From 921ecbe10ab094c980d365bd470102e2a0b0bc33 Mon Sep 17 00:00:00 2001
From: ff <ff@example.com>
Date: Sun, 21 Jun 2026 15:51:15 -0400
Subject: [PATCH] =?UTF-8?q?docs:=20add=20security=20setup=20section=20to?=
 =?UTF-8?q?=20README=20=E2=80=94=20passwd,=20root=20password,=20SSH=20chec?=
 =?UTF-8?q?k?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 README.md | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/README.md b/README.md
index 2800b00c..a97f3dea 100644
--- a/README.md
+++ b/README.md
@@ -2,6 +2,40 @@
 
 A monorepo setup to manage both Backend and Frontend of the Dental Manager application.
 
+## 🔒 Security Setup (First Thing on a New PC)
+
+### Step 1 — Change the user password
+
+```bash
+passwd
+```
+
+It will ask for the current password, then the new password twice.
+
+### Step 2 — Set the root password
+
+```bash
+sudo passwd root
+```
+
+Enter a strong password. This prevents anyone from getting root access with a blank password.
+
+### Step 3 — Check that SSH is not running
+
+```bash
+systemctl status sshd
+```
+
+If it shows "inactive (dead)" or "not found", you're safe — no one can remotely access this PC via SSH.
+
+If it shows "active (running)", disable it:
+
+```bash
+sudo systemctl stop sshd && sudo systemctl disable sshd
+```
+
+---
+
 ## 🖥️ Setup Guide (Fresh Machine)
 
 Follow these steps in order after cloning the repository.