Ubuntu includes a built-in tool called unattended-upgrades that automatically installs security updates for you, keeping your server protected without manual work.

Note: This requires root/SSH access to your server. If you're on a shared hosting plan, this is already managed for you — no action needed.

Step 1: Install the tool

 
bash
apt update
apt install -y unattended-upgrades

Step 2: Enable automatic updates

 
bash
dpkg-reconfigure --priority=low unattended-upgrades

When the prompt appears, select Yes.

Step 3: Confirm it's active

 
bash
cat /etc/apt/apt.conf.d/20auto-upgrades

You should see:

 
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

Both set to "1" means it's enabled and will run automatically.

That's it. Your server will now check for and install security updates automatically, helping keep it protected without any manual intervention.

If you'd like assistance configuring this or want to review your update logs, feel free to open a support ticket and our team can help.