Good practices for using ssh

The following are practices for using ssh (as a client) that I've learned over the years (sometimes due to direct exposure, some from other people). You are probably used to using ssh to login to your servers, but you might not have thought about the implications of what you are doing. Some ideas will probably be obvious, others maybe you haven't though about. Hopefully this document will give you some ideas of how to be more secure.


Thanks to: fil, elmo, ryanc, ryanf, anarcat, stefani and others for contributions to this document.

Matt Taggart <>