The Raspberry Pi is a remarkable piece of technology that enabled a whole slew of budget-friendly projects and allowed people to get extremely clever without having to break the bank.

https://www.ssh.com/ssh/keygen/

https://christitus.com/ssh-guide/

https://medium.com/@jasonrigden/hardening-ssh-1bcb99cd4cef

https://infosec.mozilla.org/guidelines/openssh.html

https://superuser.com/questions/868998/how-can-i-find-a-list-of-macs-ciphers-and-kexalgorithms-that-my-openssh-client

RSA-4096 and ED25519 are the only protocols to be using that are considered “secure” currently. Get initial keys set up, then copy the other keys over using a master machine, or if starting from scratch, get as many keys on before turning off password auth Public key goes into /home/user/.ssh/authorized_keys . Do this for each user you want to sign in as. Ideally, stick to one and sign in to other user after sign in (su - user) Run ssh-audit and find where you can improve

Before you begin, on the home folder of each user you are going to remote into, run the following

• ssh-keygen -t rsa
• ssh-copy-id -i ~/.ssh/id.rsa.pub user@remoteserver
  • above may not work depending on your setup. It will most backend work for you
• If the above does not work:
  • scp ~/.ssh/id_rsa.pub user@remoteserver:~
  • cat ~/id_rsa.pub » ~/.ssh/authorized_keys

https://devops.ionos.com/tutorials/use-ssh-keys-with-putty-on-windows