{"id":636,"date":"2016-09-08T00:00:00","date_gmt":"2016-09-08T00:00:00","guid":{"rendered":"http:\/\/blog.hostinger.io\/hostinger-tutorials\/uncategorized\/vpshow-to-change-ssh-port-vps\/"},"modified":"2026-03-10T09:31:30","modified_gmt":"2026-03-10T09:31:30","slug":"how-to-change-ssh-port-vps","status":"publish","type":"post","link":"\/ca\/tutorials\/how-to-change-ssh-port-vps\/","title":{"rendered":"How to change the SSH port"},"content":{"rendered":"

SSH, or Secure Shell, is an essential protocol for securely accessing and managing remote servers. It encrypts all communication, ensuring that data remains protected from unauthorized interception.<\/p>

By default, SSH runs on port 22, which is often targeted by brute force attacks. Changing the default SSH port can significantly enhance security by reducing the likelihood of automated attacks.<\/p>

This article will guide you through all the steps to changing the SSH port on a Linux virtual private server (VPS), from selecting the appropriate new port to ensuring your server remains accessible after the change.<\/p>

Download ultimate SSH commands cheat sheet<\/a><\/p>

\n\n\n\n\n<\/p>

Choosing a new SSH port<\/h2>

It’s important to select a port that is not already in use by other services to avoid potential conflicts and reduce security risks on your VPS<\/a>. Here are some of the most commonly used port numbers with their associated services and protocols:<\/p>

Port number<\/strong><\/td>Service<\/strong><\/td>Protocol<\/strong><\/td><\/tr>
20<\/td>FTP (data transfer)<\/td>TCP<\/td><\/tr>
21<\/td>FTP (control)<\/td>TCP<\/td><\/tr>
22<\/td>SSH<\/td>TCP<\/td><\/tr>
23<\/td>Telnet<\/td>TCP<\/td><\/tr>
25<\/td>SMTP<\/td>TCP<\/td><\/tr>
53<\/td>DNS<\/td>TCP\/UDP<\/td><\/tr>
67\/68<\/td>DHCP<\/td>UDP<\/td><\/tr>
69<\/td>TFTP<\/td>UDP<\/td><\/tr>
80<\/td>HTTP<\/td>TCP<\/td><\/tr>
110<\/td>POP3<\/td>TCP<\/td><\/tr>
123<\/td>NTP<\/td>UDP<\/td><\/tr>
137\/138\/139<\/td>NetBIOS<\/td>TCP\/UDP<\/td><\/tr>
143<\/td>IMAP<\/td>TCP<\/td><\/tr>
161\/162<\/td>SNMP<\/td>TCP\/UDP<\/td><\/tr>
179<\/td>BGP<\/td>TCP<\/td><\/tr>
389<\/td>LDAP<\/td>TCP\/UDP<\/td><\/tr>
443<\/td>HTTPS<\/td>TCP<\/td><\/tr>
636<\/td>LDAPS<\/td>TCP\/UDP<\/td><\/tr>
989\/990<\/td>FTPS<\/td>TCP<\/td><\/tr>
3306<\/td>MySQL<\/td>TCP<\/td><\/tr>
8080<\/td>Alternative to HTTP (web)<\/td>TCP<\/td><\/tr>
8443<\/td>Alternative to HTTPS (web)<\/td>TCP<\/td><\/tr><\/tbody><\/table><\/figure>

Additionally, consider selecting a port outside the well-known range (0-1023<\/strong>) and the registered ports range (1024-49151<\/strong>). It’s advisable to opt for a custom port within the dynamic or private ports range (49152-65535<\/strong>).<\/p>

\n
\n \n \n <\/svg>\n

\n Suggested Reading <\/p>\n <\/div>\n

SSH uses three different encryption techniques: symmetric, asymmetric, and hashing. Learn more about these methods in our SSH tutorial<\/a> article.<\/p>\n <\/div>\n \n\n\n\n<\/p>

How to change the default SSH port<\/h2>

Now that you have chosen a new port, let’s proceed with the steps to implement the change.<\/p>

1. Access your server via SSH<\/h3>

Before you can make any changes, you need to access your server securely. Follow these steps to connect to your server via SSH:<\/p>

    \n
  1. Whether you’re using Windows, macOS, or Linux, start by opening a new terminal window. On Windows, you may need an SSH client like PuTTY<\/a>.<\/li>\n\n\n\n
  2. Use the following command to connect to your server. Replace username<\/strong> with your actual server username and server_ip<\/strong> with your server’s IP address:<\/li>\n<\/ol>
    ssh username@server_ip<\/pre>
      \n
    1. Enter the password associated with the username you provided. For enhanced security, it is recommended to use SSH keys<\/a> instead of passwords.<\/li>\n<\/ol>
      2. Edit the SSH configuration file<\/h3>
      Once you’ve successfully accessed your server, the next step is modifying the SSH configuration to use a new port. This involves editing the sshd_config<\/strong> file, which controls various parameters of your SSH daemon.<\/p>
        \n
      1. Use the following command to open the SSH daemon configuration file in the nano text editor<\/a>:<\/li>\n<\/ol>
        sudo nano \/etc\/ssh\/sshd_config<\/pre>
          \n
        1. Scroll down until you find the line that includes #Port 22<\/strong>. This line is commented out by default, and the number 22<\/strong> represents the default port.<\/li>\n\n\n\n
        2. Remove the #<\/strong> to uncomment this line and change 22<\/strong> to your desired port number, such as 61189<\/strong>.<\/li>\n<\/ol>
          \"Editing