Raspberry Pi Security

SSH

It is crucial to add security to the new copy of NOOB or Raspbian. I installed a new copy of Raspbian for Aug 2020 and it only took a few mins before the machine was being brute force attacked. So let's start securing your Pi.

Starting a New Pi

Leave the network port unplugged or wiki disconnected until you have successfully configured a new password to replace the default. You can change the default password by using:

sudo raspi-config

Now let's plug in the device to the network and ssh into it.

Creating a New User

The first step to being secure is to remove the know capabilities of the OS. So let's disable the pi user. Before we do this we need to create a new user.

sudo /usr/sbin/useradd --groups sudo -m <your user>

Now, lets set up a password for the new user:

sudo passwd <your user>

Resetting the Root Password

Now we need to reset the root password by using:

sudo passwd root

Disable Default Raspberry Pi User (aka Pi)

You can disable the Pi user by running:

sudo passwd --lock pi

Great work so far!