But the SSH keys are based on asymmetric crypto, not shared secrets.
reply> What people think of as a very strong password often has <100 "security bits" of entropy.
replyThe best password in the world will still be defeated by a simple keylogger or breach of your password manager.
2^100 is a lot of things to try though
replyEspecially if you have Fail2Ban set up.
reply> if you have Fail2Ban set up.
replyWorth noting that if you are running a remotely recent version of SSH it has everything you need built-in. No need for Fail2Ban on SSH these days if your config is fully modernised.
Fail2Ban is kind of required unless one like running out of sockets and are unburden by high cpu and disk load.
replyHuh? I run ssh (OpenSSH) on port 22 with root login enabled and no fail2ban on a single-core laptop cpu from fifteen years ago. The load average is 0.00 even with the small mail and web server that runs on it
replyWhat cpu and especially what disk load are you talking about? Also not running out of sockets, not sure if that's RAM-dependent (the box has 2GB)