Secure Shell (SSH) is a cryptographic network protocol used for a secure connection between a client and a server.
In this tutorial, we’ll show you how to enable SSH on an Ubuntu Desktop machine. Enabling SSH will allow you to remotely connect to your Ubuntu machine and securely transfer files or perform administrative tasks.
Before continuing with this tutorial, make sure you are logged in as a user with sudo privileges.
Enabling SSH on Ubuntu
The SSH server is not installed by default on Ubuntu desktop systems but it can be easily installed from the standard Ubuntu repositories.
To install and enable SSH on your Ubuntu system complete the following steps:
Open your terminal either by using the
Ctrl+Alt+T keyboard shortcut or by clicking on the terminal icon and install the
openssh-server package by typing:
sudo apt update
Enter the password when prompted and enter
Y to continue with the installation.
Once the installation is completed, the SSH service will start automatically. To verify that the installation was successful and SSH service is running type the following command which will print the SSH server status:
sudo systemctl status ssh
You should see something like
Active: active (running) :
q to get back to the command line prompt.
Ubuntu comes with a firewall configuration tool called UFW. If the firewall is enabled on your system, make sure to open the SSH port:
sudo ufw allow ssh
Now that SSH is installed and running on your Ubuntu system you can connect to it via SSH from any remote machine. Linux and macOS systems have SSH clients installed by default. If you want to connect from a Windows machine then you can use an SSH client such as PuTTY.
Connecting to SSH Over LAN
To connect to your Ubuntu machine over LAN you only need to enter the following command:
username with the actual user name and
ip_address with the IP Address of the Ubuntu machine where you installed SSH.
If you don’t know your IP address you can easily find it using the ip command:
As you can see from the output, the system IP address is
Once you’ve found the IP address, login to remote machine by running the following
When you connect through SSH for the first time, you will see a message looking something like this:
The authenticity of host '192.168.121.111 (192.168.121.111)' can't be established. ECDSA key fingerprint is SHA256:Vybt22mVXuNuB5unE++yowF7lgA/9/2bLSiO3qmYWBY. Are you sure you want to continue connecting (yes/no)?
yes and you’ll be prompted to enter your password.
Warning: Permanently added '192.168.121.111' (ECDSA) to the list of known hosts. email@example.com's password:
Once you enter the password you will be greeted with a message similar to the one below.
Welcome to Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-33-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage ...
You are now logged in to your Ubuntu machine.
Connecting to SSH Over Internet
To connect to your Ubuntu machine over the Internet you will need to know your public IP Address and to configure your router to accept data on port 22 and send it to the Ubuntu machine where the SSH is running.
To determine the public IP address of the machine you’re trying to SSH to, simply visit the following URL:
When it comes to setting up port forwarding each router has a different way to setup port forwarding. You should consult your router documentation about how to set up port forwarding. In short, you need to enter the port number where requests will be made (Default SSH port is 22) and the private IP address you found earlier (using the
ip a command) of the machine where the SSH is running.
Once you’ve found the IP address, and configured your router you can log in by typing:
If you are exposing your machine to the Internet it is a good idea to implement some security measures. The most basic one is to configure your router to accept SSH traffic on a non-standard port and to forward it to port 22 on the machine running the SSH service.
You can also set up an SSH key-based authentication and connect to your Ubuntu machine without entering a password.
Disabling SSH on Ubuntu
If for some reason you want to disable SSH on your Ubuntu machine you can simply stop the SSH service by running:
sudo systemctl stop ssh
To start it again run:
sudo systemctl start ssh
To disable the SSH service to start during system boot run:
sudo systemctl disable ssh
To enable it again type:
sudo systemctl enable ssh
You have learned how to install and enable SSH on your Ubuntu 18.04. You can now login to your machine and perform common sysadmin tasks through the command prompt.
By default, SSH listens on port 22. Changing the default SSH port adds an extra layer of security to your server by reducing the risk of automated attacks.
If you are managing multiple systems, you can simplify your workflow by defining all of your connections in the SSH config file.
If you have any questions, please leave a comment below.