1# Secure Shell Access {#sec-ssh}
2
3Secure shell (SSH) access to your machine can be enabled by setting:
4
5```nix
6{
7 services.openssh.enable = true;
8}
9```
10
11By default, root logins using a password are disallowed. They can be
12disabled entirely by setting
13[](#opt-services.openssh.settings.PermitRootLogin) to `"no"`.
14
15You can declaratively specify authorised public keys for a user
16as follows:
17
18```nix
19{
20 users.users.alice.openssh.authorizedKeys.keys =
21 [ "ssh-ed25519 AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];
22}
23```