diff --git a/hosts/amahl/system.scm b/hosts/amahl/system.scm
index 1fd655a..340906e 100644
--- a/hosts/amahl/system.scm
+++ b/hosts/amahl/system.scm
@@ -99,7 +99,8 @@
 
      (service openssh-service-type
               (openssh-configuration
-               (password-authentication? #f)))
+               (password-authentication? #f)
+               (permit-root-login 'prohibit-password)))
 
      (service znc-service-type)