How to Enable Root Login via SSH in Ubuntu

The root user in Linux has full administrative privileges over the system. For security best practices, direct root login via SSH is disabled in Ubuntu by default. All administrative tasks are intended for sudo users.

However, you may occasionally need to log in as root directly over SSH to perform certain configuration changes or troubleshoot. 

This guide will walk you through how to enable direct Ubuntu enable root ssh.

What is SSH Daemon?

A communication protocol known as SSH (Secure Shell) allows a client and a server to be in contact in a safe way. This is server, like one place where the sshd daemon resides and understands SSH connections.

Ubuntu enable root ssh uses the OpenSSH implementation of SSH. SSH access is controlled by these two main configuration files:

To enable ubuntu allow root ssh login, we'll need to modify both of these files.

Prerequisites

Before making configuration changes, ensure: 

You have sudo privileges on the Ubuntu system

You can access the server terminal using SSH keys

You have backups of critical data and configs

Physical access is tightly controlled

Enable root ssh ubuntu-increases attack surface and should only be done when absolutely necessary.

Step 1 — Create Root SSH Keys

The first step is to generate a public/private SSH key pair for the root account.

On your local machine, open a terminal and run:

Use the root_ssh name for easy identification

Leave the passphrase empty for now for simplicity

This will generate two files - root_ssh (private key) and root_ssh.pub (public key).

Step 2 — Copy Public Key to Remote Server

Now copy the public key to the remote Ubuntu server.

Using your regular user SSH access, run:

This securely copies the public key to the /tmp folder on the server.

Step 3 — Append Public Key to Root Authorized Keys

Log in to the remote server using your regular sudo user.

Go to the /root/.ssh folder and create an authorized_keys file:

Paste the contents of /tmp/root_ssh.pub into authorized_keys. Save and exit.

 This adds the root public key to the authorized key list to enable SSH authentication.

Step 4 — Lock Down File Permissions

Restrict permissions on authorized_keys using:

Also change ownership to root:

The key file is then encrypted by a mechanism, which is unknown to everyone but the only party holding the key itself is the confidential file.

Step 5 — Enable Root Login in SSH Daemon

Now enable direct root login by editing sshd_config:

Find the line for PermitRootLogin and set it to yes:

PermitRootLogin yes

Save changes and restart the SSH service:

sudo systemctl restart sshd

The SSH daemon will now allow password-based root login. But for better security, we'll use key authentication instead.

Step 6 — Disable Password Authentication

Restrict root login to ONLY SSH keys by disabling password auth:

Change PasswordAuthentication to no:

 PasswordAuthentication no

 Save changes and restart sshd once again. Root can now log in only via private key.

Step 7 — Log in as Root over SSH

You can now SSH as root from your local machine using the private key generated earlier:

Enter yes when prompted to confirm the identity. Then you will be logged in with root privileges over a secured SSH connection.

Optional — Use SSH Config for Simpler Login

To avoid long SSH commands, you can add an entry to your SSH configuration file:

Add:

Now you can simply run ssh rootserver to log in as root!

Securing Further

Here are some additional best practices to further secure root SSH access:

 Set a passphrase on the root private key for two-factor authentication

 Move the root key pair to a hardware security key for physical control

 UseSSH certificates instead of plain keys to enable revocation

 Only open the root SSH port to specific IP addresses if possible

 Monitor server logs closely for failed root login attempts

 Disable root SSH access completely when no longer needed

Logging in via Sudo Instead

 Rather than enable direct root login, an alternative approach is using sudo with regular user accounts that are part of the sudo group:

This is generally recommended over opening root SSH.

Final Words

That’s It! Follow the above guidelines to enable root ssh ubuntu. Allowing direct root login via SSH facilitates administrative access but also increases risks. Use with caution only when absolutely required. Always adhere to principles of least privilege.

Properly configuring SSH and using key-based access helps reduce risks while still enabling root access for specific situations. Follow the steps in this guide to enable ubuntu allow root ssh. By doing so, you will enable root login ubuntu and ensure that ssh allow root login is properly set up. Remember, ubuntu enable root login and ssh root login should be used responsibly to maintain the security of your system.