How to Enable OpenSSH Server in Windows 11

You enable OpenSSH Server in Windows 11 by installing it as an optional feature.

OpenSSH Server allows you to securely connect to and manage your Windows 11 PC remotely using SSH (Secure Shell) protocol. It creates an encrypted connection, letting you run commands and transfer files as if you were physically at the computer.

This feature is not enabled by default in Windows 11. You’ll need to manually add it through settings-app-in-windows-11/" class="sal-link" rel="noopener" target="_blank" data-sal-id="10685">Windows Settings or using PowerShell commands.

Once installed and configured, your Windows 11 machine can accept secure incoming SSH connections, making it a powerful tool for system administrators and remote workers. You can access it using an SSH client from another computer on your network or even over the internet.

How to Install OpenSSH Server

You can install this feature using the Settings menu or the command line. Admin privileges are required for these steps.

Method 1: Using Windows Settings

1. Press Windows key + I to open Settings.
2. Go to Apps > Optional features.
3. Click View features and search for OpenSSH Server.
4. Select it and click Install.

Method 2: Using PowerShell (Fastest Way)

You can install the server instantly using PowerShell. Open PowerShell as an administrator and run this command:

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

Starting and Managing the Service

After installation, you must start the service. Admin privileges are required.

1. Open the Services app from the Start menu.
2. Find OpenSSH SSH Server in the list.
3. Right-click it and select Start.
4. To ensure it starts automatically, right-click it, select Properties, and change Startup type to Automatic.

You can verify the status anytime by running Get-Service sshd in PowerShell.

Configuration and Security

The main configuration file is located at C:\ProgramData\ssh\sshd_config. You can edit this file to change the default port or restrict access.

Setting up Key-Based Authentication

Passwords can be guessed. Using an SSH key pair is much safer. You generate a public and private key, then place the public key in C:\Users\username\.ssh\authorized_keys. This allows you to log in without typing a password every time.

Troubleshooting

If you cannot connect, check your Windows Firewall. The installation usually creates a rule, but you may need to ensure port 22 (or your custom port) is open. Use the command netsh advfirewall firewall show rule name=all to verify.

Summary

OpenSSH Server is a secure way to manage your Windows 11 computer remotely. You can install it via Settings or PowerShell. Remember to start the service in the Services console and configure your firewall. For maximum security, use key-based authentication instead of passwords. For more details, visit the official Microsoft OpenSSH documentation.” }