Better use a password manager in this case (or even better, use public key auth!)

hah, i also tend to up the attempts... If you have more than one server you can always tunnel through one of the others if you lock yourself out. Worst case of course VPS console.