SSH gives you a remote shell; the editing itself is done by a terminal editor running on the VPS. Connect with ssh user@server, inspect the target file, make a backup when the file matters, then open it with nano or vim. Save, validate the application’s configuration, and only then reload or restart its service.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
For a root-owned file, use an authorized workflow such as sudoedit instead of changing ownership or applying broad permissions. When editing SSH’s own configuration, keep a second session or provider console open, run sudo sshd -t, and do not close your working connection until the new configuration has been proven safe.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →What editing over SSH actually does
An SSH connection is an encrypted terminal session to your VPS. After authentication, commands run on the server, so a command such as nano /etc/example.conf opens an editor using the VPS’s CPU, storage, and installed software. Nothing is being edited on your desktop unless you deliberately copy the file to a local editor with scp or sftp.
Your account’s permissions still apply after you connect. SSH does not grant administrator access by itself. A normal user can save files that user owns and can write, while system files usually require an authorized sudo workflow.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Before you connect
Have the connection details ready
- The VPS hostname or IP address.
- Your Linux username.
- A password or private-key authentication method accepted by the server.
- The SSH port. The default is 22; use
-p PORTwhen the administrator configured another port.
From a terminal on your computer, connect with:
ssh user@serverFor a non-default port:
ssh -p 2222 user@serverReplace the example port, username, and host with your actual values. On the first connection, OpenSSH may ask you to verify the server’s host key. Confirm it through a trusted administrative channel before accepting it; a changed key can indicate a rebuilt server, a legitimate host-key rotation, or a security problem.
Keep a recovery path
If the file you are changing controls SSH, keep the current session open and start a second SSH session before testing. A VPS provider’s out-of-band console is an even better fallback. A syntax error or an authentication mistake can remove your normal remote route; Ubuntu’s documentation cautions that losing an SSH server can mean losing your way to reach the machine.
Inspect the path and permissions first
Do not open an unfamiliar path and assume it is the intended file. Establish where you are, list the directory, and inspect the file’s metadata:
pwd
ls -la
stat FILEpwd prints the current directory. ls -la shows hidden entries, ownership, and mode bits. stat reports detailed metadata, including the owner, group, permissions, and timestamps. These checks help distinguish a misspelled path from a file that exists but is not writable.
For a system path, inspect the complete directory chain when necessary:
namei -l /etc/ssh/sshd_configIf namei is unavailable, run ls -ld on each parent directory. A file can be writable while a parent directory prevents replacement, or a directory can be accessible while the file itself is read-only.
Free tools Windows power users keep installed
One-click scans. No signup required.
Back up before changing important files
Make a copy before editing configuration that could affect networking, authentication, a web service, or data. For OpenSSH’s main configuration, Ubuntu specifically recommends a protected backup:
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.originalChoose a backup name that will not be mistaken for an active configuration file. Confirm that the copy exists and has sensible ownership and mode:
sudo ls -l /etc/ssh/sshd_config /etc/ssh/sshd_config.originalA backup is useful only if you know how to restore it. If validation fails and you have not made other intentional changes, restore it with an authorized command such as:
sudo cp /etc/ssh/sshd_config.original /etc/ssh/sshd_configFor application files, a timestamped copy can make the change history clear:
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →cp app.conf app.conf.$(date +%Y%m%d-%H%M%S).bakUse this only when your account can write the file. For root-owned files, create the backup with sudo and preserve the intended owner and mode.
Choose an editor: nano or Vim
| Factor | Nano | Vim |
|---|---|---|
| Learning curve | Low; common shortcuts are shown at the bottom of the screen | Higher; editing is modal and commands must be learned |
| Basic workflow | Type directly, then write and exit with visible key combinations | Enter Insert mode, leave it with Esc, then use command mode |
| Search and replacement | Practical interactive search and replacement | Powerful commands and repeatable edits |
| Navigation and automation | Straightforward for short files | Fast navigation, macros, and scripting for repeated work |
| Accidental mode changes | Unlikely; the editor behaves like a simple text interface | Common for beginners; pressing Esc returns to a known mode |
| Minimal VPS images | Often present, but availability depends on the image | Often present, but availability depends on the image |
Nano is the sensible starting point for a one-off change. Vim is efficient when you already know its modes or need advanced navigation and repeatable transformations. If neither command exists, use your distribution’s package manager or an installed editor according to the image’s documentation; do not assume that every minimal VPS image includes both.
Edit a user-writable file with Nano
Open the file
Run:
nano FILEUse an absolute path for a system or deployment file so that a different working directory cannot lead you to edit the wrong copy:
nano /home/user/app/config.iniIf the file does not exist, Nano opens a new buffer. Check the path shown in the editor before creating a new file accidentally.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Make and find changes
Type normally. Nano displays its most useful shortcuts along the bottom; the caret symbol means the Ctrl key. Use its search command to locate a directive rather than scrolling through a long configuration. Its documented features include search and replace, undo and redo, syntax coloring, line numbers, auto-indentation, file locking, and backup options, although the exact display depends on the installed version and configuration.
Save and exit
- Press
Ctrl+Oto write the buffer. - Confirm the displayed filename. If it is not the intended path, cancel and reopen the correct file.
- Press
Enterto confirm the filename. - Press
Ctrl+Xto exit.
If Nano asks whether to save when exiting, choose the save option only after checking that the path is correct. A failed write normally leaves the editor open with an error; inspect ownership, free space, and directory permissions instead of forcing a permission change.
Edit with Vim
Open and enter Insert mode
vim FILEVim starts in Normal mode, where keystrokes are commands rather than text. Press i to enter Insert mode, then type or edit the content. Press Esc to return to Normal mode before issuing a save or quit command.
Save and quit safely
- Press
Escso you are in Normal mode. - Type
:wq. - Press
Enterto write the file and quit.
To leave without saving changes, press Esc, type :q!, and press Enter. If Vim reports that the file changed outside the editor or that it cannot write, stop and resolve the underlying issue rather than overwriting blindly.
Useful recovery habits
- If typing produces commands or moves the cursor instead of inserting text, press
i. - If you are unsure which mode is active, press
Esc; Normal mode is the safe starting point for a colon command. - Use Vim’s search command to find a directive in a long file, then verify the surrounding context before changing it.
- For a first edit on a production system, prefer a small, reversible change and save a backup before opening Vim.
Handle root-owned files without weakening security
Files under /etc, including /etc/ssh/sshd_config, are normally owned by root and are intended to be writable only by root. A normal user who runs nano /etc/ssh/sshd_config may be able to read it but will receive a write error on save.
Use the least privilege needed:
sudoedit /etc/ssh/sshd_configsudoedit creates a temporary editable copy, opens it with the administrator-approved editor, and writes it back through sudo after you finish. It avoids running the full editor as root and preserves the file’s intended ownership. On systems that document the equivalent form, sudo -e FILE invokes the same edit workflow.
If your account is not authorized for sudo, ask an administrator to make the change or grant narrowly scoped authorization. Do not use chmod 777, change the owner merely to make saving convenient, or copy a secret configuration into a world-writable directory. Those shortcuts can expose credentials and make later service behavior unpredictable.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
After saving, verify the result as root:
sudo stat /etc/ssh/sshd_config
sudo ls -l /etc/ssh/sshd_configUse the safe workflow for SSH configuration
Know which file is authoritative
OpenSSH commonly uses /etc/ssh/sshd_config and, on distributions that enable it, snippet files under /etc/ssh/sshd_config.d/. Ubuntu documents that the first value set for many directives wins. A setting in an earlier file can therefore prevent a later line from having the effect you expect. Read the surrounding configuration and included snippets before adding a duplicate directive.
Recommended Free Tools
Back up and edit
- Keep the current SSH session open and establish a second session or console path.
- Create a protected backup of the active configuration.
- Inspect ownership and permissions with
sudo ls -l. - Open the main file or the intended snippet with
sudoedit. - Change only the required directive, preserving comments and formatting that help future operators.
Validate before restarting
Run the daemon’s syntax check:
sudo sshd -tNo output normally indicates that the configuration parsed successfully. An error includes a file and line to investigate; fix that line and run the check again. A successful parse does not prove that your chosen address, port, authentication method, or firewall policy is reachable, so test from the second session as well.
Reload or restart only after validation
Use the service-management command appropriate to the distribution to reload or restart SSH after the check passes. Keep the original session open until a new connection succeeds with the intended account, key, port, and authentication settings. If the new session fails, use the still-open session or console to restore the backup and validate again.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Fix the common “Permission denied” cases
The file is owned by another user
Run:
ls -l FILEIf the owner and mode do not grant your account write access, use sudoedit or ask for the required authorization. Do not change ownership of a system file simply because your account cannot write it.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThe directory is not writable
Even when a file’s mode appears writable, saving may require creating a temporary file or replacing the original. Inspect parent directories and available space:
ls -ld /path /path/to
df -hRead-only mounts, a full filesystem, or restrictive directory modes can all prevent a save. Resolve the specific cause and retry.
The editor saved a different path
Relative paths depend on the directory from which you launched the editor. Confirm with pwd, use an absolute path, and re-read the file after saving:
sed -n '1,120p' /path/to/FILEFor sensitive files, avoid printing secrets into shared terminals or logs; inspect only the relevant lines.
Protect SSH keys and configuration permissions
OpenSSH’s strict checks can reject keys when the private key, .ssh directory, authorized_keys, or a parent directory is writable by another user. The SSH daemon manual describes this strict-mode behavior.
Oracle Linux gives these commonly used modes as examples:
chmod 700 ~/.ssh
chmod 600 ~/.ssh/id_ed25519
chmod 644 ~/.ssh/id_ed25519.pub
chmod 600 ~/.ssh/configApply a mode only after confirming which file you are changing and who should own it. A public key may be readable; a private key should not be. Check ownership as well as mode:
ls -ld ~ ~/.ssh
ls -l ~/.ssh/authorized_keys ~/.ssh/configIf authentication broke immediately after a permissions edit, use a second account, an existing session, or the provider console to correct the owner and mode. Avoid recursively applying a single mode to every file under ~/.ssh; different files have different purposes.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRe-read and validate application files
Saving text is not the same as making a valid configuration. After editing, read back the changed area and run the application’s own validator when one exists. For a service, validate first, then reload or restart. Examples of the sequence are:
- Read the file or relevant lines.
- Run the documented syntax or configuration test.
- Inspect the command’s exit status and error output.
- Reload or restart only after validation succeeds.
- Check the service status and test the affected function from a client.
This order catches missing delimiters, duplicate directives, invalid paths, and unsupported options before they become an outage.
When a local editor is better: SCP and SFTP
OpenSSH includes scp for copying files and sftp for an FTP-like interactive session. They are useful when you want local editor features, a code review before upload, or a staged copy that can be compared with the server version.
A typical download-edit-upload workflow is:
- Copy the remote file to a controlled local directory with
scpor retrieve it throughsftp. - Keep the original remote file and record its owner, group, mode, and location.
- Edit the local copy and review the complete diff.
- Upload it to a temporary remote path rather than overwriting a critical file immediately.
- Use an authorized move into place, restore the original owner and mode, validate the application, and reload it.
Direct terminal editing is faster for a small change and avoids transfer mistakes. Local editing is more comfortable for large files, structured projects, or changes that need review. Neither method removes the need to preserve permissions and validate the result.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
A repeatable editing checklist
- Confirm the hostname, account, port, and authentication method.
- Keep a second SSH session or console available for changes to SSH or networking.
- Run
pwd,ls -la, andstat FILEbefore editing. - Back up important configuration, especially SSH configuration.
- Use
nanofor a simple interactive edit orvimwhen its modal workflow is familiar. - Use
sudoeditfor root-owned files; do not broaden permissions to bypass authorization. - In Nano, save with
Ctrl+O, confirm the filename, then exit withCtrl+X. - In Vim, press
ito insert,Esc, then:wqandEnter; use:q!to discard. - Re-read the saved file and run the application’s validator.
- For OpenSSH, run
sudo sshd -tbefore any restart or reload. - Test a new connection before closing the old one.
- When authentication fails, inspect ownership and modes before changing anything else.
The Bottom Line
Connect with SSH, inspect and back up the target, edit with Nano or Vim, and preserve the file’s ownership and permissions. Use sudoedit for root-owned files; validate every configuration—especially with sudo sshd -t for OpenSSH—before reloading a service or closing your recovery session.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
