iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Start in the netcup Server Control Panel (SCP), then use its browser-based Screen console for your first server login. Change the SCP password and server root password separately, check how the disk is laid out before installing software, and set up SSH only after console access works. Back up before changing partitions or reinstalling: a new operating system installation deletes the server’s disk contents.
1. Sign in to the SCP and open the server console
- Find netcup’s email titled “Zugangsdaten SCP” and use those credentials to sign in to the Server Control Panel. The SCP password is separate from the password used to log in to Linux.
- Change the SCP password after your first login. Netcup recommends a long, unique passphrase.
- Select your server in the SCP and open Screen to launch the in-browser VNC console.
- At the Linux login prompt, enter
rootas the username and the root password from the server-ready email. Password input may show no dots, stars, or other characters while you type. If the keys produce unexpected characters, check the operating system’s keyboard layout. - After logging in, run
passwdand follow the prompts to set a new server password. This changes the Linux account password, not your SCP password.
Netcup describes Screen/VNC as a way to reach the server directly from the SCP, which is useful before SSH is configured and when remote login needs troubleshooting. The steps above follow its First Use of Your Server guide, last updated 23 July 2026.
2. Check what is installed and where the disk space is
Netcup’s first-use guide describes its documented default as Debian Minimal with a small partition, no LVM, the Europe/Berlin time zone, and an en-US keyboard layout. It says the remaining disk space is left for the user to partition. These are the guide’s stated defaults, not a guarantee for a custom installation or an operating system installed later.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteBefore installing applications, inspect the server’s disks and mounted filesystems so you know what storage the operating system can currently use. Do not assume all advertised storage is already available in the root filesystem. If you need to change partitions, make an up-to-date backup first: netcup warns that partitioning mistakes can cause data loss in its Partitioning of a VPS or Root Server guide.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Choosing an OS image or reinstalling
Netcup’s image installer lets you select an operating system and configure options including time zone and language settings; it can also import SSH keys stored with netcup. Its image documentation distinguishes a large partition layout, which gives the operating system access to the available disk space, from a small layout intended for users who plan to partition the remainder themselves. A fresh operating system installation removes the existing disk contents, so do not use reinstall as a routine login fix. See netcup’s Media guide for image and ISO installation details.
3. Set up SSH without relying on root login
SSH is convenient for ongoing administration, but it requires a reachable server, a running SSH daemon, accepted authentication, and a network path that permits the connection. Keep Screen available while setting it up so you have a way back in if a configuration change blocks remote access.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Confirm the basics: log in through Screen and check that the server has internet connectivity before troubleshooting the SSH client.
- Check the daemon: run
systemctl status sshd. If the service is stopped or not running, SSH connections may fail. - Check the login policy: inspect
/etc/ssh/sshd_configfor thePermitRootLoginsetting. Netcup recommends creating a separate SSH user and disabling SSH access throughroot. - Check the port and firewall: confirm which port the SSH service is configured to use and that traffic to it is allowed. Port 22 is common, but a server configured for a different port will not accept SSH on 22.
Netcup’s Troubleshooting Server Login guide identifies a stopped SSH daemon, root-login configuration, and a blocked SSH port as issues to check when remote login fails. “Connection refused” can point to a service that is not listening or a firewall blocking the port; it does not by itself identify which cause applies.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
4. Configure the netcup network firewall carefully
In the SCP firewall, netcup’s example for allowing standard SSH is an INGRESS TCP rule with destination port 22. Use the port your SSH service actually listens on if it differs. Rules apply after saving; the server does not need to restart.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Be especially cautious with outbound rules. Netcup documents that once extra egress rules are present, traffic not covered by those rules is dropped by default. A restrictive outbound policy can therefore block ordinary connections the server needs. Its Firewall guide describes the upstream firewall as basic protection, not a substitute for an operating-system firewall, SSH keys or other authentication protections, and system updates. Treat SCP firewall filtering and a local firewall as separate layers.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.5. Back up before risky changes and know your recovery options
Netcup recommends offline snapshots before major changes that might break the server. An offline snapshot is taken while the server is off and can be exported locally. Online snapshots run while it is on, cannot be exported, may leave it unresponsive for a few minutes, and carry a risk of irreparable data loss if files change during the snapshot. Choose a backup method appropriate to the change and follow the current instructions in netcup’s Media guide.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If the installed system will not boot or needs repair, the SCP Rescue System provides a compact Linux environment for troubleshooting, fixing problems, and investigating boot issues. It is a recovery route, not the same thing as installing a fresh operating system. Netcup also lists the rescue system and SCP password reset as access-recovery options in its login troubleshooting guidance.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

