/)**
3. **[How to change SSH port to a custom port](https://truehost.com/support/knowledge-base/how-to-change-ssh-port-to-a-custom-port/)**
4. **[How to prevent password request when running sudo commands](https://truehost.com/support/knowledge-base/how-to-prevent-password-request-when-running-sudo-commands/)**