DEV Community

Omar Elbaga
Omar Elbaga

Posted on

1 2

Is it safe to host many droplets in one digital ocean account?

Is it safe to host 100 droplets in one digital ocean account? I know you can do 2-factor authentication. I’m just wondering about the security because if someone simply breaks into your account or gets the password they can basically delete all your droplets in one session.

Top comments (2)

Collapse
 
dwd profile image
Dave Cridland β€’

I would:

  • Divide your operation deployments into "staging" versus "production".
  • Also divide according to security domain.

The latter means that if a set of droplets, or containers, or servers, or services should have access to a different set of information than another, host them separately. You wouldn't host your accounting software for your business in the same account as the service you offer customers, as an obvious example.

But also, you might note that a security domain changes based on who needs access to the droplets (etc) within it.

Too many accounts, though, will prove difficult to manage and that in turn will probably lower security.

If you have more than 3 or 4 security domains you're probably dividing too finely.

Collapse
 
_bigblind profile image
Frederik πŸ‘¨β€πŸ’»βž‘οΈπŸŒ Creemers β€’

I think the overhead of managing droplets across accounts outweighs the security benefits, especially if you enable 2FA. I also recommend you use a password manager like 1Password or LastPass to generate strong passwords for you.

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

πŸ‘‹ Kindness is contagious

Please leave a ❀️ or a friendly comment on this post if you found it helpful!

Okay