does winbox use ssh for connection ?

I will not be accessing the router via ssh so I would like to turn off that service.
I want to be sure winbox does not use it before I do that.

That is correct it is one of many options.
I simply use the winbox port but I change the port to a non-standard number like 12,789

Are you going to use winbox on the outside interface?

If so, do use VPN (but not PPTP) to secure the connection.
If you can not use VPN, then:

  1. Use another port than default.
  2. Use port knocking. This prevents someone from seeing open ports.
  3. Use a long and good password.
  4. Use access list to prevent any random internet from accessing your router.
  5. Log everything. (See my signature for example.)
  6. If possible setup the remote router to connect using VPN to an admin site.
    7.++++