I am having a dapp developed for an NFT marketplace.
The developers are requesting log-in credentials for my DigitalOcean account in order to setup droplet.
Is this standard practice? I want to make sure to avoid any security risks. Thanks in advance.

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
Submit an Answer
1 answer

Hello,

There are a few things that you could do in this case:

  • Create the Droplet yourself and provide the developer with access to the Droplet only rather than your whole account

  • Create a Team as per the instructions here and grant the developer access to that specific team only rather than sharing the credentials to your personal DigitalOcean account

Hope that this helps!
Regards,
Bobby