SSH security

[xman111]

Hey guys, quick question.  I have an Unraid server and a Freenas server connected with a peer to peer VPN at different locations.  Is it ok to just use passwords for SSH since our houses are connected via a VPN and no ports are open on the router?   I am trying to set up Duplicacy with SFTP and a password is much easier but i want it to be secure.

Edited January 18, 2020 by xman111

[PeteAsking]

Sounds pretty secure to me

[xman111]

2 minutes ago, PeteAsking said:

Sounds pretty secure to me

not sure if you are kidding, lol?   not sure if it was clear but my servers are at different houses in the same city connected via pfsense openvpn over the internet.

Edited January 18, 2020 by xman111

[PeteAsking]

Still sounds secure to me. Openvpn is pretty good. 

[xman111]

thanks man..  i was just not sure about using SSH without keys even though it's going over the internet, i assumed it would be going though the vpn tunnel.

[PeteAsking]

7 minutes ago, xman111 said:

thanks man..  i was just not sure about using SSH without keys even though it's going over the internet, i assumed it would be going though the vpn tunnel.

If you are connecting to the internal (lan) address via ssh then for sure its being routed via the openvpn tunnel. As no ports are open on the router I imagine this is how you connect. 

[xman111]

yup, i setup a share on freenas and i am connecting to 192.168.1.100 from 192.168.10.100 over the internet.