A Major Security Upgrade: Managing Environment Variables and Server Credentials More Securely
Starting today, you can migrate environment variables to your own Dedicated Server, completely remove SSH passwords and private keys from Zeabur, and review every SSH connection attempt
Fong
To further improve the security and experience of our Dedicated Server users, we have upgraded our management architecture for Dedicated Servers. As of today, we have introduced three changes.
1. Migrate and store your own environment variables
Effective immediately, you can migrate all of your environment variables to your Dedicated Server with a single click.
Go to Project → Service → Environment Variables.
Once migrated, Zeabur will no longer store the sensitive information these environment variables may contain, including but not limited to AI API keys.
The two changes below require ZeaburOS to be installed on your server, but do not require upgrading Zeabur Operator. If your server is not running ZeaburOS, the corresponding controls will not appear in your dashboard, or the action will fail.
2. Remove SSH passwords and private keys completely
Also effective immediately: you can now manage your SSH credentials entirely on your own, in full control.
Go to Server → SSH.
We urge every user to remove the passwords and private keys stored on Zeabur as soon as possible. Once removed, Zeabur will no longer be able to access your Dedicated Server via SSH to perform project- or service-level recovery.
3. View all SSH connection attempts from the SSH page
After removing your SSH access credentials, you can review the IP addresses of every connection attempt directly from the dashboard. You can also configure access rules under Firewall settings to further control access to your server.
Go to Server → SSH / Firewall.
Take action now
- Migrate your environment variables immediately from the Projects page.
- Review and rotate your SSH credentials as soon as possible from the Servers page.
In the upcoming days, the Zeabur team will perform further credential removal and rotation for every Dedicated Server. If you have already completed the rotation manually, we will not make any changes.
One note
Please note that these security upgrades apply only to Dedicated Servers, and that changes 2 and 3 additionally require ZeaburOS to be installed. If your services are currently running on a shared cluster, we recommend switching to a Dedicated Server for future security upgrades.
Thank you again for choosing Zeabur and for your continued trust in us. If you need any assistance, please submit a support request at Zeabur Support—we will assist you as soon as possible.