How to Set Up SSH: A Complete Guide for Secure Remote Connections 2026

Introduction

Whether you’re managing remote servers, accessing a system from a distance, or working with cloud services, learning how to set up SSH is essential for secure, encrypted communications. SSH, or Secure Shell, allows you to securely log into remote machines, execute commands, transfer files, and configure devices without exposing sensitive data. In this detailed guide, we’ll walk you through how to set up SSH on various platforms such as Linux, macOS, and Windows, and how to leverage key-based authentication for maximum security.

What is SSH?

Before we get into the specifics of how to set up SSH, let’s briefly explain what SSH is. SSH is a network protocol that enables secure communication between a local machine (client) and a remote machine (server). It’s widely used by system administrators, developers, and anyone who requires secure access to remote systems. SSH uses encryption to protect data during transmission, ensuring that sensitive information such as passwords and commands is not exposed to unauthorized parties.

SSH offers a secure way to:

• Log in to remote servers
• Execute commands on remote systems
• Transfer files securely
• Tunnel network connections

With its robust security features, SSH is the go-to method for remote access in a wide range of scenarios. Now, let’s dive into how to set up SSH step by step.

How to Set Up SSH on Linux

Step 1: Install OpenSSH Server

If you’re using a Linux machine as a server, the first step in how to set up SSH is to ensure the SSH server (OpenSSH) is installed. Most Linux distributions come with OpenSSH pre-installed, but if it’s not installed on your system, you can easily add it.

1. Update your package list:
   First, update your package index to ensure you’re installing the latest version of OpenSSH: sudo apt-get update
2. Install OpenSSH server:
   Install OpenSSH Server using the following command: sudo apt-get install openssh-server
3. Verify SSH installation:
   To verify that OpenSSH is installed and running, use the following command: sudo systemctl status ssh This will show you the status of the SSH service.

Step 2: Configure SSH Server

How to Set Up SSH? Once you have installed OpenSSH, it’s time to configure it. You may want to adjust settings such as authentication methods, port number, and other parameters to increase security.

1. Edit the SSH configuration file:
   The main configuration file for SSH is located at /etc/ssh/sshd_config. You can open and edit this file using a text editor: sudo nano /etc/ssh/sshd_config
2. Disable password authentication (optional):
   For enhanced security, it is recommended to use SSH key-based authentication instead of passwords. To do this, set the following option: PasswordAuthentication no
3. Change the default SSH port (optional):
   By default, SSH runs on port 22, which is a known target for attackers. You can change the port by modifying the Port directive in the configuration file: Port 2222
4. Restart SSH:
   After making changes to the SSH configuration, restart the service to apply the changes: sudo systemctl restart ssh

Step 3: Allow SSH Through the Firewall

How to Set Up SSH? If you have a firewall enabled on your server, you will need to allow SSH connections. To do this, run the following command:

sudo ufw allow ssh

If you changed the port, you would need to open that specific port:

sudo ufw allow 2222/tcp

Step 4: Test SSH Connection

To verify that you’ve successfully set up SSH, try to connect from a remote machine:

ssh username@server-ip-address

If you’re using a custom port, specify it with the -p flag:

ssh -p 2222 username@server-ip-address

How to Set Up SSH on macOS

How to Set Up SSH? Setting up SSH on macOS is slightly different since macOS comes with SSH pre-installed. To set up SSH for remote access, follow these steps:

Step 1: Enable Remote Login

1. Open System Preferences:
   Click on the Apple icon in the top-left corner and select System Preferences.
2. Click on Sharing:
   In the System Preferences window, find and click on Sharing.
3. Enable Remote Login:
   Check the box next to Remote Login. This will allow your Mac to accept incoming SSH connections. You can choose which users are allowed to log in remotely.

Step 2: Configure the Firewall (if applicable)

If you’re using a firewall on macOS, ensure that SSH is allowed through:

1. Go to System Preferences > Security & Privacy.
2. Click the Firewall tab and ensure it’s turned on.
3. If necessary, click Firewall Options and ensure that Remote Login is allowed.

Step 3: Connect to Your Mac via SSH

Once you’ve enabled remote login, you can connect to your Mac from another machine using SSH. Open a terminal on the remote system and run:

ssh username@mac-ip-address

If prompted, enter your password to authenticate.

How to Set Up SSH on Windows

How to Set Up SSH? Windows doesn’t come with an SSH server by default, but it’s easy to install one. With the introduction of OpenSSH in Windows 10, setting up SSH on Windows is simpler than ever.

Step 1: Install OpenSSH Server

1. Open Settings:
   Click on the Start menu and select Settings.
2. Go to Apps > Optional Features:
   Under Apps, select Optional Features and then click Add a feature.
3. Install OpenSSH Server:
   Search for OpenSSH Server and install it. After installation, the SSH server will be available.

Step 2: Start the SSH Service

1. Start the SSH service:
   Open PowerShell as an administrator and run the following command: Start-Service sshd
2. Set the SSH service to start automatically:
   To ensure SSH starts automatically when your computer boots up, run the following command: Set-Service -Name sshd -StartupType ‘Automatic’

Step 3: Allow SSH Through the Firewall

To allow SSH traffic through the firewall, use the following PowerShell command:

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

Step 4: Test SSH Connection

To test the SSH connection, use the following command on a remote machine:

ssh username@windows-ip-address

How to Set Up SSH Key-Based Authentication

How to Set Up SSH? For improved security, it’s a best practice to use SSH key-based authentication instead of relying on passwords. Here’s how you can set it up.

Step 1: Generate SSH Keys on the Client

On the client machine, generate a pair of SSH keys (private and public):

ssh-keygen -t rsa -b 4096

Choose the default location for the key (~/.ssh/id_rsa) and set a passphrase if you wish.

Step 2: Copy the Public Key to the Server

To copy your public key to the server, use the ssh-copy-id tool (Linux/macOS):

ssh-copy-id username@server-ip-address

Alternatively, you can manually copy the contents of ~/.ssh/id_rsa.pub and append it to the ~/.ssh/authorized_keys file on the server.

Step 3: Disable Password Authentication

Once you’ve set up SSH keys, it’s recommended to disable password authentication to ensure that only key-based login is allowed. Open the SSH server configuration file:

sudo nano /etc/ssh/sshd_config

Find and change the following line:

PasswordAuthentication no

Restart the SSH service:

sudo systemctl restart ssh

Troubleshooting SSH Setup

Sometimes, even after following the steps to set up SSH, you may encounter issues. Here are some common troubleshooting tips:

1. Check SSH service status:
   If you can’t connect, ensure that the SSH service is running. On Linux, use: sudo systemctl status ssh
2. Check firewall settings:
   Ensure that your firewall is not blocking SSH traffic. Double-check that the port (default is 22) is open on the server.
3. Verify SSH key configuration:
   If using key-based authentication, ensure that the public key is correctly placed in the ~/.ssh/authorized_keys file on the server and that the file permissions are correctly set.

Conclusion

Setting up SSH is an essential skill for anyone who works with remote systems, whether you’re an administrator, developer, or enthusiast. By following the steps outlined in this guide, you should now have a clear understanding of how to set up SSH on Linux, macOS, and Windows. By using key-based authentication and configuring your system correctly, you can ensure that your remote connections are both secure and efficient. Regularly updating your SSH setup and employing best practices will help maintain security in the long run.

FAQs

What is the default port for SSH?

The default port for SSH is 22. However, changing this port is recommended for security purposes.

How do I test if SSH is working?

You can test your SSH setup by attempting to connect to the server from a remote machine using the command:

ssh username@server-ip-address

Can I use SSH with a password?

Yes, but using key-based authentication is recommended for better security. You can disable password authentication by modifying the sshd_config file.

How can I secure my SSH server?

To secure your SSH server, use key-based authentication, disable password login, change the default SSH port, and regularly monitor login attempts.