One of the best practices for SSH is to never use passwords, always use keys.

http://lackof.org/taggart/hacking/ssh/