I have a few linux
VPS boxes that contain the private keys to Bitcoin. I've taken a few steps to harden them:
- Blocked all ports except those needed for my server with uncomplicated firewall
- Disabled login with password; setup SSH keypairs; disabled root
sshhistory after typing private key or password
However, I noticed that within my hosting control panel I have the option to
Reset Root Password. It seems that despite my hardening the server company has some kind of supervisor access that lets them reset the root password.
How can they reset the root password? Is there a way to harden the server against internal access by the server company? Do I need to enable full disk encryption or home folder encryption?