OpenSSH

OpenSSH is the de facto standard for secure remote administration on Linux.

Why it matters

  • Enables secure command-line administration over untrusted networks.
  • Supports key-based authentication and access controls.
  • Provides secure copy tools (scp, sftp) for operations workflows.

Hardening essentials

  • Disable password auth where possible.
  • Restrict root login and use least-privilege users.
  • Enforce modern ciphers and key algorithms.