Is there any reason to use SSH to set up a WordPress site?
If I just want a WordPress site and will be editing it only using WordPress, is there any reason for me to set up SSH?
Log In to Comment
1 Answer
If you are using our WordPress one-click image you will have to log in at least once via SSH. When you launch a WordPress droplet, the WordPress installer is disabled until you log in via SSH the first time. This is done to prevent the WordPress installer from sitting publicly accessible once the droplet is launched.
On that first login, if you are not using an ssh-key for authentication you will also be prompted to change your password. Until you do this you will not be able to access your droplet via SFTP.
While you are ssh'ed in I would recommend at a minimum, ensuring that you have automatic updates configured on your droplet.
-
I've done that. But I haven't added any SSH keys or done anything other than change my password using SSH in the console. My question is, after I do that, is there any reason to use SSH keys if I will just be using it as a normal WordPress site?
-
You can use it as a normal WordPress site at that point. One major reason for using SSH keys is the additional security. If there is no root password set than attacks on your ssh service attempting to brute force your password will always fail.
-
Have another answer? Share your knowledge.