strictModes is a safety guard which will refuse a login attempt When the authentication files are readable by Absolutely everyone. I assume you forgot to say you are able to disable password authentication right after putting together SSH keys, as never to be subjected to brute force attacks.