Secure remote access

Use key-based authentication, keep OpenSSH updated, and restrict administrative access to trusted users. Before changing SSH settings, keep a second session open to avoid accidental lockout.