Reset a Managed cPanel Account Password in WHM

An authorized WHM administrator can set a new password for a managed cPanel account without knowing its old password. This changes the selected account’s credential, not the server’s root password or every mailbox password.

Before resetting an account

Verify the request through the account’s approved recovery process. Confirm the cPanel username and domain, your administrative scope, and whether the account uses the same credential for system-user FTP or SSH access. Separate email accounts and database users have their own credentials.

Use WHM Password Modification

1. Open the trusted WHM HTTPS address using an administrator account with the required permission.
2. Find Account Functions > Password Modification. Select the intended account by username or domain, and double-check the selection.
3. Enter and confirm a long unique password that meets the configured policy, or use the available generator and store the result securely.
4. Apply the change. In versions that expose password modification through an expanded List Accounts entry, verify the same account before saving there.

Do not enable an optional insecure authentication feature merely because it appears on the screen. Review any Web Disk or synchronized-service option against the actual service configuration.

Verify and hand over securely

Have the authorized owner test the intended HTTPS login and update clients that actually depend on this credential. Use an approved secret-sharing method, not a public ticket, screenshot or command-line argument. A reset sets a replacement; it does not reveal the previous password.

If compromise prompted the reset, also review sessions, tokens, recovery addresses and unexpected account changes. A password change alone is not evidence that an intrusion has been removed. If your WHM permissions do not allow the reset, contact the responsible administrator instead of granting broader privileges as a workaround.

Reference: cPanel’s Password Modification documentation.

Reviewed October 15, 2026. Documentation review; no customer password or WHM account was changed.