seriously, password-based auth... have ppl not heard of public key authentication?
allowing password-based auth in sshd is plain stupid. _always_ use pubkey auth, it's a 1-line change in /etc/ssh/sshd_config.
allowing password-based auth in sshd is plain stupid. _always_ use pubkey auth, it's a 1-line change in /etc/ssh/sshd_config.
What happen when you lose your key? How do you backup your key?
If you're super paranoid, copy it to some physical media that you can store securely.
Also note that you can have multiple keys, potentially one per device (useful in case a device could get stolen).