diff --git a/configuration.nix b/configuration.nix
index 6aa93c8..82b2648 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -99,7 +99,7 @@ in
     enable = config.selfprivacy.ssh.enable;
     settings = {
       PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
-      PermitRootLogin = "yes";
+      PermitRootLogin = "prohibit-password";
       LoginGraceTime = 0;
     };
     openFirewall = false;