October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

First Steps With a netcup VPS: Login, SSH, Firewall, and Recovery

A safe first-login path for a netcup VPS: use the SCP and Screen console, verify the disk layout, secure SSH access, and know the difference between rescue and reinstall.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Start in netcup’s Server Control Panel (SCP), then use its browser-based Screen console for your first server login. Change the SCP and server passwords separately, check the disk layout before installing software, and configure SSH only after console access works. The steps below follow netcup Help Center documentation updated in July 2026; settings may differ on custom installations or after an OS reinstall.

1. Sign in to the SCP and open the server console

  1. Find netcup’s email titled “Zugangsdaten SCP” and use its credentials to sign in to the Server Control Panel. The SCP account is separate from the Linux server account. Netcup recommends changing the SCP password after the first login to a long, unique passphrase. See netcup’s First Use of Your Server guide.
  2. Select your server in the SCP and open Screen to reach its browser-based VNC console.
  3. At the login prompt, enter username root and the root password supplied in the server-ready email. Password entry in a Linux console may show no dots, stars, or other characters while you type. If the password does not work, check the console’s keyboard layout; the VNC console uses the operating system’s layout.
  4. After logging in, run passwd and follow the prompts to change the server’s root password. Keep it distinct from the SCP password.

The console is a useful first route because it does not depend on SSH being reachable. It is also the fallback route if SSH later stops working.

As an Amazon Associate I earn from qualifying purchases.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Check the operating system and available disk space

Netcup’s first-use guide describes its documented default as Debian Minimal with a small partition, no LVM, Europe/Berlin timezone, and en-US keyboard layout. It says the remaining disk space is left for the user to partition. These are the guide’s stated defaults, not a guarantee for every custom image or server that has since been reinstalled.

Before installing applications, inspect the disk and mounted filesystems so you know what space the OS can actually use. Do not assume the full advertised storage is already mounted. Netcup warns that partitioning mistakes can cause data loss and recommends an up-to-date backup before modifying partitions; see Partitioning of a VPS or Root Server.

Netcup’s image installer lets you select timezone and language settings and can import SSH keys stored with netcup. Its large partition layout gives the OS access to the available disk space; the small layout is intended for people who plan to partition the remaining space themselves. An OS installation is not a harmless way to fix a login issue: installing a new OS deletes the disk contents. Details are in netcup’s Media guide.

3. Set up SSH without relying on root login

SSH is convenient for ongoing administration, but it depends on a running SSH daemon, network reachability, valid authentication, and an open path through any applicable firewalls. Before troubleshooting the SSH client, confirm that you can log in through Screen and that the server has internet connectivity.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check the daemon, account policy, and port

From the console, check the service with systemctl status sshd. Netcup’s troubleshooting guide also advises checking the PermitRootLogin setting in /etc/ssh/sshd_config and confirming that the SSH port is open. A “connection refused” error can indicate that the daemon is stopped or that a firewall is blocking the connection. If SSH was configured to use a port other than 22, a connection attempt to port 22 will not reach it. Follow the vendor’s Troubleshooting Server Login guidance.

Use a separate SSH user

Netcup recommends creating a separate user for SSH and disabling SSH access through root. Configure and verify the separate account before disabling root SSH access, and retain a working console route while changing authentication settings. This reduces the chance of locking yourself out during setup.

Rank #3
HP MicroServer Gen10 Plus Mini Tower Server, Intel Xeon E-2224 3.4GHz, 32GB RAM, 16TB Storage, RAID, Windows Server 2019
  • HP MicroServer Gen10 Plus Tower Server for Business with Microsoft Windows Server 2019 OS!
  • Intel Xeon E-2224 Quad-Core 3.4GHz 8MB CPU, Up To 4.6GHz Turbo
  • 32GB (2 x 16GB) DDR4 PC4-21300 2666MHz Unbuffered Memory
  • 16TB (4 x 4TB) 7.2K 6Gb/s SATA 3.5" HDDs in RAID
  • Hard drives and memory upgrades included separately NOT installed, installation required.

Allow SSH through the netcup firewall

If you use netcup’s SCP firewall, its SSH example is an INGRESS TCP rule for destination port 22. Use the port your SSH daemon actually listens on if you have changed it. Rules take effect after saving; the server does not need to restart. See netcup’s Firewall guide.

Take particular care with egress rules. Netcup documents that once extra egress rules exist, traffic not covered by those rules is subject to a default DROP action. A restrictive egress policy can therefore interrupt ordinary outbound connections if you have not accounted for them. In the usual case, netcup recommends creating ingress rules only.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Understand the two firewall layers

The SCP firewall filters traffic upstream of the operating system; a local firewall runs on the server itself. Netcup describes the upstream firewall as basic protection, not a substitute for an OS firewall, SSH keys or two-factor protections, and system updates. Choose and maintain host-level protections as part of the server’s security setup rather than treating one open port as the whole plan.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

4. Back up before risky changes and choose the right recovery route

Choose a snapshot that fits the change

Netcup recommends an offline snapshot before major changes that could break the server. The server is off while an offline snapshot is taken, and the snapshot can be exported locally. An online snapshot runs while the server is on and cannot be exported. Netcup also warns that an online snapshot may leave the server unresponsive for a few minutes and that changing files during the snapshot can risk irreparable data loss. Consult the current Media instructions and make sure your backup method fits the operation.

Use the Rescue System for troubleshooting

The Rescue System, available through the SCP, boots a compact Linux environment for investigating boot problems, troubleshooting, and repairing issues. Netcup’s login troubleshooting guidance also identifies the rescue system and resetting the SCP password as recovery routes when access is a problem. Use recovery tools to investigate before choosing a destructive reset.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Distinguish recovery from a fresh OS installation

A rescue boot is a troubleshooting environment; installing a new operating system replaces the server’s disk contents. If your goal is to regain access or diagnose a boot failure, check the rescue and console options before reinstalling. If a reinstall is necessary, treat it as a data-destroying operation and ensure a suitable backup exists first.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.