My password authentication is still working when I've done everything to disable it, I properly set up passwordless auth w/keys + passphrase

I can ssh into my server using password auth, or keys + passphrase. I have modified the config file and set passwordAuth to "no" and UsePAM to "no" since I don't have a ChallengeResponseDetection line in the config file (Ubuntu Server LTS 22.04). I have modified chmod settings. I've had this problem for quite sometime, and my home server is just for practice/experimentation. I would LOVE to discover what I am doing wrong. What other reasons could password auth be still enabled for? I even found an init file in the system that could've been affecting password auth and changed that to the proper setting, and still, password auth is working. I do not want password auth to work (as stated 3x prior).