Secure a new Linux VPS
Set up careful access controls before exposing applications to the internet.
Update the operating system
Use your distribution's package manager to install current security updates. Read the distribution documentation before upgrading between major releases.
Plan a reboot when an update requires it, and check your applications afterward.
Set up your administrative access
Create a separate administrative user using your distribution's documented procedure. Add an SSH public key and test a fresh login before changing existing access settings.
Keep a recovery method, such as the provider console, available.
Configure the firewall
Identify the ports your applications require. Allow the current SSH port before enabling or tightening a firewall, then test a second connection while keeping the first session open.
Avoid exposing databases or internal administration ports publicly unless you have a specific, secured reason.
Protect credentials and data
Use unique passwords and keep API keys out of public repositories. Maintain off-server backups and install only software you trust.
Disabling password login or restricting privileged access can improve security, but apply these changes only after you have verified key-based access and a recovery path.
Need more help? Include your service name and what you have tried when you contact support.