can anyone access console outside digitalocean control panel

i use SSh to manage droplet, but there is an access console with a password access through Cpanel can any one reach it if he knew the password from outside digitalocean account ?


Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hello, all

The Droplet console provides out-of-band access and is available regardless of your network settings. It emulates the access you would have if you were sitting down with a keyboard and monitor attached to the actual server. You can use this feature to log in and revert bad settings to regain normal access.

You can access the console only from your DigitalOcean account.

Hope that this helps! Regards, Alex

Hi @khaledalmobid,

As far as I’m aware, nobody can reach the console even if the know the root password. Having said that, if you have PasswordAuthentication enabled in your /etc/ssh/sshd_config file, then people would be able to login with passwords just using regular SSH.

To check this, open the file /etc/ssh/sshd_config on your droplet and search for the word PasswordAuthentication. If it’s set to YES, then you’ll need to set it to NO and restart sshd

service sshd restart

The most secure way is to use SSH keys to log in to your droplet and I’ll recommend if you are not already using it to do it.

Regards, KFSys