[sneak]

Yes. Authenticating with passwords is obsolete and dangerous. Use keys and disable password auth.

[tpoacher]

And if you really like passwords, you could always enable both, too!