Page tree
Skip to end of metadata
Go to start of metadata

For cPanel & WHM version 60

(Home >> Preferences >> Password & Security)

Overview

This interface allows you to update your account's password. A strong password is an important part of the security of your cPanel account.

Change your password

To change your password, enter the desired information and click Change, or use the Password Generator feature.

Create a strong password

To ensure your account's security, make certain to create a strong password:

  • Use a different password for each of your important accounts (for example, your email accounts). 
  • Use a combination of letters, numbers, and symbols in your password.

Password Generator

The Password Generator feature generates secure passwords, which are difficult for malicious users to guess. You can use the Password Generator feature in any interface that displays it. 

When you click Password Generator, a new window appears that contains a generated password in a text box. Click Generate Password as many times as you wish until you are satisfied with the password.

In This Document

Related Documentation

For Hosting Providers

Configure security requirements

To set the security requirements of the new password, perform the following steps:

  1. Click Advanced Options.
  2. Enter the desired length of the password in the Length text box.
  3. Select whether to include uppercase letters, lowercase letters, numbers, or symbols.
  4. Copy the password in a safe place and select the I have copied this password in a safe place checkbox at the bottom of the window.
  5. Click Use Password to use the generated password. To reject the password and close the Password Generator window, click Cancel.

External Authentication

Your system administrator may allow users to access cPanel with external authentication credentials (for example, cPanelID, WHMCS, Google Accounts, Facebook, or your hosting provider's portal). This functionality allows you to reduce the number of passwords that you need to remember.

The External Authentication tab lists the credentials for OpenID Connect-compliant identity providers that you can use to log in to cPanel and Webmail.

You can also use this section of the interface to link new credentials or unlink existing credentials.

Notes:

  • This section only appears if the server administrator has configured at least one external authentication module.
  • This interface only displays the external authentication identity providers that your hosting provider selects in WHM's Manage External Authentications interface (Home >> Security Center >> Manage External Authentications).
  • Most identity providers allow you to register for an account as part of the authentication process.
  • Your cPanelID is the same username and password that you use for the cPanel Store, the cPanel Tickets system, and the Manage2 billing system. If you do not already use a cPanelID, you can register for one during the authentication process.
  • You can link one or more external accounts to one or more cPanel accounts, WHM accounts, or Webmail accounts.

  • If you link to an external account through an identity provider that has two-factor authentication enabled, you must also authenticate through that identity provider in addition to any two-factor authentication that you configure on your server.

Link your account

To link your cPanel or Webmail account to credentials at an external authentication identity provider, perform the following steps:

  1. Click the External Authentication tab.
  2. Click Link Account next to the name of the appropriate identity provider. A new login interface will appear for that identity provider.
  3. Enter the requested username, password, and other credentials for that identity provider. If you are currently logged in to that identity provider, the interface will skip this step.
  4. Confirm that you wish to allow the provider to link to your cPanel or Webmail account.
  5. Confirm that you wish to link your cPanel account to the provider's authentication credentials.

Unlink your account

To unlink external authentication identity provider credentials from your account, click Unlink Account next to the appropriate account.

A new interface will appear that asks you to confirm that you wish to unlink your account.