New Linux VPS First-Login Checklist

After first login, verify the instance, update the OS, secure SSH and establish a backup plan before exposing an application. Use the assigned NAT SSH endpoint and the account appropriate to the installed image.

Verify the environment

Run these read-only checks:

cat /etc/os-release
uname -r
free -h
df -h
ip route
timedatectl

Confirm that memory, disk and operating system match your order, allowing for normal filesystem and unit differences. Check that time synchronization is working because certificate validation and authentication often depend on correct time.

Secure access before changing it

Install your public SSH key and test it in a second session. Create a named administrative user where appropriate. Keep your working session open while adjusting SSH or firewall settings, and know whether a recovery console is available before relying on it.

On Debian or Ubuntu, review and apply package updates with the distribution's package manager. If a reboot is required, schedule it and verify services afterward. Do not copy a script intended for another distribution without checking its assumptions.

Reduce exposure

List listening sockets with ss -lntup. Remove unused inbound mappings and permit only necessary private destination ports through the guest firewall. NAT is a routing arrangement, not a replacement for OS security.

Before storing important data, configure an independent backup and practice a small restore. Record the instance identifier, public SSH endpoint and deployment notes without storing private keys in shared documents.

Continue with SSH keys, firewall setup and backups.