GICT knowledge base
Change Your cPanel Account Password Securely
Published
Use cPanel’s account password settings when you know the current password. A lost password needs an authorized recovery route; changing the cPanel login is not the same as changing a mailbox, WordPress or WHM root password.
Change your own account password
- Sign in through the trusted HTTPS panel link supplied for your service. Verify the account and hostname.
- In the applicable interface, open Password & Security under Preferences, or the password area in newer Account Preferences layouts.
- Enter the current password and a long unique replacement. Use a password manager or the available generator, and save the secret privately.
- Confirm and save, then test the new credential on the intended login path.
If you have lost access
Use the panel’s recovery feature if enabled, or open an authenticated support request through the InterServer portal. Availability and identity checks depend on your service; this guide does not promise a particular PIN, bypass or recovery time. Do not send the new password in an ordinary ticket.
Review affected clients
The primary account credential may also be used by authorized FTP or other service connections, depending on configuration. Review those dependencies and update them deliberately. Do not assume separate mailbox/database users share the new password or that existing API tokens/sessions are revoked automatically.
Use unique credentials and 2FA where available. Change exposed or compromised secrets promptly; a fixed monthly rotation is not a substitute for secure storage, monitoring or incident response.
References: cPanel Password & Security; newer account-settings layout.
Reviewed October 15, 2026. No hosting account, reset request or dependent client was changed.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
