Hello, @hrsetyono

What you can do is to tweak the ssh config file and allow only PubKey authentication for the root username and have the PasswordAuthentication for the other users enabled.

You can use Match in the sshd_config

PasswordAuthentication no
Match User root
PasswordAuthentication yes
Match all

and then restart the ssh daemon.

Hope that this helps!

Regards,
Alex

So I’m thinking of a hacky solution. After changing the PasswordAuthentication to yes, what if I simply do not set the root password?

That way nobody know the password and my root is still basically secured to PubKey only.

But is there such thing as default root password? If there is, how strong is it?