A VPS gives you greater control over your server environment, but it may also require additional security management.

These recommendations provide a useful starting point for improving VPS security.

Keep the operating system updated

Install security updates regularly.

Updates can fix known vulnerabilities in:

- The operating system
- System libraries
- Web servers
- Database software
- Control panels
- Other installed applications

Use strong authentication

Use strong and unique passwords for administrative accounts.

Where appropriate, use SSH key authentication instead of password-only access.

Protect SSH access

Consider the following:

- Limit SSH access to users who need it.
- Disable unused accounts.
- Restrict root login where appropriate.
- Use SSH keys where possible.
- Review failed login attempts.
- Use a firewall to restrict access where appropriate.

Configure a firewall

A firewall can help limit access to unnecessary network services.

Only allow ports required by your applications and services.

Before changing firewall rules, make sure you do not accidentally block your own administrative access.

Remove unused services

Disable or remove services, applications and packages that are no longer required.

Reducing unnecessary services can reduce the server's attack surface.

Keep applications updated

Web applications, control panels and other software installed on the VPS should also be kept up to date.

Outdated applications can create security risks even if the operating system itself is current.

Maintain backups

Keep regular backups of important:

- Website files
- Databases
- Configuration files
- Application data

Where possible, store at least one backup copy outside the VPS.

Monitor the server

Review server activity regularly.

Watch for:

- Unexpected login attempts
- Unusual resource usage
- Unknown processes
- Unexpected open ports
- Changes to important files
- Suspicious network activity

Protect credentials

Do not store passwords, private keys or API credentials in publicly accessible files.

Limit access to sensitive configuration files.

Important

Server security depends on the operating system, installed software, applications and intended use of the VPS.

There is no single configuration that is appropriate for every server.

Need assistance?

If you need help reviewing the security of your VPS or server, please contact our support team with information about your server configuration and the issue you are concerned about.