diff --git a/modules/global/ssh.nix b/modules/global/ssh.nix
index be80844..417d416 100644
--- a/modules/global/ssh.nix
+++ b/modules/global/ssh.nix
@@ -7,6 +7,7 @@ with lib;
     openFirewall = mkDefault true;
     sftpServerExecutable = "internal-sftp";
     settings = {
+      PasswordAuthentication = false;
       X11Forwarding = mkDefault false;
       GatewayPorts = mkDefault "yes";
       ClientAliveInterval = 60;