How to Secure SSH Access on Linux

The default port 22 is a target for automated bots. Changing it to a custom port (e.g., 2222) can reduce the number of failed login attempts in your logs.

Using SSH keys is significantly more secure than passwords. Once your keys are set up, disable password login in /etc/ssh/sshd_config.