diff --git a/modules/ssh/hardened-openssh.nix b/modules/ssh/hardened-openssh.nix
index 35df3a11..1e1e827b 100644
--- a/modules/ssh/hardened-openssh.nix
+++ b/modules/ssh/hardened-openssh.nix
@@ -20,6 +20,7 @@ in
     services.openssh.settings = optionalAttrs cfg.harden {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
+      AuthenticationMethods = "publickey";
       KbdInteractiveAuthentication = false;
       ChallengeResponseAuthentication = false;
       X11Forwarding = false;