Question
Prevent root password from being sent over email?
Your website states in a few places that when you create a server, the root password is sent over email so that you can log in as root. This is a terrible security practice: email is hideously insecure, and it's generally a bad idea to permit password-based logins for root. Is it possible to set up ssh key access before you provision a droplet, so that when the server starts it has either OpenSSH or Dropbear running, with the public key loaded, and password-based logins for root disabled? Or at the very least, to *not* send the root password via email?
Add a comment
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
×