security - Why is it safer to set up users? - Ask Ubuntu

everyone telling me using users make server lot safer. why it?

if have root account , 1 user, have 2 ways enter vps.
if has root password still can it. user password can make changes well.

if use root account, have 1 account can hacked/leaked. of course, hacker total access access if hacked root of server users.

edit: if create users, create them for? i'm webdeveloper , host websites on server. have create new user each website , each program install or should create 1 user can with?

your password not going "hacked" or "leaked".

if you're worried attacks, more plausible thing attacker may use zero-day vulnerability execute code on server, typically privileges of user running vulnerable program. if vulnerabile program run root, attacker can whatever wants on system. is, remember, without ever having obtain password.

if, on other hand, process run ordinary user, attacker constrained user can do, , in particular not able read or modify file user cannot access.

for simple web development server, not need create account other 1 use log on machine. web server process run account created automatically (e.g.,www-data apache)