diff --git a/configuration.nix b/configuration.nix
index 0fd3250..4fc9baa 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -100,7 +100,7 @@ in
     enable = config.selfprivacy.ssh.enable;
     settings = {
       PasswordAuthentication = false;
-      PermitRootLogin = "yes";
+      PermitRootLogin = "prohibit-password";
     };
     openFirewall = false;