diff --git a/modules/darwin/security.nix b/modules/darwin/security.nix
index 09ba4877..47b50033 100644
--- a/modules/darwin/security.nix
+++ b/modules/darwin/security.nix
@@ -17,4 +17,10 @@ in {
     StandardErrorPath = "${homeDir}/Library/Logs/gnupg-agent.stderr.log";
     StandardOutPath = "${homeDir}/Library/Logs/gnupg-agent.stdout.log";
   };
+
+  # Disable password authentication for SSH
+  environment.etc."ssh/sshd_config.d/200-disable-password-auth.conf".text = ''
+    PasswordAuthentication no
+    KbdInteractiveAuthentication no
+  '';
 }