How to Choose a VPS for a Small Business Website: 6 Easy Checks
Ubuntu 26.04 LTS, codenamed Resolute Raccoon, came out in April 2026, and Canonical’s release cycle page gives it standard security maintenance until May 2031. For a small business moving its website off shared hosting and onto a virtual private server, that date matters more than most of the numbers on a hosting plan. A server built on it today can run for years on supported software before anyone has to plan a rebuild.
A VPS gives you your own slice of a physical machine, with root access and resources that other customers cannot eat into. It also hands you jobs that shared hosting quietly did for you: updates, certificates, backups and access control. The hosting market is crowded, so it helps to start with a list that sorts providers by how much checking has been done on them. The web hosting listings at MoneroDir are one example. On October 25, 2026, the directory held 181 hosting entries, 103 of them filed under VPS and dedicated servers, with 11 marked as verified by hand. It also leaves 29 entries with a questionable or scam warning visible, so you know which names to avoid.
Whichever provider you shortlist, these six checks will tell you whether a plan suits a business site.
1. Pick the operating system before the plan
Most VPS providers let you choose a Linux image when you create the server. Choose a long-term support release and note its end date. Canonical lists May 2031 for Ubuntu 26.04 LTS and May 2029 for Ubuntu 24.04 LTS, so a new build on 26.04 buys two extra years before a major upgrade.
Check that the provider offers the image you want on day one, because some hosts take weeks to add a new release. If your web developer or your app has a preferred distribution, follow that rather than switching for the sake of a newer version number. A server your team knows how to maintain is worth more than one with the latest kernel.
See also: Building a Mental Wellness Plan for Illinois Life
2. Count the IPv4 address in the monthly cost
The headline price on a VPS plan is rarely the whole bill. Public IPv4 addresses are scarce, and some large clouds now charge for them separately. Since February 1, 2024, AWS has charged $0.005 per hour for every public IPv4 address, according to its own announcement. That works out to roughly $3.65 a month per address, which is close to the full price of a small VPS elsewhere.
Many smaller hosts still include one IPv4 address in the plan price, while others list extra addresses as a paid add-on. Read the order page carefully, and ask whether IPv6 is included as well. Then add up the full monthly figure, with backups, extra storage and any control panel licence, before comparing two plans.
3. Plan for shorter certificate lifetimes
Your site needs a TLS certificate, and most small businesses use the free ones from Let’s Encrypt. Those certificates are getting shorter. Let’s Encrypt says it will move its default profile from 90-day to 64-day certificates on February 10, 2027, and to 45-day certificates on February 16, 2028, as required by the CA/Browser Forum Baseline Requirements. An opt-in 45-day profile has been available since May 13, 2026.
The practical lesson is simple: never renew by hand. Set up automatic renewal with an ACME client such as Certbot, test it once, and make sure someone receives the expiry warning emails. If a host offers a control panel, check that it renews certificates on its own and that it will keep up with the shorter schedule.
4. Treat backups as your job, not the host’s
On shared hosting, backups often happen in the background. On a VPS, they may not happen at all unless you pay for them or set them up. Ask the provider three questions:
- Are snapshots included, or are they an extra monthly charge?
- How many days of backups are kept, and where are they stored?
- How long does a full restore take, and can you do it yourself from the panel?
Even with good snapshots, keep a separate copy of your database and uploaded files somewhere else. The familiar 3-2-1 rule is a sensible target: three copies of your data, on two different types of storage, with one copy kept off the server’s own network. Test a restore at least once, because a backup that has never been restored is only a hope.
5. Lock down admin access from day one
Most attacks on a new server are automated login attempts, and they begin within hours of it going online. A few habits stop nearly all of them:
- Log in with SSH keys and turn off password logins for SSH.
- Create a normal user with sudo rights instead of working as root.
- Close every port you do not need with a firewall such as UFW.
- Turn on automatic security updates for the operating system.
If several people manage the site from home or from public Wi-Fi, a VPN gives them a single, protected route into the server, and you can then allow SSH only from that route. For a starting list, the VPN providers listed by MoneroFriendly include long-running services such as Mullvad, IVPN and AirVPN. On October 25 the page showed 52 VPN and proxy providers, 8 of them checked by hand. Compare each provider’s own logging policy and server locations before you sign up.
6. Check the host’s location, support and exit terms
Server location affects both speed and paperwork. A server close to your customers loads pages faster, and if you handle personal data from customers in the UK or EU, your privacy policy should say where that data is stored. Most providers let you pick a data centre when you create the server, so choose deliberately rather than accepting the default.
Support matters more than it looks on a sales page. Find out whether the plan is managed or unmanaged, how you reach a person, and what response times are promised. An unmanaged VPS is cheaper, but someone on your team then owns every update and outage. Finally, read the cancellation terms and confirm you can download a full copy of your server before you leave. Moving hosts is much easier when you planned the exit on day one.
The bottom line
Choosing a VPS for a business website is less about raw specs and more about the work that comes with it. Start on a supported release such as Ubuntu 26.04 LTS, price in the IPv4 address and backups, automate certificate renewal before the 2027 and 2028 changes arrive, and secure admin access from the first login. Shortlist hosts from a list that shows which entries have been checked, then judge the final two on support and exit terms. That way, the site stays fast, safe and easy to move for years.
