1. Disable the default Admin account and create a new administrator
When you sign up for a Windows VPS, the provider typically installs the operating system and creates a default Admin account. While you can keep this account, it is an easy target for attacks. To prevent that, you can disable the default account and create a new admin account instead, granting it full administrative privileges.
2. Create a strong password for the administrator account
Using a strong password is essential to security, yet many VPS users overlook it. After changing the Admin username, the next step is to create a strong password. Here are a few suggestions for creating one:
– Use a mix of lowercase and uppercase letters, digits and special characters.
– Ensure the password is at least 10 characters long.
– Avoid reusing one password across different accounts. To keep track of complex passwords, record them somewhere secure so you do not lose them.
3. Change the default Remote Desktop port
Before you can reach a Windows VPS, you have to enable the Remote Desktop feature built into the operating system. By default it uses port 3389, which can leave the system exposed to brute-force attacks.
A simple way to protect a Windows VPS is to change this default port. Here is how to change the connection port. When you do, pick a random port number:
– Open regedit.msc (Registry Editor).
– Navigate to the path: HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Control -> Terminal Server -> WinStations -> RDP-Tcp.
– Double-click PortNumber, select Base, enter the new connection port number and click OK.
In the "PortNumber" field, you can assign a port by choosing an integer between 1025 and 65535. Note that the port number you choose must not conflict with a port already in use by other applications. After changing the RDP listening port, make sure the new port is also allowed through Windows Firewall.
4. Windows VPS must have antivirus software installed
To keep files safe when downloading or uploading, you should install antivirus software on your Windows VPS. Because a Windows VPS is regularly used to access web browsers, it faces a high risk of threats.
Your VPS can be affected by malware, viruses, adware, spyware, and many other types of attacks. You can also use a free, powerful option from Microsoft that automatically updates to the latest version to protect your VPS in real time.
Antivirus software can protect a VPS against security threats a firewall does not block, but it is best to combine both to protect the VPS after you rent a server.
5. Enable the firewall for VPS (Windows Firewall)
Every Windows operating system ships with a firewall (Windows Firewall). It is effective and comparable to other high-end firewalls. Below are some of the benefits the firewall brings to a Windows VPS:
Filters inbound internet traffic according to the rules you set.
Blocks malware and attacks by hackers.
6. Regularly update Windows
Regularly updating Windows improves security by patching vulnerabilities and fixing bugs. To ensure you receive update notifications promptly, you should enable automatic updates. If you do not, make sure to check for and install software updates regularly, including for third-party software.
Among current operating systems, Windows is regarded as one of the most secure. That security can be undermined, however, by third-party software: as a rule, your security exposure grows with the number of applications installed — there is more risk with ten applications installed than with two. So beyond installing only the software you actually need, you should also make sure it stays up to date
7. Set up a Remote Desktop Gateway for the VPS
Encryption is an effective way to protect a Windows VPS and the Remote Desktop Gateway. It lets you reach the VPS over a web connection secured with SSL/TLS. The connection also runs over secure port 443, providing a high level of protection.
8. Detect and block intrusion attempts from outside
To set up intrusion detection and prevention, you should engage a specialist. For reliable results, contact your Windows VPS hosting provider for assistance. This requires software comparable to a firewall that analyzes traffic into the VPS in real time. The software must also be able to identify attack signatures.
Snort is an open-source network intrusion prevention tool, widely used today and regarded as a leading choice for this kind of task.
9. Install anti-spyware software on a Windows VPS
Spyware is software that displays advertising on your device and collects personal information without your permission. Notably, it can change your VPS settings even without your consent. It can also change your default home page, add unwanted links and bookmarks, and display pop-up advertising continuously.
