VPS & Container Guide

Portainer Guide 2026 — Manage Docker on VPS via Web UI

By CloudPicked Review Team · Updated October 2026

If you have ever found managing Docker containers via the command line tedious — struggling to remember flags, checking logs across multiple servers, or trying to give teammates access without handing over SSH keys — Portainer solves every one of those problems with a clean browser-based dashboard.

Portainer is the world's most popular container management UI with over one million users globally. It supports Docker, Docker Swarm, and Kubernetes through a single interface, and the Business Edition is free for up to three nodes with no time limits. This guide walks you through everything you need to know in 2026.

What Is Portainer?

Portainer is an open-source container management platform developed by Portainer.io, a New Zealand company. First released in 2016, it has grown into the de-facto standard for teams that want a visual interface over their container infrastructure without giving up control or flexibility.

Instead of typing docker ps, docker logs, or kubectl get pods repeatedly, Portainer puts every action behind a point-and-click dashboard — start, stop, restart, and inspect containers; manage volumes, networks, and secrets; deploy full stacks from a YAML editor or a Git repository; and control who on your team can touch what.

Why Use Portainer?

• Visual clarity: See all containers, CPU/memory usage, and status at a glance
• No CLI required: Onboard developers who are not comfortable with Docker commands
• Multi-environment: Manage multiple servers from a single dashboard
• Role-based access: Give teammates scoped access without sharing SSH keys
• GitOps ready: Deploy stacks directly from Git repositories with auto-update
• Free for 3 nodes: Business Edition with no feature restrictions, no expiry

Editions and Pricing (2026)

Portainer currently offers two main editions: the open-source Community Edition (CE) and the feature-complete Business Edition (BE). The Business Edition is free for up to 3 nodes, making it the recommended choice for most users.

What Does "3 Nodes Free" Mean?

A node is any server, VM, Raspberry Pi, or desktop capable of running containers — whether managed by Portainer or running Portainer Server itself. Three nodes free means you can manage up to three machines at zero cost, forever, with full Business Edition features including RBAC, GitOps, 2FA, and Kubernetes support.

Starter vs Scale vs Enterprise

The Starter plan at $1,045/year suits small teams with 5–15 servers that want a cost-effective paid tier. Scale at $2,095/year adds vendor onboarding, 9×5 next-business-day support, and higher vCPU limits per node — the right choice for growing operations. Enterprise is custom-priced and covers 32+ vCPU nodes, a dedicated support engineer, TAA compliance certificates, and optional 24/7 support.

Installing Portainer on Ubuntu/Debian VPS

The installation takes roughly five minutes. You need a VPS running Ubuntu 22.04+ or Debian 11+ with at least 1 GB RAM and Docker installed.

Step 1: Install Docker

curl -fsSL https://get.docker.com | sh
sudo usermod -aG docker $USER
newgrp docker

Step 2: Create a Persistent Volume

docker volume create portainer_data

Step 3: Run Portainer Business Edition

docker run -d   -p 8000:8000   -p 9443:9443   --name portainer   --restart=always   -v /var/run/docker.sock:/var/run/docker.sock   -v portainer_data:/data   portainer/portainer-ee:latest

Step 4: Open the Dashboard

Navigate to https://your-vps-ip:9443 in a browser. You will see a certificate warning on first visit — click Advanced and proceed. Create your admin username and password, then click Get Started to connect to the local Docker environment.

Open Ports in UFW Firewall

sudo ufw allow 9443/tcp comment 'Portainer HTTPS'
sudo ufw allow 8000/tcp comment 'Portainer Edge Agent'

Key Features of Portainer

Container Management

The heart of Portainer is its container list view. From there you can start, stop, restart, pause, and kill individual containers, view live logs and resource stats (CPU, memory, network I/O), open an in-browser terminal directly into a running container, and inspect every configuration detail.

Image Management

Pull images from Docker Hub or any private registry, view image layers and sizes, tag and push images, and build new images from a Dockerfile — all without leaving the browser.

Volumes and Networks

Create, browse, and delete Docker volumes and custom networks. Portainer shows which containers are attached to each volume and network so you can safely clean up unused resources.

Stacks (Docker Compose)

Deploy multi-container applications from a docker-compose.yml using the built-in web editor, file upload, or a Git repository URL. Portainer tracks the state of each stack and lets you update, redeploy, or roll back with one click.

Role-Based Access Control (RBAC)

Create users, assign them to teams, and define granular permissions: who can deploy stacks, who can only view container logs, who has admin rights. Scoped access keeps prod environments safe when onboarding new developers.

Multi-Environment Management

Portainer can manage multiple environments from one dashboard: local Docker socket, remote Docker hosts over TLS, Docker Swarm clusters, and Kubernetes clusters (via kubeconfig or Portainer Edge Agent). Switch between environments in the sidebar.

Secrets and Configs

Store sensitive values (API keys, passwords, certificates) as Docker Secrets and reference them inside containers without hard-coding credentials in compose files. Available in Swarm mode and supported in standalone Docker via the Portainer UI.

Working with Stacks

Stacks are the most powerful feature for day-to-day operations. A stack is simply a named docker-compose.yml managed by Portainer — you can deploy, scale, update, and roll back the entire multi-container application as a single unit.

Deploying a New Stack

1. Go to Stacks → Add stack
2. Give it a name, e.g., wordpress-prod
3. Paste your docker-compose YAML into the Web editor, or choose Upload for a local file, or Repository to pull from Git
4. Click Deploy the stack

Example: WordPress + MySQL Stack

version: '3.8'
services:
  wordpress:
    image: wordpress:latest
    ports:
      - "80:80"
    environment:
      WORDPRESS_DB_HOST: db
      WORDPRESS_DB_USER: wpuser
      WORDPRESS_DB_PASSWORD: secret123
      WORDPRESS_DB_NAME: wordpress
    volumes:
      - wp_data:/var/www/html
  db:
    image: mysql:8.0
    environment:
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wpuser
      MYSQL_PASSWORD: secret123
      MYSQL_ROOT_PASSWORD: rootsecret
    volumes:
      - db_data:/var/lib/mysql
volumes:
  wp_data:
  db_data:

GitOps Automatic Updates

For GitOps workflows, choose Repository as the stack source and enable Automatic updates. Portainer will poll the branch on a schedule (configurable in minutes) and redeploy whenever the compose file changes — giving you a lightweight CI/CD pipeline without extra tooling.

Portainer vs Alternatives

Data as of October 2026 — verify at each vendor's website.

Portainer wins on the balance between ease of use and depth of features. It is significantly more capable than Dockge or Yacht, yet far lighter to deploy and operate than Rancher. For any VPS running Docker with one to a few dozen servers, Portainer is the clear choice in 2026.

Security and Best Practices

1. Put Portainer Behind a Reverse Proxy with SSL

Avoid exposing port 9443 directly. Use Nginx or Traefik as a reverse proxy with a Let's Encrypt certificate and a dedicated subdomain such as portainer.yourdomain.com. This keeps the management interface off the default port and properly encrypted.

2. Restrict Access by IP

Limit who can reach the Portainer port to your office or home IP using UFW:

sudo ufw allow from YOUR_IP to any port 9443
sudo ufw deny 9443

3. Enable Two-Factor Authentication

Portainer Business Edition supports TOTP-based 2FA. Every admin account should have 2FA enabled. Navigate to My account → Two-factor authentication and scan the QR code with any TOTP app.

4. Do Not Use "admin" as the Admin Username

Bots constantly brute-force the admin username. During initial setup, choose a non-obvious username to significantly reduce automated attack surface.

5. Bind Mount the Docker Socket Carefully

Mounting /var/run/docker.sock gives Portainer (and anyone with Portainer access) full Docker control over the host. Treat Portainer access as equivalent to root SSH access and protect it accordingly.

6. Keep Portainer Updated

docker pull portainer/portainer-ee:latest
docker stop portainer && docker rm portainer
docker run -d -p 8000:8000 -p 9443:9443 --name portainer   --restart=always   -v /var/run/docker.sock:/var/run/docker.sock   -v portainer_data:/data   portainer/portainer-ee:latest

Summary

Portainer transforms container management from a CLI chore into a visual, team-friendly workflow. The free 3-node Business Edition makes it accessible to everyone, and the paid tiers offer a clear upgrade path as infrastructure grows.

To run Portainer effectively you need a reliable VPS with low latency. Providers with data centers in Asia offer the best response times for teams in Thailand and Southeast Asia:

Frequently Asked Questions