{"id":140,"date":"2025-01-24T08:39:45","date_gmt":"2025-01-24T11:39:45","guid":{"rendered":"https:\/\/blog.vpsbrasil.com.br\/?p=140"},"modified":"2025-01-24T08:39:46","modified_gmt":"2025-01-24T11:39:46","slug":"tutorial-protegendo-seu-vps-com-certificados-ssh-e-desativando-login-por-senha","status":"publish","type":"post","link":"http:\/\/blog.vpsbrasil.com.br\/index.php\/2025\/01\/24\/tutorial-protegendo-seu-vps-com-certificados-ssh-e-desativando-login-por-senha\/","title":{"rendered":"Tutorial: Protegendo Seu VPS com Certificados SSH e Desativando Login por Senha"},"content":{"rendered":"\n<p>Ter um VPS seguro \u00e9 essencial para proteger seus dados e impedir acessos n\u00e3o autorizados. Usar Certificados SSH em vez de senhas \u00e9 uma das formas mais seguras de acesso remoto. Este tutorial ensina como configurar Certificados SSH e desativar o login por senha em seu VPS.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Por que Usar Certificados SSH?<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Maior Seguran\u00e7a:<\/strong> Certificados SSH s\u00e3o muito mais dif\u00edceis de serem comprometidos do que senhas.<\/li>\n\n\n\n<li><strong>Automa\u00e7\u00e3o:<\/strong> Facilita a conex\u00e3o autom\u00e1tica sem precisar digitar senhas.<\/li>\n\n\n\n<li><strong>Sem Riscos de Ataques de For\u00e7a Bruta:<\/strong> Ataques focados em senhas tornam-se ineficazes.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>1. Pr\u00e9-requisitos<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Acesso root ou usu\u00e1rio com privil\u00e9gios sudo no VPS.<\/li>\n\n\n\n<li>Um cliente SSH no computador local (como o OpenSSH ou PuTTY).<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>2. Gerando Chaves SSH no Cliente Local<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 1: Gerar Chave SSH<\/strong><\/h4>\n\n\n\n<p>No terminal do cliente local, digite:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-1\" data-shcb-language-name=\"JavaScript\" data-shcb-language-slug=\"javascript\"><span><code class=\"hljs language-javascript\">ssh-keygen -t rsa -b <span class=\"hljs-number\">4096<\/span> -C <span class=\"hljs-string\">\"seu-email@dominio.com\"<\/span>\n<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-1\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">JavaScript<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">javascript<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li><strong><code>-t rsa<\/code><\/strong>: Tipo da chave.<\/li>\n\n\n\n<li><strong><code>-b 4096<\/code><\/strong>: Tamanho da chave (quanto maior, mais segura).<\/li>\n\n\n\n<li><strong><code>-C<\/code><\/strong>: Coment\u00e1rio para identificar a chave.<\/li>\n<\/ul>\n\n\n\n<p>Ao ser solicitado:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Escolha o local para salvar a chave (pressione Enter para salvar em <code>~\/.ssh\/id_rsa<\/code>).<\/li>\n\n\n\n<li>Digite uma senha para proteger a chave privada (opcional, mas recomendado).<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 2: Verifique os Arquivos Gerados<\/strong><\/h4>\n\n\n\n<p>As chaves ser\u00e3o salvas no diret\u00f3rio <code>~\/.ssh\/<\/code>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>id_rsa:<\/strong> Chave privada (n\u00e3o compartilhe).<\/li>\n\n\n\n<li><strong>id_rsa.pub:<\/strong> Chave p\u00fablica (essa ser\u00e1 enviada ao servidor).<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>3. Adicionando a Chave P\u00fablica ao Servidor VPS<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 1: Copie a Chave P\u00fablica para o VPS<\/strong><\/h4>\n\n\n\n<p>Use o comando <code>ssh-copy-id<\/code>:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-2\" data-shcb-language-name=\"JavaScript\" data-shcb-language-slug=\"javascript\"><span><code class=\"hljs language-javascript\">ssh-copy-id -i ~<span class=\"hljs-regexp\">\/.ssh\/i<\/span>d_rsa.pub usuario@ip-<span class=\"hljs-keyword\">do<\/span>-vps\n<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-2\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">JavaScript<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">javascript<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li><strong><code>usuario<\/code><\/strong>: Nome do usu\u00e1rio no servidor.<\/li>\n\n\n\n<li><strong><code>ip-do-vps<\/code><\/strong>: Endere\u00e7o IP do servidor.<\/li>\n<\/ul>\n\n\n\n<p>Caso o <code>ssh-copy-id<\/code> n\u00e3o esteja dispon\u00edvel, voc\u00ea pode copiar manualmente:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-3\" data-shcb-language-name=\"JavaScript\" data-shcb-language-slug=\"javascript\"><span><code class=\"hljs language-javascript\">cat ~<span class=\"hljs-regexp\">\/.ssh\/i<\/span>d_rsa.pub\n<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-3\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">JavaScript<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">javascript<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<p>No VPS, adicione a sa\u00edda ao arquivo <code>~\/.ssh\/authorized_keys<\/code>:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-4\" data-shcb-language-name=\"JavaScript\" data-shcb-language-slug=\"javascript\"><span><code class=\"hljs language-javascript\">echo <span class=\"hljs-string\">\"conte\u00fado-da-chave\"<\/span> &gt;&gt; ~<span class=\"hljs-regexp\">\/.ssh\/<\/span>authorized_keys\nchmod <span class=\"hljs-number\">600<\/span> ~<span class=\"hljs-regexp\">\/.ssh\/<\/span>authorized_keys\n<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-4\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">JavaScript<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">javascript<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 2: Teste a Conex\u00e3o com a Chave<\/strong><\/h4>\n\n\n\n<p>Conecte-se ao VPS sem usar senha:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-5\" data-shcb-language-name=\"JavaScript\" data-shcb-language-slug=\"javascript\"><span><code class=\"hljs language-javascript\">ssh usuario@ip-<span class=\"hljs-keyword\">do<\/span>-vps\n<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-5\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">JavaScript<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">javascript<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>4. Desativando o Login por Senha<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 1: Edite o Arquivo de Configura\u00e7\u00e3o do SSH<\/strong><\/h4>\n\n\n\n<p>No VPS, abra o arquivo de configura\u00e7\u00e3o do SSH:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo nano \/etc\/ssh\/sshd_config\n<\/code><\/span><\/pre>\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 2: Atualize as Configura\u00e7\u00f5es<\/strong><\/h4>\n\n\n\n<p>Localize e altere as seguintes linhas:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">PasswordAuthentication no\nChallengeResponseAuthentication no\nUsePAM no\n<\/code><\/span><\/pre>\n\n\n<h4 class=\"wp-block-heading\"><strong>Passo 3: Reinicie o Servi\u00e7o SSH<\/strong><\/h4>\n\n\n\n<p>Ap\u00f3s salvar as altera\u00e7\u00f5es, reinicie o servi\u00e7o SSH para aplicar as mudan\u00e7as:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo systemctl restart sshd\n<\/code><\/span><\/pre>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>5. Garantindo o Acesso em Caso de Problemas<\/strong><\/h3>\n\n\n\n<p>Antes de desativar o login por senha:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Certifique-se de que sua chave SSH funciona corretamente.<\/li>\n\n\n\n<li>Mantenha uma segunda conex\u00e3o ativa at\u00e9 confirmar que a configura\u00e7\u00e3o est\u00e1 funcionando.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>6. Testando a Configura\u00e7\u00e3o<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Desconecte-se do VPS.<\/li>\n\n\n\n<li>Tente se conectar novamente usando a chave SSH.<\/li>\n\n\n\n<li>Verifique se a conex\u00e3o por senha foi desativada.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Conclus\u00e3o<\/strong><\/h3>\n\n\n\n<p>Configurar Certificados SSH e desativar o login por senha no VPS melhora significativamente a seguran\u00e7a, protegendo seu servidor contra acessos n\u00e3o autorizados e ataques de for\u00e7a bruta.<\/p>\n\n\n\n<p>Se voc\u00ea ainda n\u00e3o tem um VPS, conhe\u00e7a os planos da <strong>VPS Brasil<\/strong> e comece agora com seguran\u00e7a e desempenho garantidos! <a href=\"https:\/\/www.vpsbrasil.com.br\">https:\/\/www.vpsbrasil.com.br<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ter um VPS seguro \u00e9 essencial para proteger seus dados e impedir acessos n\u00e3o autorizados. Usar Certificados SSH em vez de senhas \u00e9 uma das formas mais seguras de acesso remoto. Este tutorial ensina como configurar Certificados SSH e desativar o login por senha em seu VPS. Por que Usar Certificados SSH? 1. Pr\u00e9-requisitos 2. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":141,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-140","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutoriais"],"_links":{"self":[{"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":1,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/140\/revisions"}],"predecessor-version":[{"id":142,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/140\/revisions\/142"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/media\/141"}],"wp:attachment":[{"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/media?parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/categories?post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/tags?post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}