By default, many Linux distributions disable root SSH login for security reasons. However, if you need to enable it (for example, in a controlled environment), follow this guide.
🛠️ Step 1: Edit SSH Configuration File
Open the SSH daemon configuration file using:
sudo nano /etc/ssh/sshd_config
Find the following line:
PermitRootLogin prohibit-password
Change it to:
PermitRootLogin yes
If the line doesn’t exist, add it manually.
✅ Ensure Password Authentication is Enabled
Look for:
PasswordAuthentication no
Change it to:
PasswordAuthentication yes
Save the file (CTRL+X, then Y, then ENTER).
🔄 Step 2: Restart SSH Service
Apply the changes by restarting SSH:
sudo systemctl restart ssh
🔑 Step 3: Set a Root Password (If Needed)
If the root account doesn’t have a password, set one with:
sudo passwd root
Enter a strong password when prompted.
🌍 Step 4: Allow SSH in Firewall (If Applicable)
If you’re using UFW (Uncomplicated Firewall), allow SSH connections:
sudo ufw allow ssh
🔍 Step 5: Test Root SSH Login
From another machine, try logging in:
ssh root@your-server-ip
If successful, root SSH is now enabled! 🎉
⚠️ Security Warning & Best Practices
Allowing root SSH login can be a security risk. Consider:
Using SSH keys instead of passwords
Disable password authentication and allow only key-based login:
PermitRootLogin without-password
Restricting SSH access to specific IPs
Use firewall rules to allow SSH access only from trusted sources.
Disabling root SSH once it's no longer needed
If you no longer need root SSH, disable it by setting:
PermitRootLogin no
Then restart SSH:
sudo systemctl restart ssh