root login for webUI

Hi,

I wonder how others handle the fact that you need to enable root login in order for webUI to work?

Asking because allowing root on a linux system is considered unsafe.

is there any workaround?

Thanks
Alex

You don’t need to enable full root login with a password. The recommended approach is:

PermitRootLogin prohibit-password
PasswordAuthentication no
PubkeyAuthentication yes

This keeps things secure by allowing only key-based root logins (which the WebUI uses) while blocking password access entirely.

Edit: More info on this help page:

https://my.cpfence.app/knowledgebase/132/How-to-Secure-SSH-While-Allowing-cPFence-WebUI-Access.html