imfearless Wrote: If you have no idea what your doing, I'd learn security and firewalling first. Learn how to read logs.
Without a firewall, i'm assuming port 22 is open to the world. If you look at /var/log/auth.log, you'll find hundreds of people trying to login to your box with bogus usernames/passwords. Having a firewall setup to only allow connections in from your home ip would lock the box down.
The next thing I'd consider learning is how to setup a basic web server (apache/php/mysql) - LAMP stack. This is a pretty common linux stack and it's extremely useful for personal or friends.
I'd also look into user accounts on the linux machine, and securing sudo, etc.
If you're logging in via the ROOT account, you need to not be. I'd disable root logins and create a user account for yourself with sudo. usermod -aG sudo username
Just some things to look at.
Also SSH Keys, passwords arent thing anymore for VPS (atleast this is my idea of security in 2018)