How to Disable Password Authorization in WHM Updated on August 16, 2021 by InMotion Hosting Contributor 1 Minutes, 3 Seconds to Read Do you allow users to connect to your server via SSH or SFTP? If they are using password authorization you may want to consider switching to SSH keys instead. With password authorization, users only need a username and password to connect to your server. This means hackers or bots can try combinations of popular usernames and password in attempts to gain access. If they eventually guess correctly, they will be allowed to connect to your server. But, if you require SSH keys to connect to your server, no one can connect unless they have a copy of the private key. In this tutorial, we will show you how to disable password authorization in WHM, so users will be required to log in with a private key. Did you know? Not all hosting companies provide free access to WHM. InMotion does and it’s just one of the many features of our various Dedicated Hosting. Disabling Password Authorization Log into WHM as the ‘root‘ user. Click the Security Center option in the navigation menu. Select the SSH Password Authorization Tweak button. On the next page click the Disable Password Auth button. You are finished when you see message stating “Password Auth has been disabled!” Congratulations, now you know how to disable password authorization in WHM! Share this Article IC InMotion Hosting Contributor Content Writer InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals! More Articles by InMotion Hosting Related Articles Resetting the cPanel Password in WHM How to Change your root Password in WHM How to Stop and Disable Firewalld Content Security Policy (CSP) Headers – Complete Reference Guide Why You Need To Keep Your Website’s PHP Version Up-to-Date Learning About Mod_security and Disabling Mod_security Close Open Ports for PCI Compliance How to Pass PCI Compliance Scans DDoS Protection Using Corero How to Open a Port in Firewalld
This seems to only disallow password authentication for SSH login. I want to disable password authentication for FTP too. I have keys setup and working for both FTP and SSH, but I can still login to FTP with passwords.
It looks like you can disable all FTP access by using the Host Access Control, the user keat63 explains the solution in this thread on Disabling FTP access in the official cPanel forums.
