diff --git a/modules/services/data-access/config.nix b/modules/services/data-access/config.nix
index 1d1b4f1a..cd15900c 100644
--- a/modules/services/data-access/config.nix
+++ b/modules/services/data-access/config.nix
@@ -34,6 +34,8 @@
           AllowTcpForwarding no
           AllowAgentForwarding no
           ForceCommand internal-sftp
+      Match user data
+          PasswordAuthentication no
     '';
     authorizedKeysFiles = [ "/run/secrets/%u_authorized_keys" ];
   };