To start; I'm not completely sure, if this is the correct Exchange site for this question, but I couldn't find a better one - so I'll ask it here anyways.
Recently i started to think about the security of ssh. I have an Ubuntu VM (or any other linux distr.) running on a server, to which i can connect via ssh. To start securing the remote machine, I started using public/private keys for the authentication.
As a further step, I thought of disabling the root login - which has a 24 char long generated password.
My Questions now are:
- Do I even need to disable root login with such a password?
- Is this enough to make my remote machine secure? If no;
- What other steps should I take to secure my remote machine?