VNC console and first connection over SSH

Once a server is created, the first thing to do is get onto it: make sure everything is working, and configure it "from the inside." This article covers every way to make your first connection to a new ForestsNet Cloud VPS: where to find the IP address and password, how to open the graphical console (VNC) in your account, and how to connect over SSH from your own computer.

What you'll need

  • An active ForestsNet Cloud server — already ordered and activated.
  • Access to your my.forestsnet.cloud account. For how server management works there, see "Managing your server in the account".
  • For SSH: on macOS and Linux the ssh client is already built in; on Windows 10/11 it's usually available out of the box too — or you can use PuTTY.

Step 1. Find your server's IP address and password

Every server has its own IP address and its own root password. This is not the same as the username and password for your my.forestsnet.cloud account: the root password logs you in to the server itself, not to the account (see "Managing your server in the account" for more about the account).

  1. Check your email — the server activation email usually lists its IP address and initial password.
  2. If you don't have the email or lost the details, open the VPS section of your account: the server's IP address is shown right in the list. To change the password, select the server and change the root password under "Access" (the server needs to be running — no reboot needed). Password changes go through the QEMU guest agent: if the change doesn't go through, restore the agent with "System" → "Guest agent" — the server reboots and is unavailable for about a minute.
Tip: the exact contents of the email can vary, and it sometimes doesn't arrive at all at proton.me / protonmail addresses. If the email doesn't have what you need, don't waste time searching — get it from your account (method above, see "Managing your server in the account" for more) or contact ForestsNet Cloud support.
Important: the password from the email is temporary. Change it on your very first login: with the passwd command on the server or in your account, under "Access".

Step 2. Open the VNC console in your account

The graphical console is the fastest way to get onto your server: no SSH client needed, everything runs right in the browser. It's good both as a first check that the server is responding at all, and as a fallback if SSH isn't reachable for some reason.

  1. Log in to your my.forestsnet.cloud account and open the VPS section — see "Managing your server in the account".
  2. Select your server in the list.
  3. Open "Access" → "Console" above the list.
  4. The server's screen opens right in your browser.
  5. Log in with the credentials from Step 1: the root login and the password. You don't have to type them by hand — the "Insert username" and "Insert password" buttons enter them for you (the username is picked based on the OS, the password comes from your service details), and you just press Enter.
The server console in the browser: your servers with search and the buttons on the console panel
Tip: to send text from your computer to the server, press Clipboard in the console: Read your clipboard grabs what's on your clipboard, and Insert into VPS types it on the server as if from a keyboard. It handles the English layout, ASCII characters, Tab and Enter, up to 8192 characters — Cyrillic doesn't come through. For regular work with text, SSH (Step 3) is more convenient: copy and paste work as usual in a terminal, in both directions.
Tip: if you don't know the root password, click "Temporary access" in the console: a temporary account with sudo rights is created on the server, and the console logs you in under it right away, with no password. sudo -i gives you root, the session lasts up to an hour, the account is deleted once you close the console, and the root password stays unchanged. Temporary access works on Linux with systemd and a running QEMU guest agent — otherwise the console tells you it isn't available, and the regular login still works.
Done: if you saw the server's screen and logged in as root, the server is responding — you can move on to SSH.

Step 3. Connect over SSH

SSH is the main way you'll work with a Linux server day to day: faster than the VNC console, and it supports clipboard sharing and file transfer. Connect with a password first, then set up SSH key login — it's more convenient and more secure.

With a password

  1. Open a terminal: on macOS/Linux — the built-in Terminal app; on Windows 10/11 — PowerShell or Windows Terminal.
  2. Connect, substituting your server's IP address:
ssh [email protected]
  1. On the first connection, SSH will ask about the server's key fingerprint — that's normal, answer yes.
  2. Enter the root password from Step 1 (the characters won't be shown — that's expected).

After logging in, the terminal prompt changes to something like root@vps:~# — you're inside the server.

No ssh on Windows? If the system says the command isn't found, add the component manually: Settings → Apps → Optional Features → Add a feature → "OpenSSH Client". Or use the graphical client PuTTY: in the Host Name field, enter the server's IP, port 22, connection type SSH.

With an SSH key

A key is more secure than a password and saves you from typing a password on every connection. Here's how, using the current Ed25519 algorithm.

  1. Generate a key pair on your own computer (not on the server):
ssh-keygen -t ed25519 -C "[email protected]"
  1. Copy the public key to the server:
ssh-copy-id -i ~/.ssh/id_ed25519.pub [email protected]
  1. If ssh-copy-id isn't available (for example, in Windows PowerShell without the OpenSSH utilities), do the same thing manually:
cat ~/.ssh/id_ed25519.pub | ssh [email protected] "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys"
  1. Check it: the command ssh [email protected] should now log you in without asking for a password.

For the path and passphrase prompts in step 1, you can just press Enter — the key is saved by default to ~/.ssh/id_ed25519 (private) and ~/.ssh/id_ed25519.pub (public); an empty passphrase means key-based login without an extra password on the key itself.

Done: key-based login is set up and working.
Important: only disable password login after you've confirmed key login works, and keep the VNC console from Step 2 handy — if anything goes wrong, you can use it to fix things.

Once key login is confirmed, you can disable password login: add (or uncomment and change) this line in /etc/ssh/sshd_config on the server:

PasswordAuthentication no

and restart the service:

# Ubuntu/Debian
systemctl restart ssh

# AlmaLinux/Rocky Linux
systemctl restart sshd
Important: port 22 is open by default on ForestsNet Cloud — you don't need to allow it specially. But if you enable the ufw firewall yourself, make sure to allow SSH before ufw enable, or you'll lock yourself out of the server:
ufw allow OpenSSH
ufw enable

See "Setting up a firewall (ufw)" for more.

What's next

Next, you'll probably want to protect the server with a firewall — see "Setting up a firewall (ufw)" — and see what else you can install in one click: several popular pieces of software install from your account through ready-made scripts, see "Ready-made scripts: what you can install in one click".