Servers – Ensure SSH PermitEmptyPasswords is Disabled

Support > Fixing Checks > Server

06 March, 2026

This check ensures that SSH does not allow login with empty passwords.

Allowing empty passwords significantly increases the risk of unauthorized access, as attackers can log in without credentials.

Check Details

Resource: Server
Check: Ensure SSH PermitEmptyPasswords is disabled
Risk: Enabling empty passwords allows unauthorized users to access the system without authentication.

Open a terminal session on the server with root or sudo privileges.
Edit the SSH configuration file:
```
sudo nano /etc/ssh/sshd_config
```
Add or update the following line in the configuration file:
```
PermitEmptyPasswords no
```
Save the file and exit the editor.
Restart the SSH service to apply changes:
```
sudo systemctl restart sshd
```
Verify the configuration:
```
sshd -T | grep permitemptypasswords
```
Ensure the output shows:
```
permitemptypasswords no
```
Perform regular audits to ensure the configuration remains secure.