- Update the system and enable automatic security updates.
- Create a separate user and give it
sudorights. - Set up SSH key login, then disable password login and direct
rootlogin. - Enable a firewall (
ufwon Ubuntu) and open only the ports you need (22, 80, 443). - Install fail2ban — it blocks repeated failed login attempts.
- Set up a regular backup schedule.
On a VPS, managing and securing the system is the customer’s responsibility. If you need a managed server, contact us.