diff --git a/evolinux-users/tasks/root_disable_ssh.yml b/evolinux-users/tasks/root_disable_ssh.yml
index b9fc5708..7906307f 100644
--- a/evolinux-users/tasks/root_disable_ssh.yml
+++ b/evolinux-users/tasks/root_disable_ssh.yml
@@ -3,7 +3,7 @@
 - name: disable root login
   replace:
     dest: /etc/ssh/sshd_config
-    regexp: '^PermitRootLogin (yes|without-password)'
+    regexp: '^PermitRootLogin (yes|without-password|prohibit-password)'
     replace: "PermitRootLogin no"
   notify: reload sshd