How to change your cPanel password

This guide shows how to change the main password for your cPanel account, what else relies on that password, and what to do if you’ve forgotten it.

Before you change it

Your cPanel password is the master key to your hosting. Depending on how you set things up, it may also be used by:

• FTP programs such as FileZilla, if you connect with your main cPanel username rather than a separate FTP account
• SSH, if you log in with a password instead of a key
• Backup or deployment tools that connect to your hosting, such as a sync tool or a script on another computer
• Any saved login in your browser or password manager

After the change, update each of these or they’ll fail to connect. Email accounts and WordPress logins have their own passwords and are not affected.

Change the password in cPanel

1. Log in to cPanel.
2. In the Preferences section, open Password & Security.
3. Type your current password in Old Password.
4. Type the new password in New Password and again in New Password (again). You can click Password Generator to have one made for you. Copy it somewhere safe before you click away.
5. Check the strength meter shows a good score. cPanel may refuse a password that’s too weak.
6. Click Change your password now!

cPanel logs you out straight away. Log back in with the new password to check it works.

You may also see an option about Digest Authentication. You only need it if you connect to cPanel’s Web Disk from an older version of Windows over a plain connection. Most people can leave it alone.

Pick a strong password

A good password is long and unique to this account. Some simple rules:

• Use at least 16 characters. Length counts for more than odd symbols.
• Never reuse a password from another site. If that site leaks, your hosting is exposed too.
• A string of four or five random, unrelated words is easy to type and hard to guess.
• Let a password manager create and store it, so you don’t have to remember it.

Avoid your domain name, your business name, dates and anything a visitor could work out from your website.

Forgot your cPanel password?

You can’t reset a forgotten password from the cPanel login screen. Do it from our client area instead.

1. Log in to the client area at billing.webhostgb.com.
2. Open your list of services and click the hosting plan.
3. Look for the option to change or reset the cPanel password, set a new one and save.

If you don’t see a password option for your plan, many people find it easier to open cPanel straight from the client area, as the login link there doesn’t ask for a password. You can then change it in Password & Security as above. If neither works, open a support ticket from the client area and we’ll help you regain access.

Your client area login is separate from cPanel. Changing one does not change the other.

Add two-factor authentication

A strong password is a good start. Two-factor authentication means someone with your password still can’t get in without a code from your phone. It takes a couple of minutes to set up. See how to turn on two-factor authentication in cPanel.

If it doesn’t work

• “The password you selected cannot be used” or a strength error. Make the password longer or add more variety. A generated password always passes.
• FileZilla or another FTP program says login failed. Update the saved password in its site manager. See how to connect with FileZilla.
• You get locked out after several tries. Our security system can block your IP address after repeated failed logins. Wait a while and try again with the right password, or ask us in a ticket to check for a block.
• You think someone else knew the old password. Change it now, turn on two-factor authentication and scan your site. See how to scan your site for malware.

Still stuck? Open a support ticket and we’ll help.