By david36322
Your website states in a few places that when you create a server, the root password is sent over email so that you can log in as root. This is a terrible security practice: email is hideously insecure, and it’s generally a bad idea to permit password-based logins for root. Is it possible to set up ssh key access before you provision a droplet, so that when the server starts it has either OpenSSH or Dropbear running, with the public key loaded, and password-based logins for root disabled? Or at the very least, to not send the root password via email?
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
