Account Security
Password
Use a strong, unique password (12+ characters, mix of letters, numbers, and symbols).
Two-Factor Authentication (MFA)
- Go to Settings > Security
- Click Enable MFA
- Set up an authenticator app (Google Authenticator, Authy, etc.)
Save your recovery codes. You’ll need them if you lose access to your authenticator app.
Server Security
Use SSH Keys
SSH keys are more secure than passwords. See SSH Keys.
Keep OS Updated
Firewall
Open only the ports your application requires. The example below shows SSH, HTTP, and HTTPS:
Always allow SSH (port 22) before enabling the firewall.
Disable Root Login (Optional)
Verify you can log in as the new user before disabling root login.
