How to Disable Password Authorization in WHM

Do you allow users to connect to your server via SSH or SFTP? If they are using password authorization you may want to consider switching to SSH keys instead. With password authorization, users only need a username and password to connect to your server. This means hackers or bots can try combinations of popular usernames and password in attempts to gain access. If they eventually guess correctly, they will be allowed to connect to your server. But, if you require SSH keys to connect to your server, no one can connect unless they have a copy of the private key. In this tutorial, we will show you how to disable password authorization in WHM, so users will be required to log in with a private key.

Disabling Password Authorization

  1. Log into WHM as the ‘root‘ user.

  2. Click the Security Center option in the navigation menu.

  3. Select the SSH Password Authorization Tweak button.

  4. On the next page click the Disable Password Auth button.

    You are finished when you see message stating
    Password Auth has been disabled!

Congratulations, now you know how to disable password authorization in WHM!

JB
John-Paul Briones Content Writer II

John-Paul is an Electronics Engineer that spent most of his career in IT. He has been a Technical Writer for InMotion since 2013.

More Articles by John-Paul

2 Comments

  • This seems to only disallow password authentication for SSH login. I want to disable password authentication for FTP too. I have keys setup and working for both FTP and SSH, but I can still login to FTP with passwords.

Was this article helpful? Let us know!