GICT knowledge base
Use cPanel File Manager with Clear Paths and Recovery Checks
Published
cPanel File Manager manages files through the panel’s browser session. It is not an FTP client and does not require sharing FTP credentials. Enter through the verified HTTPS hosting panel and confirm the account and intended directory before changing files.
Navigate and inspect
Open Files > File Manager. Use its Settings to review the starting directory and show hidden files where needed. Hidden entries such as .htaccess can affect the website; showing them is not permission to delete them. Check the full path rather than assuming every domain serves public_html itself.
Use the search controls with the intended directory scope. An empty or filtered listing is not conclusive proof that data is absent. File visibility, permissions and application routing are different questions.
Create, transfer and edit
Use the installed New File/Folder, Upload, Download, View/Edit and Rename actions for the selected item. Preserve an independent private before-state before editing a live configuration. Review encoding and do not overwrite unrelated application files. Browser upload/edit limits depend on the installed interface; a large file may require a different approved method.
Copy and Move need exact source/destination checks and deliberate overwrite decisions. Compression is not proof of a complete recoverable backup. Inspect archive paths before extraction and keep archives containing secrets out of publicly served directories.
Permissions and directory protection
Change Permissions only for the precise intended object and required access. Avoid blanket recursive or world-writable changes to fix an application error. Directory password protection, where offered, governs relevant web access; it is not a substitute for filesystem ownership or a guarantee that every alternate endpoint is protected.
Deletion and recovery
Inspect the exact selected files and confirmation. Current documentation describes Trash and Restore; permanent deletion/Empty Trash removes that recovery route. Do not assume every deletion option, archive overwrite or external tool uses Trash. Verify a usable backup before destructive operations and recheck the website afterward.
Reference: cPanel File Manager operations and Trash.
Reviewed October 16, 2026. No customer file, permission, archive, password protection or Trash action was changed or tested.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
