can anyone access console outside digitalocean control panel

Hello, all

The Droplet console provides out-of-band access and is available regardless of your network settings. It emulates the access you would have if you were sitting down with a keyboard and monitor attached to the actual server. You can use this feature to log in and revert bad settings to regain normal access.

You can access the console only from your DigitalOcean account.

Hope that this helps! Regards, Alex

Hi @khaledalmobid,

As far as I’m aware, nobody can reach the console even if the know the root password. Having said that, if you have PasswordAuthentication enabled in your /etc/ssh/sshd_config file, then people would be able to login with passwords just using regular SSH.

To check this, open the file /etc/ssh/sshd_config on your droplet and search for the word PasswordAuthentication. If it’s set to YES, then you’ll need to set it to NO and restart sshd

service sshd restart

The most secure way is to use SSH keys to log in to your droplet and I’ll recommend if you are not already using it to do it.

Regards, KFSys