{"id":1375,"date":"2026-09-03T11:37:53","date_gmt":"2026-09-03T06:07:53","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/how-to-disable-root-ssh-login-create-sudo-user-ubuntu\/"},"modified":"2026-09-12T12:45:19","modified_gmt":"2026-09-12T07:15:19","slug":"how-to-disable-root-ssh-login-create-sudo-user-ubuntu","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/how-to-disable-root-ssh-login-create-sudo-user-ubuntu\/","title":{"rendered":"How to Disable Root SSH Login and Create a Sudo User on Ubuntu (Best Practices)"},"content":{"rendered":"
\n

\n Quick Answer:<\/strong> To disable root login on Ubuntu, create a new administrative user (adduser deployer<\/code>), add the user to the sudo group (usermod -aG sudo deployer<\/code>), copy authorized SSH keys to \/home\/deployer\/.ssh\/<\/code>, edit \/etc\/ssh\/sshd_config<\/code> to set PermitRootLogin no<\/code>, and restart OpenSSH with sudo systemctl restart ssh<\/code>.\n <\/p>\n

\n \u23f1\ufe0f 5 min read (915 words)<\/span>
\n \ud83d\udee1\ufe0f Verified on Ubuntu 24.04 \/ Debian 12<\/span>
\n \ud83d\udd04 Updated for 2026 Edition<\/span>\n<\/div>\n

<\/p>\n

\n
\n
\n \ud83d\udcd1<\/span> Table of Contents\n <\/div>\n

Guide Index<\/span>\n <\/div>\n

\n 1<\/span>Why Direct Root Login is a Critical Security Risk<\/span>›<\/span><\/a>2<\/span>Step 1: Creating a Dedicated Administrative User<\/span>›<\/span><\/a>3<\/span>Step 2: Migrating SSH Keys to the New Sudo User<\/span>›<\/span><\/a>4<\/span>Step 3: Disabling Root Login in OpenSSH Configuration<\/span>›<\/span><\/a>5<\/span>Step 4: Testing the Configuration and Restarting SSH<\/span>›<\/span><\/a>6<\/span>Configuring Passwordless Sudo for Specific Automated Tasks<\/span>›<\/span><\/a>7<\/span>Auditing Sudo Execution Logs in \/var\/log\/auth.log<\/span>›<\/span><\/a>8<\/span>Advanced Sudo Privilege Configuration & User Expirations<\/span>›<\/span><\/a>9<\/span>Setting Account Password Expiration and Inactivity Locks<\/span>›<\/span><\/a>10<\/span>Restricting Sudo Access by IP Address and Terminal TTY<\/span>›<\/span><\/a>11<\/span>Setting Up Real-Time Slack or Telegram Alerts for Sudo Execution<\/span>›<\/span><\/a>12<\/span>Auditing Sudo Permissions with Automated Security Benchmarks<\/span>›<\/span><\/a>13<\/span>Frequently Asked Questions<\/span>›<\/span><\/a>\n <\/div>\n<\/div>\n<\/div>\n

Why Direct Root Login is a Critical Security Risk<\/h2>\n

In Linux systems administration, the root<\/code> superuser possesses absolute power to modify files, delete databases, and reconfigure kernels without confirmation. Because the root<\/code> username exists on every Linux system, 100% of automated brute-force attacks target this exact account name.<\/p>\n

<\/p>\n

\n
\n
\n \u26a1 Executive Summary & Key Takeaways
\n <\/span>
\n Verified Guide<\/span>\n <\/div>\n