# cPanel & WHM Documentation

> Documentation for the cPanel, WHM, and Webmail products.

## Knowledge Base

- [Account Creation Errors](https://docs.cpanel.net/knowledge-base/accounts/account-creation-errors/): Troubleshoots common cPanel & WHM account creation failures: groupadd/useradd errors caused by immutable flags on /etc/passwd or /etc/group (fixed with chattr -i) or a corrupt /etc/gshadow file (rebuilt with grpconv), and 'unable to add user' errors caused by a pre-existing username, checked via the /home/username directory or /etc/passwd entries.
- [Account Suspension Versus Bandwidth Limiting and Account Termination](https://docs.cpanel.net/knowledge-base/accounts/account-suspension-versus-bandwidth-limiting-and-account-termination/): Distinguishes three cPanel & WHM account states: suspension (manually triggered via Manage Account Suspension or suspendacct/unsuspendacct scripts, sets SUSPENDED=1, redirects web traffic, locks passwords in /etc/shadow, but still allows mail and DNS), bandwidth limiting (automatically applied when monthly bandwidth is exceeded, restricting only HTTP/HTTPS access via /var/cpanel/bwlimited/, removable via Limit Bandwidth Usage or Unsuspend Bandwidth Exceeders), and termination (permanent data deletion via Terminate Accounts or the removeacct script, which also deletes DNS zones by default).
- [Addon Domain Conversion List](https://docs.cpanel.net/knowledge-base/accounts/addon-domain-conversion-list/): Lists what WHM's Convert Addon Domain to Account interface does and does not migrate when converting an addon domain into a standalone cPanel account. Migrated data includes DNS records, document root contents, VirtualHost includes, SSL certificates, email accounts/autoresponders/filters/forwarders/mailing lists/webmail, MySQL databases and users, redirects, and FTP/Web Disk subaccounts. Not migrated: installed applications, MultiPHP settings, subaccounts and subdomains (subdomains must be deleted first or the conversion fails), and accounts with an assigned IPv6 address (must disable IPv6 first).
- [Apparent Discrepancies in Bandwidth Usage Statistics](https://docs.cpanel.net/knowledge-base/accounts/apparent-discrepancies-in-bandwidth-usage-statistics/): Explains why bandwidth usage numbers differ between cPanel & WHM's Bandwidth and View Bandwidth Usage interfaces and log-analysis tools like AWStats, Analog, and Webalizer: cPanel & WHM measures full request-plus-response bytes from Apache logs, while log analyzers measure only requested content size, and processing cycles run at least eight minutes apart. Covers scenarios that widen the gap (errors/redirects, small files, cancelled downloads) and recommends relying on cPanel & WHM's own bandwidth interfaces, tuned via WHM's Statistics Software Configuration interface.
- [cPanel Solo® License](https://docs.cpanel.net/knowledge-base/accounts/cpanel-solo-license/): Describes the cPanel Solo license, which limits WHM to managing a single cPanel account and requires cPanel & WHM 66.0.25 or later. Lists WHM interfaces removed entirely under Solo (e.g. Compiler Access, Modify an Account, reseller-management and multi-account interfaces, Background Process Killer, Modify cPanel WHM News) and interfaces with reduced functionality (Create a New Account, Tweak Settings, Edit Reseller Nameservers and Privileges), and notes downgrade eligibility for Certified Partners with fixed packages.
- [cPanelID](https://docs.cpanel.net/knowledge-base/accounts/cpanelid/): Describes cPanelID, an OpenID Connect-based credential set used to log in to the cPanel Store, cPanel Tickets system, Manage2 billing, and cPanelID-linked cPanel/WHM/Webmail accounts via External Authentication. Covers how to obtain a cPanelID, how it differs from the cPanelID External Authentication identity provider, disabling that provider in WHM's Manage External Authentications interface, interaction with Two-Factor Authentication, and cPanel Store referral fee implications for reseller transfers.
- [Create a Website](https://docs.cpanel.net/knowledge-base/accounts/create-a-website/): Covers cPanel tools for quickly building a website: the Sitejet Builder interface for designing and publishing via the Sitejet Website Builder CMS, WP Toolkit for installing and configuring WordPress, Site Publisher for a placeholder page (removed in cPanel & WHM 134), and manual content upload via Web Disk, Git Version Control, File Manager, or FTP Accounts.
- [From WHM to Website](https://docs.cpanel.net/knowledge-base/accounts/from-whm-to-website/): Step-by-step walkthrough for publishing a first website on a new cPanel & WHM server: log in to WHM, set the hostname, configure DNS resolvers and nameservers, set up reverse DNS, create the cPanel account, then in cPanel create an email account and publish content via Sitejet Builder, WP Toolkit (WordPress), Site Publisher placeholder pages, or manual upload via Web Disk, Git Version Control, File Manager, or FTP.
- [Guide to Reseller Accounts](https://docs.cpanel.net/knowledge-base/accounts/guide-to-reseller-accounts/): Explains reseller accounts in cPanel & WHM: managing them via the WHM Resellers section or Reseller Center interface, privilege categories (Initial, Standard, Package, Global, Super, and Root Access/All Features, the last of which is discouraged since it bypasses account creation limits), a list of default reseller-accessible WHM features (e.g. Basic WebHost Manager Setup, Manage External Authentications, Manage API Tokens), and the root/user/global package naming convention that determines which packages a reseller can view and assign, including the viewglobalpackages ACL.
- [How to Create a Demo cPanel Account](https://docs.cpanel.net/knowledge-base/accounts/how-to-create-a-demo-cpanel-account/): Describes how to set up a demo cPanel account for prospective customers using WHM's Create a New Account interface and then enabling Demo Mode via WHM's Manage Demo Mode interface, so the account can be browsed without allowing file or setting changes; also covers deleting a demo account via WHM's Terminate Accounts interface. Notes that reseller accounts cannot be used as demo accounts.
- [How to Create a WHM Reseller Without an Associated Domain](https://docs.cpanel.net/knowledge-base/accounts/how-to-create-a-whm-reseller-without-an-associated-domain/): Covers creating, modifying, and removing a WHM reseller/administrative account with no associated cPanel domain, via the WHM API 1 createacct function (with reseller_without_domain=1) or manual steps (useradd, an entry in /var/cpanel/resellers, the /var/cpanel/users/username file, and permissions set in WHM's Edit Reseller Nameservers and Privileges interface). Passwords for these accounts must be changed with the passwd command, not WHM's Password Modification interface. Lists known limitations, including broken File and Directory Restoration and SSL certificate generation interfaces, no email notifications, and no pkgacct backup support.
- [How to Disable Filesystem Quotas](https://docs.cpanel.net/knowledge-base/accounts/how-to-disable-filesystem-quotas/): Provides post-installation steps to disable XFS filesystem quotas on a cPanel & WHM server: for the root filesystem, remove the rootflags=uquota line from /etc/default/grub, regenerate GRUB, run xfs_quota to disable quotas, and reboot; for non-root filesystems, remove the uquota entry from /etc/fstab, run xfs_quota, and remount without rebooting.
- [How to Log in to Your Server or Account](https://docs.cpanel.net/knowledge-base/accounts/how-to-log-in-to-your-server-or-account/): Explains how to log in to cPanel (port 2083), WHM (port 2087), and Webmail (port 2096) via browser URL with username/password or external authentication (for example, cPanelID), and how two-factor authentication affects login. Also covers service URL structure (protocol, address, port, security token), the whmlogin script for single-use WHM session URLs, SSH/CLI access, and changing the login interface locale.
- [How to Rebuild userdata Files](https://docs.cpanel.net/knowledge-base/accounts/how-to-rebuild-userdata-files/): Explains how to rebuild corrupt or missing /var/cpanel/userdata/ files on a cPanel & WHM server. If a valid httpd.conf exists, move the old userdata directory, create a new one, run userdata_update --reset, fix_userdata_perms, updateuserdatacache, then rebuild and restart Apache via rebuildhttpdconf and restartsrv_httpd. If httpd.conf is invalid, instead restore userdata from a recent backup archive before running the same cache-update and Apache-rebuild steps.
- [Problems When You Log Out Of An Account](https://docs.cpanel.net/knowledge-base/accounts/problems-when-you-log-out-of-an-account/): Explains why switching between cPanel/webmail accounts can be difficult when a server uses HTTP basic authentication, since most browsers retain the session until closed regardless of clicking Log Out. Notes basic authentication is disabled (skiphttpauth=1) by default, cannot be toggled via the WHM UI, and can only be changed by manually editing skiphttpauth in /var/cpanel/cpanel.config and restarting cPanel; this setting is not recommended to enable.
- [Reseller Accounts Versus Accounts with Multiple Domains](https://docs.cpanel.net/knowledge-base/accounts/reseller-accounts-versus-accounts-with-multiple-domains/): Compares reseller accounts (which grant WHM access to create and sell separate cPanel accounts, each with its own resources and login) against a single cPanel account managing multiple domains (which shares one login and pooled resources across domains). Discusses considerations for choosing between them: security isolation, resource limitation planning, and SEO implications of separate domains versus subdomains.
- [Reserved, Invalid, and Misconfigured Usernames](https://docs.cpanel.net/knowledge-base/accounts/reserved-invalid-and-misconfigured-username/): Details cPanel & WHM username rules (lowercase letters and digits only, 16-character max, cannot start with a digit or 'test', cannot end in 'assword', no hyphens, LONGUSERS setting, database name-prefix uniqueness) and lists reserved usernames/aliases (e.g. root, postmaster, ftp, webmaster) tied to TSR-2017-0006. Explains renaming an account with whmapi1 modifyacct to resolve restricted usernames and running /usr/local/cpanel/scripts/updateuserdomains --force to fix misconfigured usernames.
- [VirtFS Jailed Shell](https://docs.cpanel.net/knowledge-base/accounts/virtfs-jailed-shell/): Explains VirtFS jailed shell environments in cPanel & WHM: how the /home/virtfs/ directory and BIND mounts work, how to enable jailed shell via WHM's Tweak Settings or Manage Shell Access interfaces, how Exim interacts with VirtFS, why CSF/LFD md5sum alerts on crontab/passwd are false positives, and how to disable or remove jailed shells including the clear_orphaned_virtfs_mounts script.
- [WebPros Account](https://docs.cpanel.net/knowledge-base/accounts/webpros-account/): Explains WebPros Account, an External Authentication identity provider for logging in to WHM. Covers enabling the provider (automatic in cPanel & WHM 132+, opt-in via /var/cpanel/panel.ini and Manage External Authentications in version 126 and earlier), the WHM login and account-linking flow, creating a WebPros account with password and Terms of Use requirements, logging out, and enabling 2FA on the WebPros account in addition to server-side 2FA.
- [What Happens When You Suspend an Account](https://docs.cpanel.net/knowledge-base/accounts/what-happens-when-you-suspend-an-account/): Details the system actions triggered by suspending a cPanel account via WHM's Manage Account Suspension interface: sets SUSPENDED/SUSPENDTIME flags in /var/cpanel/users/cpuser, stops user processes and cron jobs, locks mailing lists (Mailman suspended.lists), locks Web Disk and email passwords, blocks outgoing/incoming mail per Exim Configuration Manager delivery settings, redirects websites via an Apache account_suspensions.conf include, locks the /etc/shadow password with passwd -l, sets public_ftp permissions to 0000, and changes all MySQL user passwords.
- [Backup Retention Behavior](https://docs.cpanel.net/knowledge-base/backup/backup-retention-behavior/): Explains cPanel & WHM's two backup retention modes, set in WHM's Backup Configuration interface: default retention, which keeps failed backups plus the configured number of successful backups until the next success (potentially exceeding the configured count), and strictly-enforced retention, which deletes the oldest backup on every completion while always keeping at least one successful backup and never exceeding the configured limit. Recommends strictly-enforced retention for servers with limited disk space.
- [Backup Tarball Contents](https://docs.cpanel.net/knowledge-base/backup/backup-tarball-contents/): Documents the internal directory and file structure of a cPanel & WHM account backup tarball (USERNAME.tar.gz), covering directories such as homedir, mysql, psql, dnszones, sslcerts, sslkeys, userdata, cron, the Mailman mm/mma/mms directories, and resellerconfig, plus standalone files like quota, shadow, bandwidth_db.json, autossl.json, addons, and pds, noting the source path and purpose of each. States the tarball format is not a supported integration endpoint and its contents can change at any time.
- [How to Configure Google Drive as a Backup Additional Destination](https://docs.cpanel.net/knowledge-base/backup/how-to-configure-google-drive-as-a-backup-additional-destination/): Step-by-step guide to configuring Google Drive as an Additional Destination in WHM's Backup Configuration interface: creating a Google Cloud project and enabling the Drive API, generating OAuth Client ID credentials with the drive.file scope and a https://HOSTNAME:2087/googledriveauth/callback redirect URI, adding test users to the OAuth consent screen, publishing the app to avoid its 7-day auto-disable, and creating/authorizing the transport with destination name, folder, client ID/secret, and timeout settings.
- [How to Create a Custom Transport Script for Backups](https://docs.cpanel.net/knowledge-base/backup/how-to-create-a-custom-transport-script-for-backups/): Explains how to write a custom_backup_destination.pl transport script for WHM's Backup Configuration Custom destination type, implementing the chdir, delete, get, ls, mkdir, put, and rmdir commands with arguments passed via command line (cmd, local_dir, args, host, user) and password via the PASSWORD environment variable. Points to /usr/local/cpanel/scripts/custom_backup_destination.pl.skeleton and .sample as starting templates.
- [How to Exclude Files from Backups](https://docs.cpanel.net/knowledge-base/backup/how-to-exclude-files-from-backups/): Explains how to exclude files or directories from cPanel account backups using a global /etc/cpbackup-exclude.conf file (applies to all users) or a per-user cpbackup-exclude.conf file in the user's home directory (applies to that user only). Notes that these exclude files affect WHM Backup and cPanel's Download a Full Website Backup feature, but do not affect Home Directory backups or the /scripts/pkgacct script.
- [How to Manage Metadata Settings](https://docs.cpanel.net/knowledge-base/backup/how-to-manage-metadata-settings/): Describes cPanel & WHM backup metadata: the username.db metadata databases (backup_paths, backups, file_changes, metadata, and seen_files tables) stored in the .meta directory, the .master.meta file, and the /backup directory structure. Explains how to disable metadata creation using the DISABLE_METADATA, BACKUPACCTS, BACKUPENABLE, BACKUPMOUNT, or KEEPLOCAL settings via WHM's Backup Configuration interface, the backups_create_metadata script, or the backup_config_set WHM API 1 function.
- [How to Resolve CIFS-mounted Backup Drive Permissions Errors](https://docs.cpanel.net/knowledge-base/backup/how-to-resolve-cifs-mounted-backup-drive-permissions-errors/): Fixes '/bin/cp: failed to preserve ownership: Permission denied' errors when backing up to a CIFS-mounted drive, caused by missing extended attributes. Steps: add the user_xattr mount option to the CIFS entry in /etc/fstab, run remount mount, and verify extended-attribute support with lsattr /CIFS_mount (an 'Inappropriate ioctl for device' error means the mount is unsupported for cPanel & WHM backups).
- [How to Run Backups on Locally-Mounted Remote Filesystems](https://docs.cpanel.net/knowledge-base/backup/how-to-run-backups-on-locally-mounted-remote-file-systems/): Explains that cPanel & WHM's backup utility only mounts or unmounts partitions listed in /etc/fstab, and shows how to configure a locally-mounted remote filesystem (NFS, CIFS, smbfs, or similar) with the noexec mount option and how to remount it with mount -o remount,noexec. Warns that backing up directly to a remote/network filesystem is not an officially supported cPanel & WHM configuration.
- [How to Troubleshoot a Remote Transport Pruning Failure](https://docs.cpanel.net/knowledge-base/backup/how-to-troubleshoot-a-remote-transport-pruning-failure/): Troubleshoots remote backup transport pruning failures that occur when deleting old remote backups exceeds the 300-second system time limit. Covers FTP server requirements (MLSD/LIST command support and dot-file visibility settings for Pure-FTPd, ProFTPD, and vsftpd), and remediation options: manually deleting oversized remote directories, disabling an account's backup via WHM's Backup User Selection interface or the toggle_user_backup_state API, switching from incremental to compressed backups via backup_config_set, replacing a slow backup destination, re-running /usr/local/cpanel/bin/backup after network errors, and resolving permission-denied errors with chmod +w.
- [Remote Restoration](https://docs.cpanel.net/knowledge-base/backup/remote-restoration/): Explains how to restore cPanel account backups stored at additional destinations (Amazon S3, FTP, Google Drive, S3 Compatible, SFTP, WebDAV, local directory, or custom locations) configured in WHM's Backup Configuration interface. Users must manually transfer the backup file to the server's BACKUPDIR/yyyy-mm-dd/accounts directory before WHM's Backup Restoration interface can restore it; requires account backups and Retain Backups in the Default Backup Directory to be enabled, or alternatively use Transfer or Restore a cPanel Account.
- [System Backups](https://docs.cpanel.net/knowledge-base/backup/system-backups/): Covers cPanel & WHM system backups: enabling them via the Back up System Files checkbox in Backup Configuration or the backup_config_set API's backupfiles parameter, the list of system files and directories backed up (e.g. /etc/passwd, /etc/shadow, /var/cpanel, /var/lib/mysql), adding custom files/directories via /var/cpanel/backups/extras, and configuring additional destinations to receive system backups (interface, manual config file upload_system_backup: 1, or the backup_destination_set API). Notes there is no built-in restore interface for system backup files and points to /usr/local/cpanel/logs/error_log for backup initialization logs.
- [Calendar and Contacts Server](https://docs.cpanel.net/knowledge-base/cpanel-developed-plugins/calendar-and-contacts-server/): Covers the Calendar and Contacts Server (CCS) plugin for CalDAV/CardDAV account management, installed and uninstalled via WHM's Manage Plugins interface. Requires PostgreSQL and loopback NAT support if behind NAT; not supported on CloudLinux 9, Rocky Linux 9, or AlmaLinux OS 9. CCS was removed in cPanel & WHM version 120, replaced by the cpdavd service; administrators access CCS data through port 2080. Also documents the bundled Z-Push - ActiveSync Support plugin (deprecated in version 118, requires CCS, 7 GB RAM, 4 CPU cores, and the Calendars and Contacts / Exchange ActiveSync features) and how to uninstall it independently of CCS.
- [WP Toolkit Command Line Interface](https://docs.cpanel.net/knowledge-base/cpanel-developed-plugins/wp-toolkit-command-line-interface/): Reference for the wp-toolkit CLI, covering commands such as --install, --clone, --copy-data, --detach, --register, --info, --config, --wp-cli, --list, --sets, --plugins, --themes, --smart-update, --clear-cache, --clear-wpt-cache, --languages, and --versions, plus their required and optional options (for example -instance-id, -main-domain-id, -path, -format, -operation) with example invocations.
- [WP Toolkit](https://docs.cpanel.net/knowledge-base/cpanel-developed-plugins/wp-toolkit/): Covers installing WP Toolkit (auto-installed in cPanel & WHM 102+) via the WHM Marketplace or a manual installer script, and its prerequisites: MySQL 5.7+ via the Upgrade Database Version interface, the PHP-FPM Service for cPanel Daemons in Service Manager, required WordPress PHP extensions, a PHP memory_limit of 128 MB or higher, and enabling the WP Management feature (plus WP Toolkit Deluxe for advanced features like Staging and Cloning, Hardening, and Smart Updates) in Feature Manager. Also covers nightly auto-updates, troubleshooting via logs in /usr/local/cpanel/3rdparty/wp-toolkit/var/logs/, enabling enhanced logging, and uninstalling via rpm or apt-get.
- [cPanel Analytics - The Data We Use](https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics-the-data-we-use/): Itemizes the specific data points collected by cPanel Analytics' Interface Analytics (UUID, company ID, license ID, theme, feature and locale use, device type, Webmail/Roundcube access) and Configuration Analytics (accounts, cPAddons, cPHulk, databases, DNS, domains, email, licenses, nameservers, updates, WordPress, and dozens of other server-configuration categories) across cPanel & WHM versions, noting the 26-month data retention period.
- [cPanel Analytics](https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics/): Explains cPanel Analytics' two components: opt-in Interface Analytics (user interface behavior tracking, enabled/disabled via WHM's Configure cPanel Analytics interface or the account-level Account Preferences interface) and mandatory Configuration Analytics (server configuration and update-log data sent via the gather_update_log_stats script), including version-specific defaults for cPanel & WHM 110/126+ versus 118 and earlier.
- [cPanel Deprecation Plan](https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-deprecation-plan/): Lists cPanel & WHM features that are planned for deprecation/removal or already deprecated/removed, in two tables (planned vs. completed) with feature name, recommended replacement action, deprecation version, and removal version — covering items such as AWstats/Webalizer, Roundcube's MySQL backend, MySQL/MariaDB EOL versions, PHP versions, and OS support (CentOS, RHEL, Ubuntu, CloudLinux).
- [cPanel Glossary](https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-glossary/): Alphabetical glossary of cPanel & WHM and web hosting terminology for version 136, covering account and DNS concepts (Account Enhancements, A Entry, Addon Domain), security and access terms (Access Control List, cPHulk, Two-Factor Authentication), protocols and technologies (API, CGI, IMAP, SSH, TLS), and system components (cpsrvd, cpuser file, WHM interfaces).
- [Identify cPanel & WHM or WP Squared from the terminal](https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-whm-or-wp-squared/): Explains how to run `readlink /usr/local/cpanel/server.type` from the terminal to determine whether a server runs cPanel & WHM (output: `cpanel`) or WP Squared (output: `wp2`).
- [How to Cancel a cPanel License](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-cancel-a-cpanel-license/): Explains how to cancel a cPanel license via the cPanel Store's View My Licenses and Request Cancellation flow, the 72-hour refund eligibility window for new purchases, the 30-day prorated-pricing restriction on the associated IP after cancellation, and how to request a refund from cPanel Customer Service.
- [How to Disable the cPanel Store as an SSL Certificate Provider in WHM](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-disable-the-cpanel-store-as-an-ssl-certificate-provider-in-whm/): Explains how to use Manage2's Update Company Information interface to disable the cPanel Store as an SSL certificate provider in WHM's Market Provider Manager, and separately how to disable free Let's Encrypt hostname certificate replacements issued via the cPanel Store, both via checkboxes in the cPanel Store Integration section.
- [How to Enable the Meridian Theme](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-enable-the-meridian-theme/): This document explains how to enabled the Meridian theme for your cPanel users.
- [How to Fix License File Errors](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-fix-license-file-errors/): Troubleshooting steps for cPanel & WHM license errors like 'License File Expired' or 'Cannot Read License File': verify the license IP via myip.cpanel.net and the cPanel License Verification page, run /usr/local/cpanel/cpkeyclt to recheck the license, confirm DNS resolution of auth.cpanel.net and a valid hostname, and check the server's date and time settings.
- [How to Identify Your Hosting Provider](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-identify-your-hosting-provider/): Clarifies that WebPros/cPanel is a software vendor, not the hosting provider, and explains how to identify the actual hosting company for a domain using a WHOIS lookup tool such as whois.com, for issues like forgotten passwords, billing, or technical support.
- [How to Purchase a cPanel License](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-purchase-a-cpanel-license/): Explains how to purchase a cPanel & WHM license: activating a 15-day trial license during initial setup, purchasing from within WHM's Trial License banner, buying through Manage2 as a cPanel Partner, or purchasing directly from the cPanel Store; also notes Developer License eligibility and the 72-hour refund window.
- [How to Renew a Canceled or Expired cPanel License](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-renew-a-canceled-or-expired-cpanel-license/): Explains how to renew a canceled or expired cPanel license via the cPanel Store's Manage Licenses interface: paying the existing invoice if the license lapsed less than 30 days ago, or purchasing a new license through the Order New Services flow if it lapsed more than 30 days ago; also covers running cpkeyclt via SSH to verify license reactivation.
- [How to Sign Up for a Trial License](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-sign-up-for-a-trial-license/): Describes the two ways to activate a free 15-day cPanel & WHM trial license on a new server installation: during the Getting Started in WHM wizard by logging into the cPanel Store, or as an alternative method outside that wizard; also notes that trial-license servers collect root-account behavioral data by default.
- [How to update the AutoSSL provider](https://docs.cpanel.net/knowledge-base/cpanel-product/how-to-update-the-autossl-provider/): Explains how to change a server's AutoSSL provider using WHM's Manage AutoSSL interface (select the Let's Encrypt radio button, agree to terms, save) or via the terminal with the whmapi1 set_autossl_provider command; notes that in cPanel & WHM 120+, Let's Encrypt is the only available AutoSSL provider.
- [How We Determine a Browser Locale](https://docs.cpanel.net/knowledge-base/cpanel-product/how-we-determine-a-browser-locale/): Details the cpsrvd service's ordered fallback logic for choosing a login locale in cPanel, WHM, or Webmail: a locale query-string parameter, then the session_locale cookie, then the browser's Accept-Language header, then WHM Tweak Settings' Server Locale (server_locale in /var/cpanel/cpanel.config), defaulting to U.S. English (en) if none apply.
- [How Your Server Handles Domains and Virtual Hosts](https://docs.cpanel.net/knowledge-base/cpanel-product/how-your-server-handles-domains-and-virtual-hosts/): Explains how cPanel & WHM maps hostnames to virtual hosts (vhosts): every account's primary domain and www subdomain share one vhost, and describes how Aliases (parked domains), Subdomains, and Addon Domains each create or attach to vhosts; also covers how SSL-enabled content mirrors the non-SSL vhost and the one-SSL-certificate-per-vhost limitation.
- [Interface Lock Scripts](https://docs.cpanel.net/knowledge-base/cpanel-product/interface-lock-scripts/): Documents the cPanel & WHM Interface Lock System scripts used to block global or user-specific interface changes during upgrades (e.g., UpdateHostname lock), including /usr/local/cpanel/bin/is_interface_locked, lock_interface, and related scripts with their --help, --version, --name, and --user options; intended for maintenance use only per cPanel support guidance.
- [Keyboard Shortcuts in WHM](https://docs.cpanel.net/knowledge-base/cpanel-product/keyboard-shortcuts-in-whm/): Lists keyboard shortcuts available in the WHM interface, including global shortcuts (e.g., Shift+8 to expand/collapse the menu, Ctrl+/ to focus search) and left navigation menu shortcuts (arrow keys, Tab/Shift+Tab, Enter, Home) for navigating and expanding/collapsing menu categories, including macOS alternatives.
- [Onboarding Assistant](https://docs.cpanel.net/knowledge-base/cpanel-product/onboarding-assistant/): Describes the cPanel Onboarding Assistant modal (version 118, current) shown to new and updated cPanel accounts, covering its WordPress (WP Toolkit), Sitejet Builder, Restore from backup (Backup Wizard), Explore Account, and Skip options, plus how root-level users can hide it.
- [Overselling](https://docs.cpanel.net/knowledge-base/cpanel-product/overselling/): Explains WHM reseller overselling, configured in the Edit Reseller Nameservers and Privileges interface: with overselling enabled, resellers can assign accounts resource quotas that sum to more than their allocated limit, but can't create new accounts once actual combined usage exceeds it; with overselling disabled, account creation stops once allocated (not actual-used) resources reach the reseller's limit.
- [Product Versions and the Release Process](https://docs.cpanel.net/knowledge-base/cpanel-product/product-versions-and-the-release-process/): Explains cPanel & WHM's version numbering (parent, major, minor, build values; even major values are production, odd are development/EDGE), the five release tiers (LTS, STABLE, RELEASE, CURRENT, EDGE) selectable in WHM's Update Preferences, LTS support duration and EasyApache/PHP update policy under LTS, the Extended Lifecycle Support (ELS) program for CentOS/CloudLinux 7 on version 110, and the production release promotion process from EDGE through LTS.
- [Service Subdomains Use the cPanel Service SSL](https://docs.cpanel.net/knowledge-base/cpanel-product/service-subdomains-use-the-cpanel-service-ssl/): Explains that Apache uses the cPanel service SSL certificate (via SNI) to secure service/proxy subdomains like cpanel, whm, webdisk, and webmail, which can trigger SSL warnings for sites without their own certificate; describes how to bypass this by disabling the Service subdomains Tweak Setting and manually creating and redirecting each service subdomain in cPanel's Domains interface.
- [Subaccount Initial Password Guide](https://docs.cpanel.net/knowledge-base/cpanel-product/subaccount-initial-password-guide/): Walks through the Subaccount password-setup flow initiated from cPanel's User Manager 'The user will set the account password' option: the user receives a welcome email with a unique invitation URL, clicks it, and is prompted by the cPanel interface to set their initial password.
- [TailWatch](https://docs.cpanel.net/knowledge-base/cpanel-product/tailwatch/): Describes the TailWatch service, which monitors log files and services via driver modules (stock drivers include chkservd, cpbandwd, eximstats, jailmanager, modseclog, and recentauthedmailiptracker), configurable in WHM's Service Manager; details the chkservd driver's connection-based and process-based monitoring, its five-minute check interval, and use of the restartsrv script to restart failed services.
- [The cpanel.config File](https://docs.cpanel.net/knowledge-base/cpanel-product/the-cpanel-config-file/): Documents the /var/cpanel/cpanel.config file, whose key=value pairs back WHM's Tweak Settings interface; covers validation and fallback behavior plus settings for security, domains, mail, SQL, PHP, stats/logs, notifications, and system administration.
- [The cPanel & WHM Log Files](https://docs.cpanel.net/knowledge-base/cpanel-product/the-cpanel-log-files/): Lists cPanel & WHM, Webmail, and MySQL log file locations and formats, including paths such as /usr/local/cpanel/logs/access_log, error_log, login_log, cpwrapd_log, cphulkd.log, cpdavd logs (DAV-debug.log, DAV-error.log, DAV-io.log), and /var/log/messages or /var/log/secure, with field-by-field log format explanations.
- [The cPanel & WHM Service Daemons](https://docs.cpanel.net/knowledge-base/cpanel-product/the-cpanel-service-daemons/): Lists cPanel & WHM service daemons (for example cpsrvd, cpanellogd, cphulkd, cpdavd, cpgreylistd, dnsadmin, exim, ftpd, httpd, imap, mysql, named, queueprocd, spamd, sshd, and tailwatchd) with a description of each daemon's purpose and which server profiles (Database, DNS, Mail) disable it.
- [The cPanel & WHM Update Configuration File - cpupdate.conf](https://docs.cpanel.net/knowledge-base/cpanel-product/the-cpanel-update-configuration-file-cpupdate-conf/): Documents the /etc/cpupdate.conf file that controls cPanel & WHM update behavior via the CPANEL, RPMUP, SARULESUP, STAGING_DIR, and UPDATES key-value settings, including valid values such as release tiers (edge, current, release, stable, lts) and update frequencies (daily, manual, never).
- [The Quota File Systems Configuration File](https://docs.cpanel.net/knowledge-base/cpanel-product/the-quota-file-systems-configuration-file/): Documents the /var/cpanel/noquotafs configuration file, which lists file system types (one per line, case-insensitive) to exclude from cPanel & WHM's quota system; visible only when quotas are enabled.
- [Third-Party Applications Updates](https://docs.cpanel.net/knowledge-base/cpanel-product/third-party-applications/): Lists third-party applications bundled with cPanel & WHM version 138, organized by cPanel-provided modules (e.g., AWStats, Bootstrap, AngularJS), Perl modules, PHP modules, and OS-provided modules, with version numbers and sources.
- [Tutorial Videos](https://docs.cpanel.net/knowledge-base/cpanel-product/tutorial-videos/): Links to official cPanel YouTube tutorial video playlists: cPanel Basics, cPanel Tutorials, and WHM Tutorials, covering login, interface navigation, and basic to advanced cPanel account and WHM server management tasks.
- [Upgrade Blockers](https://docs.cpanel.net/knowledge-base/cpanel-product/upgrade-blockers/): Explains upgrade blockers, conditions that prevent the cPanel & WHM update process (upcp) from installing or upgrading to a given version, including standard and version-specific compatibility checks, multi-major-version upgrade paths via intermediate versions, and the 5 GB /usr/local/cpanel disk space requirement.
- [What is My Version Number?](https://docs.cpanel.net/knowledge-base/cpanel-product/what-is-my-version-number/): Describes where to find the cPanel & WHM version number in the interface: in WHM it appears near the lower left corner, and in cPanel it appears in the lower left corner.
- [Automatic SSL Certificate Replacement](https://docs.cpanel.net/knowledge-base/dns/automatic-hostname-ssl-certificate-replacement/): Describes cPanel & WHM's automatic free Let's Encrypt SSL certificate replacement for a server's hostname and services, covering triggering conditions (weak/revoked/self-signed/invalid/near-expiry certificates), the replacement process run via the /usr/local/cpanel/scripts/upcp script, how to disable it with touch files (disable_auto_hostname_certificate, disable_service_certificate_management), and troubleshooting CAA record and non-FQDN hostname issues.
- [Automatically-Issued Hostnames](https://docs.cpanel.net/knowledge-base/dns/automatically-issued-hostnames/): Explains WebPros International's automatically-issued cprapid.com hostnames assigned to newly-installed servers that lack a resolvable FQDN, which enable a free Let's Encrypt SSL certificate; covers limitations (the subdomain cannot be managed or delegated, and is unsuitable as a nameserver domain) and how to replace the auto-issued hostname with your own domain via WHM's Change Hostname interface.
- [DNSSEC](https://docs.cpanel.net/knowledge-base/dns/dnssec/): Explains cPanel & WHM's DNSSEC support for PowerDNS nameservers: enabling it via WHM's Feature Manager (Manage DNSSEC feature) and managing keys in cPanel's Zone Editor, plus DNSSEC key rotation, disabling DNSSEC by removing the DS record, DNSSEC in DNS clusters, key backup/restoration/transfer during account transfers, and the related UAPI and WHM API 1 functions (activate/add/deactivate/enable/disable/export/import/remove zone key, fetch DS records, set/unset NSEC3).
- [How to Clear Your DNS Cache](https://docs.cpanel.net/knowledge-base/dns/how-to-clear-your-dns-cache/): Provides DNS cache flush commands for Windows (ipconfig /flushdns), macOS (sudo killall -HUP mDNSResponder), ChromeOS (chrome://net-internals DNS clear host cache), Ubuntu (sudo resolvectl flush-caches), and other Linux distributions (systemctl restart nscd), plus instructions for manually editing the /etc/hosts file to remove conflicting entries.
- [How to Configure Reverse DNS in WHM](https://docs.cpanel.net/knowledge-base/dns/how-to-configure-reverse-dns-in-whm/): Describes configuring reverse DNS (PTR records) in WHM version 86 to map IP addresses to domain names for mail server validation and security purposes: finding authoritative nameservers via `dig +nssearch`, creating the reverse DNS zone in WHM's Add a DNS Zone interface, adding the PTR record in DNS Zone Manager, and testing with the `host` command.
- [How to Identify Your Registrar](https://docs.cpanel.net/knowledge-base/dns/how-to-identify-your-registrar/): Explains what a domain registrar manages (contact information, nameservers, DNSSEC) and how to identify your domain's registrar using InterNIC's WHOIS lookup (internic.net/whois.html) to find the Registrar URL.
- [How to List Domains with DNSSEC](https://docs.cpanel.net/knowledge-base/dns/how-to-list-domains-with-dnssec/): Describes how to list all domains with DNSSEC enabled on a server by running `pdnsutil list-secure-zones` as the root user via SSH, showing example output of secured zone names and a count.
- [How to Modify Your Hosts File](https://docs.cpanel.net/knowledge-base/dns/how-to-modify-your-hosts-file/): Explains how to edit a workstation's /etc/hosts file to map a domain name to a server's IP address for testing sites before DNS points to them, with separate steps for macOS/Linux (edit /etc/hosts directly) and Windows (edit C:\Windows\System32\Drivers\etc\hosts as Administrator).
- [How to Rotate a DNSSEC Key](https://docs.cpanel.net/knowledge-base/dns/how-to-rotate-a-dnssec-key/): Describes rotating a domain's DNSSEC keys (recommended yearly) in WHM version 86 using cPanel's Zone Editor DNSSEC interface: generating a new key, adding the new DS record at the domain registrar, waiting 24-48 hours for propagation, then removing the old DS record at the registrar and deleting the old key in Zone Editor.
- [How to Set Up Nameservers in a cPanel & WHM Environment](https://docs.cpanel.net/knowledge-base/dns/how-to-set-up-nameservers-in-a-cpanel-environment/): Walks through configuring nameservers in WHM: selecting nameserver software (PowerDNS default, BIND, or Disabled) in Nameserver Selection, setting default nameserver names in Basic WebHost Manager Setup, adding IP addresses, creating A/AAAA records for nameservers and the hostname, configuring reseller nameservers, and registering nameservers with the domain registrar, including step-by-step instructions for specific registrars (123-reg.co.uk, DirectNIC, Dotster, DynaDot, Enom, GoDaddy, NameCheap, Network Solutions, OpenSRS, Register.com).
- [How to Use cPanel's PowerDNS](https://docs.cpanel.net/knowledge-base/dns/how-to-use-cpanels-powerdns/): Explains cPanel's PowerDNS nameserver implementation, which reads DNS data from BIND files and stores DNSSEC data in a SQLite database; covers installing PowerDNS via WHM's Nameserver Selection interface, checking the installed PowerDNS version via WHM API 1's installed_versions function, enabling DNSSEC through cPanel's Zone Editor, and troubleshooting via /var/log/messages.
- [The ALIAS DNS Record](https://docs.cpanel.net/knowledge-base/dns/the-alias-dns-record/): Documents the experimental, non-RFC-compliant ALIAS DNS record used to resolve a domain to another FQDN's IP addresses via PowerDNS, including the risks, how to enable it (a touch file under /etc/pdns/, expand-alias and resolver settings in pdns.conf, restarting PowerDNS with /scripts/restartsrv_pdns), enabling the Zone Editor feature for cPanel users, and checking availability with WHM API 1's is_alias_available function.
- [cPanel DNSOnly®](https://docs.cpanel.net/knowledge-base/dnsonly/cpanel-dnsonly/): Overview of cPanel DNSOnly® version 126, the lightweight cPanel & WHM edition for running a dedicated physical nameserver that only replicates DNS zones to other servers for use in a DNS cluster; lists the WHM DNSOnly sidebar interfaces (Server Configuration, Networking Setup, Security Center, Service Configuration, Clusters/DNS Cluster, DNS Functions, IP Functions, Development/API Tokens, etc.) and the ACL privileges available to DNSOnly API token users.
- [Guide to DNS Cluster Configurations](https://docs.cpanel.net/knowledge-base/dnsonly/guide-to-dns-cluster-configurations/): Guides setup of a DNS cluster (a group of authoritative nameservers sharing records) via WHM's DNS Cluster interface, covering minimum requirements, trusted IP configuration (/etc/ips.dnsmaster and /etc/ips.remotedns), recommended cluster topologies (direct links, primary nameserver as intermediary, multiple intermediaries and their performance tradeoffs), and setting up the required Reverse Trust relationship and API tokens between cluster servers.
- [AutoConfig and Autodiscover](https://docs.cpanel.net/knowledge-base/email/autoconfig-and-autodiscover/): Explains WHM's AutoConfig and Autodiscover services (Tweak Settings > Domains): enabling Service subdomains and Thunderbird/Outlook autodiscover-autoconfig support, choosing the preferred mail protocol (IMAP by default), setting the SRV record host (default cpanelemaildiscovery.cpanel.net), and Apple mail client limitations requiring Exchange instead of IMAP.
- [Blacklisting & IP Address Reputation](https://docs.cpanel.net/knowledge-base/email/blacklisting-ip-address-reputation/): Explains IP address reputation and email blacklisting: why large providers (Gmail, Microsoft, Office 365) route mail to spam/junk based on reputation, blacklists, content, links, source, headers, and engagement metrics; lists tools to check blacklist status (MultiRBL, MxToolbox, Abuseat CBL) and reputation (Sender Score, Cisco Talos, Barracuda Central); and gives steps to resolve blocks with Gmail, Microsoft, and Office 365.
- [Common Mail Service IP Addresses](https://docs.cpanel.net/knowledge-base/email/common-mail-service-ip-addresses/): Lists current IP addresses and CIDR ranges for major mail services (Google, Microsoft/Outlook/Office 365, Yahoo, AOL, Apple, MailChannels, Mimecast, and several financial institutions) to add to the Trusted Hosts list in WHM's Greylisting interface (WHM >> Home >> Email >> Greylisting) so their relayed mail isn't misidentified as spam.
- [How to Configure Email Filters](https://docs.cpanel.net/knowledge-base/email/how-to-configure-email-filters/): Details cPanel's Global Email Filters and Email Filters interfaces: selectable message parts to match (From, Subject, To, Body, Any Header, Spam Status, Spam Bar, Spam Score, etc.), comparison operators (equals, matches regex, contains, begins/ends with, and their negations), how AND/OR rule combinations are evaluated, and available actions (Discard Message, Redirect to Email, Fail With Message, Stop Processing Rules, Deliver to Folder, Pipe to a Program).
- [How to Configure the Exim Outgoing IP Address](https://docs.cpanel.net/knowledge-base/email/how-to-configure-the-exim-outgoing-ip-address/): Covers configuring Exim's outgoing mail IP address in WHM: enabling automatic per-domain IP selection via the 'Send mail from account's dedicated IP address' setting in Exim Configuration Manager, or manually editing the /etc/mailhelo (HELO domain mapping) and /etc/mailips (per-domain outgoing IP mapping) files, with example syntax for IPv4, IPv4-with-NAT, and IPv6 configurations.
- [How to Create a Spam Email Filter](https://docs.cpanel.net/knowledge-base/email/how-to-create-a-spam-email-filter/): Step-by-step procedure to create a spam-sorting filter in cPanel's Spam Filters and Global Email Filters interfaces: enable Apache SpamAssassin, create a new filter using a Spam Bar 'contains' rule with a plus-sign score (e.g. +++++ for score 5), and set a Deliver to Folder action to route flagged mail to a chosen folder.
- [How to Create and Connect to an Email Account](https://docs.cpanel.net/knowledge-base/email/how-to-create-and-connect-to-an-email-account/): Walks through creating a cPanel email account via the Email Accounts interface, checking it through Webmail (port 2096), configuring iOS/Android devices, using the Connect Devices auto-configuration scripts for desktop mail clients, setting up calendars and contacts, and revoking device access by changing the account password.
- [How to Create Mail Filter Rules For Mailing Lists](https://docs.cpanel.net/knowledge-base/email/how-to-create-mail-filter-rules-for-mailing-lists/): Explains creating Mailman mail filter rules via cPanel's Mailing Lists > Manage > Privacy options > Spam filters interface: entering a regex in Spam Filter Rule fields (e.g. matching X-Spam-Status or X-Spam-Level headers) and choosing an action (Defer, Hold, Reject, Discard, Accept), plus using the Legacy anti-spam filters section for moderator-approved header filtering.
- [How to Customize the Exim System Filter File](https://docs.cpanel.net/knowledge-base/email/how-to-customize-the-exim-system-filter-file/): Advanced-user guide to customizing Exim's system filter: creating custom filter rule files in /usr/local/cpanel/etc/exim/sysfilter/options/ and enabling them in WHM's Exim Configuration Manager Filters tab, creating a replacement for /etc/cpanel_exim_system_filter (never edit it directly) and pointing the System Filter File setting to it, and editing the file's regex patterns to block additional file extensions in MIME attachments.
- [How to Edit the exim.conf File](https://docs.cpanel.net/knowledge-base/email/how-to-edit-the-exim-conf-file/): Unsupported workaround for adding connection_max_messages = 1 under the remote_smtp and dkim_remote_smtp driver blocks in /etc/exim.conf (and permanently via /etc/exim.conf.local using the Exim Configuration Manager Advanced Editor), as a follow-up step after configuring the Exim outgoing IP address.
- [How to Enable and Disable the Dovecot Mail Log Plugin](https://docs.cpanel.net/knowledge-base/email/how-to-enable-and-disable-the-dovecot-mail-log-plugin/): Explains how to enable and disable the Dovecot mail_log plugin on cPanel & WHM, which is not configurable through the WHM interface. Enabling requires editing the /var/cpanel/templates/dovecot/main.local template's mail_plugins {} block (setting mail_log = yes and notify = yes) and plugin {} block (mail_log_events, mail_log_fields), then rebuilding with /scripts/builddovecotconf. The plugin logs flag changes, expunges, copies, and mailbox create/delete/rename events to /var/log/maillog. This version (132, latest) uses direct block editing rather than a patch file.
- [How to Keep Your Email Out of the Spam Folder](https://docs.cpanel.net/knowledge-base/email/how-to-keep-your-email-out-of-the-spam-folder/): Best practices to avoid spam classification: configuring DKIM and SPF authentication, applying a DMARC policy (including WHM's Email DNS Record Manager default DMARC policy in cPanel & WHM 124+), setting the server's PTR record to match its hostname, handling spam flags from Gmail/Yahoo/Outlook, enabling ARC headers for forwarded/mailing-list mail to Gmail, and bulk email sending best practices (consistent sending IP/From address, RFC 5322 and HTML compliance).
- [How to Log in to the Sent and Spam Mail Folders Directly](https://docs.cpanel.net/knowledge-base/email/how-to-log-in-to-the-sent-and-spam-mail-folders-directly/): Shows how to log a mail client directly into the sent or spam folder by appending /sent or /spam to the login username (e.g. joe/sent) for the main cPanel account owner, or to the full email address (e.g. joe@example.com/spam) for other users; notes this works with standalone mail clients but not cPanel-provided webmail.
- [How to Manage Mailman Mailing Lists](https://docs.cpanel.net/knowledge-base/email/how-to-manage-mailman-mailing-lists/): Covers managing Mailman mailing lists from cPanel's Mailing Lists interface: accessing the Mailman administration interface via the Manage link, mass-subscribing and mass-removing addresses (with options for welcome/notification messages), and enabling Mailman's Spam filters after enabling Apache SpamAssassin.
- [How to Manage Your Exim Queue](https://docs.cpanel.net/knowledge-base/email/how-to-manage-your-exim-queue/): Lists root-level Exim command-line operations for managing the mail queue: exim -bpc to count queued messages, exim -Mrm <MessageID> to remove a single message, exiqgrep -f user@domain -i | xargs exim -Mrm to remove messages from a specific account, and exiqgrep -i | xargs exim -Mrm to purge the entire queue (irreversible).
- [How to Migrate the Contents of Email Accounts in Addon Domains](https://docs.cpanel.net/knowledge-base/email/how-to-migrate-the-contents-of-email-accounts-in-addon-domains/): Describes deleting an addon domain's leftover mail (rm -R /home/old_account/mail/domain_name) after domain removal, and migrating addon domain email accounts when moving the domain to a different cPanel account: recreating the accounts, running mv to relocate /home/old_account/mail/domain_name to /home/new_account/mail, then chown -R to fix ownership and verifying with ls -alR.
- [How to Prevent Email Abuse](https://docs.cpanel.net/knowledge-base/email/how-to-prevent-email-abuse/): Best practices to prevent email abuse on a cPanel & WHM server: raising minimum password strength (Password Strength Configuration), enabling cPHulk brute-force protection, enabling Greylisting, enabling SMTP Restrictions, using Exim Configuration Manager's anti-abuse options, Tweak Settings mail limits (Max hourly emails per domain, MAX_EMAIL_PER_HOUR in the cpuser file, percentage of messages to queue on overage, max failed/deferred message percentage, catch-all/default address handling), running PHP under suEXEC/ModRuid2/suPHP to attribute mail to the actual user instead of 'nobody', and the experimental Rewrite From header setting to expose the true sender in /var/log/exim_mainlog.
- [How to Prevent Spam with Mail Limiting Features](https://docs.cpanel.net/knowledge-base/email/how-to-prevent-spam-with-mail-limiting-features/): Explains the five outgoing-mail limiting options in the Mail section of WHM's Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings), which require the Eximstats driver enabled in Service Manager: Max hourly emails per domain (cpanel.config maxemailsperhour), whether to count Mailman deliveries toward that limit (email_send_limits_count_mailman), the percentage of over-limit messages to queue and retry versus discard (email_send_limits_defer_cutoff), a per-account unique-recipient threshold that triggers a potential-spammer alert via Contact Manager, and the failed/deferred message count and percentage thresholds (email_send_limits_min_defer_fail_to_trigger_protection, email_send_limits_max_defer_fail_percentage) that jointly trigger a temporary domain-wide outgoing mail block.
- [How to Rebuild the Roundcube Database](https://docs.cpanel.net/knowledge-base/email/how-to-rebuild-the-roundcube-database/): Covers how to repair a corrupt or non-restarting Roundcube webmail database by running /usr/local/cpanel/bin/update-roundcube-db (auto-detects and delegates to /usr/local/cpanel/bin/update-roundcube-sqlite-db for SQLite) or the SQLite-specific script directly, and documents the SQLite database file path (/home/username/etc/domain/username.rcube.db) plus its timestamped backup, .latest symlink, and .sqlite2 backup naming conventions.
- [How to Set Email Send Limits](https://docs.cpanel.net/knowledge-base/email/how-to-set-email-send-limits/): Explains how to configure hourly outgoing email limits and failed/deferred message percentage limits to curb spam and bandwidth use: server-wide defaults via the Max hourly emails per domain and Maximum percentage of failed or deferred messages settings in WHM's Tweak Settings (Mail section); per-account limits via WHM's Modify an Account interface (Hourly Email by Domain Relayed configuration and its percentage counterpart); and per-domain overrides by editing /var/cpanel/users/username to add MAX_EMAIL_PER_HOUR-domain=value or MAX_DEFER_FAIL_PERCENTAGE-domain=value lines and running /usr/local/cpanel/scripts/updateuserdomains to apply them. Notes that limits only apply to remote deliveries and cannot disable email entirely.
- [How to Set Up a cPanel Email Account on iOS® and Android™](https://docs.cpanel.net/knowledge-base/email/how-to-set-up-a-cpanel-email-account-on-ios-and-android/): Step-by-step instructions for manually adding a cPanel-hosted email account as an IMAP (recommended) or POP account in the iOS Mail app and as a Personal (IMAP) account in Android's Settings, covering incoming/outgoing mail server hostname, username, and password fields. This version documents the iOS 18.1 Settings > Apps > Mail > Mail Accounts flow and Android 10 setup, and references the third-party DAVx5 app for calendar/contact sync instead of Exchange ActiveSync; WebPros/cPanel Technical Support does not support these OS-specific mail apps.
- [IMAP Versus POP3](https://docs.cpanel.net/knowledge-base/email/imap-versus-pop3/): Compares the IMAP and POP3 mail protocols: POP3 deletes messages from the server after download (single-device access, no constant connection needed, lower server disk usage) while IMAP permanently stores messages on the server (multi-device access, generally requires a constant connection unless the client caches/synchronizes, and consumes more server disk space). Notes that administrators enable or disable each protocol in WHM's Mailserver Configuration interface.
- [Scan Outgoing Mail](https://docs.cpanel.net/knowledge-base/email/scan-outgoing-mail/): Describes enabling the outgoing_spam_scan (Scan outgoing messages for spam) option in the Advanced Editor of WHM's Exim Configuration Manager interface to have Apache SpamAssassin scan and block spam sent by local users, and notes it works alongside the Basic Editor's Apache SpamAssassin score-based forwarding-rejection settings. Flagged as an unsupported feature not guaranteed to work in future versions.
- [ModSecurity® 3](https://docs.cpanel.net/knowledge-base/experimental-software/modsecurity-3/): Describes ModSecurity 3, an experimental web application firewall usable with Apache or NGINX on cPanel & WHM, including installing the ea-modsec30-connector-nginx or ea-modsec30-connector-apache24 connector and the ea-modsec30-rules-owasp-crs OWASP rule set via EasyApache 4 or yum, per-web-server configuration file locations, and behavioral differences from ModSecurity 2 (unsupported directives like SecDataDir, and 406 vs. 403 response codes). This version (112, latest) removes the earlier CentOS 7-only NGINX compatibility restriction.
- [NGINX® Standalone](https://docs.cpanel.net/knowledge-base/experimental-software/nginx-standalone/): Covers installing, uninstalling, and configuring the experimental ea-nginx-standalone EasyApache 4 package (the predecessor to the newer ea-nginx reverse-proxy package) on cPanel & WHM. Details the Experimental Repository and PHP-FPM requirements, Apache port changes NGINX makes, config file locations under /etc/nginx/conf.d/ (global, per-user, per-domain), log file paths, redirect behavior differences from Apache, ModSecurity 2 and .htaccess limitations under NGINX, and troubleshooting for server_names_hash errors and WordPress Pretty Permalinks.
- [How to Configure Your SFTP Client](https://docs.cpanel.net/knowledge-base/ftp/how-to-configure-your-sftp-client/): Lists the connection details an SFTP client needs to reach a cPanel account: hostname, SSH port (usually 22), username (a cPanel account or the root user, not an FTP account), password, and an optional private key path. Recommends Cyberduck, CoreFTP, or WinSCP as SFTP clients.
- [How to Deny FTP Access](https://docs.cpanel.net/knowledge-base/ftp/how-to-deny-ftp-access/): Explains how to block FTP access for cPanel users by listing their usernames (one per line, no domain) in the /etc/ftpusers file, which you must create manually if it does not already exist. To deny FTP access to a specific FTP user, block the cPanel account that owns it.
- [How to Edit FTP Server Configuration from the Command Line](https://docs.cpanel.net/knowledge-base/ftp/how-to-edit-ftp-server-configuration-from-the-command-line/): Explains how to identify your FTP server (grep ftpserver /var/cpanel/cpanel.config) and edit its configuration from the CLI: for ProFTPD, edit /var/cpanel/conf/proftpd/local (including managed_settings in Cpanel/FtpUtils/Config/Proftpd.pm); for Pure-FTPd, edit /var/cpanel/conf/pureftpd/local. Apply changes with /scripts/setupftpserver <type> --force.
- [How to Enable FTP Passive Mode](https://docs.cpanel.net/knowledge-base/ftp/how-to-enable-ftp-passive-mode/): Explains active vs. passive FTP modes and the default passive port range (49152-65534) for Pure-FTPd and ProFTPD. Covers setting ForcePassiveIP in /var/cpanel/conf/pureftpd/local and MasqueradeAddress in /var/cpanel/conf/proftpd/local for NAT setups, plus opening the passive port range in CSF, nftables, firewalld, or iptables firewalls.
- [How to Restore Missing FTP Interfaces in cPanel](https://docs.cpanel.net/knowledge-base/ftp/how-to-restore-missing-ftp-interfaces-in-cpanel/): Unsupported workaround for FTP interfaces disappearing from cPanel when the FTP service is set to unmanaged: run mkdir -p /var/cpanel/dynamicui/ and touch /var/cpanel/dynamicui/ftp to restore the touch file cPanel checks to decide whether to display FTP interfaces. Note the touch file may be deleted again on package upgrades.
- [How to Upload Files with FTP](https://docs.cpanel.net/knowledge-base/ftp/how-to-upload-files-with-ftp/): Covers connecting to an FTP server via a third-party client (configured through cPanel's FTP Accounts interface) or via the command-line ftp utility (open, Name, Password prompts), then using put and get commands to upload and download files, noting that files must go in public_html to be visible to site users.
- [ProFTPD Configuration for Host Access Control](https://docs.cpanel.net/knowledge-base/ftp/proftpd-configuration-for-host-access-control/): Shows how to configure ProFTPD's mod_wrap module to enforce Host Access Control (/etc/hosts.allow and /etc/hosts.deny) via TCPAccessFiles and TCPServiceName directives in a VirtualHost block in /etc/proftpd.conf, requiring ProFTPD 1.3.3+ with mod_wrap. Applies only to CentOS 7, CloudLinux 7, and RHEL 7 or earlier; newer OSes should use WHM's Host Access Control interface instead.
- [Getting Started with Linux Commands](https://docs.cpanel.net/knowledge-base/general-server-administration/getting-started-with-linux-commands/): Reference table of basic Linux CLI commands (cat, cd, chmod, chown, cp, du, grep, ls, ps, rm, tail, touch, vi, whereis, etc.) with examples, plus command-chaining operators (pipes, >, >>, <) and a table of common configuration file/log locations for Exim, MySQL, ProFTPD, and SSH.
- [Guide to Node.js™ Installations](https://docs.cpanel.net/knowledge-base/general-server-administration/guide-to-node-js-installations/): Explains installing Node.js on RHEL-derived OSes via WHM's EasyApache 4 interface or ea-nodejs16/18/20/22 packages, or on Ubuntu via the NodeSource setup script plus ea-apache24-mod-passenger, and how to deploy or uninstall Node.js applications. Installed binaries live in /opt/cpanel/ea-nodejsNN/bin/.
- [How to Access the Command Line](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-access-the-command-line/): Describes launching a local CLI (Command Prompt on Windows, Terminal on macOS/Ubuntu) and then using ssh username@hostname to connect to a cPanel & WHM server, including cPanel's and WHM's browser-based Terminal interfaces and troubleshooting the 'Shell access is not enabled' error.
- [How to Clear a Full Partition](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-clear-a-full-partition/): Steps to free disk space on a full partition (commonly /var or /usr): use du -sh to locate the largest directories/files, then either delete files (cat /dev/null > filename) or truncate them while keeping recent entries (tail -5000 filename > filename.new; mv; sync), and restart the service that generated the file afterward.
- [How to Convert from CentOS 8 to AlmaLinux OS](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-convert-from-centos-8-to-almalinux-os/): Step-by-step migration of a CentOS 8 (EOL) server to AlmaLinux OS: update packages with dnf, reboot, download and run the almalinux-deploy.sh script from AlmaLinux's GitHub, then verify the conversion via /etc/redhat-release and grubby --info DEFAULT.
- [The Network Manager Service](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-disable-network-manager/): Explains how to disable the unsupported NetworkManager service using systemctl stop/disable NetworkManager, setting NM_CONTROLLED=no and ONBOOT=yes in ifcfg-eth0/ifcfg-lo under /etc/sysconfig/network-scripts, then enabling and starting network.service. Notes the cPanel & WHM installer auto-disables NetworkManager on AlmaLinux OS 8 and Rocky Linux 8.
- [How to Enable Stub Resolvers](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-enable-stub-resolvers/): Unsupported method to enable stub resolvers (using the system's local resolvers instead of external DNS) by symlinking /var/cpanel/dns_unbound_resolve_mode to 'stub', intended only as a workaround when port 53 is intentionally blocked outbound; verified with /scripts/cpdig and strace. Warns this degrades AutoSSL error message usefulness and should not be used to work around NAT misconfiguration.
- [How to Manage Your Hard Drive Space](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-manage-your-hard-drive-space/): Explains checking disk usage with df -h and du/du -sh (commonly finding /home and /var/log as largest consumers), deleting or truncating (tail -5000) large files and restarting the owning service, disabling SMART error checks via /var/cpanel/disablesmartcheck plus /scripts/upcp, and enabling WHM Tweak Settings' System disk space usage warnings (with per-mount-point exclusions via /var/cpanel/chkservd_ignored_mounts).
- [How to Run the traceroute and ping Commands](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-run-the-traceroute-and-ping-commands/): Shows how to run traceroute/tracert and ping commands to test network routing and latency to a target host on macOS/Linux (traceroute, ping) and Microsoft Windows (tracert, ping) from a terminal or Command Prompt.
- [How to Troubleshoot High Disk I/O Problems](https://docs.cpanel.net/knowledge-base/general-server-administration/how-to-troubleshoot-high-disk-io-problems/): Covers symptoms of high disk I/O (high load, chkservd alerts, slow sites/Exim/POP-IMAP/Webmail/WHM), diagnosing wait time with top's %wa statistic and sar history, and remediation options: upgrading/splitting disks, enabling write caching, checking RAID health, and managing DMA with hdparm (-d1/-d0/-Tt/-i).
- [Linux Containers](https://docs.cpanel.net/knowledge-base/general-server-administration/linux-containers/): Details running cPanel & WHM inside an LXC container: use RHEL/CentOS 7 as host and guest, run privileged containers (unprivileged containers have root and hard-limit restrictions), edit lxc.conf's lxc.include and cap.drop settings, fix cron failures caused by pam_loginuid inside containers, and configure AppArmor's aa_profile/apparmor.profile setting to unconfined.
- [Man-in-the-Middle Attacks](https://docs.cpanel.net/knowledge-base/general-server-administration/man-in-the-middle-attacks/): Defines man-in-the-middle (MITM) attacks with an example scenario, and lists prevention steps for website owners (enforce TLS/HTTPS site-wide, secure session cookies) and individual users (updated anti-malware/OS, avoid untrusted Wi-Fi, verify HTTPS/certificates). Also notes MITM warnings cPanel's Git Version Control interface can display for unverified remote clone fingerprints.
- [1:1 NAT](https://docs.cpanel.net/knowledge-base/general-systems-administration/1-1-nat/): Explains cPanel & WHM's 1:1 NAT mode: how the installer auto-detects a NAT-configured network, requires loopback/hairpin NAT, uses the `/usr/local/cpanel/scripts/build_cpnat` script and `/var/cpanel/cpnat` flag file to map local IPs to public IPs via the myip.cpanel.net lookup service (configurable in `/etc/cpsources.conf`), and how to manage IP maps in WHM's Add a New IP Address, Show or Delete Current IP Addresses, and IP Migration Wizard interfaces.
- [Best Practices for Script and Code Permissions](https://docs.cpanel.net/knowledge-base/general-systems-administration/best-practices-for-code-and-script-permissions/): Explains why running CGI/PHP scripts as the `nobody` user (instead of the file owner) is a security risk, covers the cPanel & WHM 132 change that locked down `/etc/trueuserowners` permissions (and resulting 'is not readable as nobody' errors), recommends chmod 640/750 permissions and running code as its owner, and lists which EasyApache 4 handlers (suexec, ruid2, ITK, suphp, PHP-FPM) run CGI/PHP as the correct user versus falling back to `nobody`.
- [Best Practices for cPanel Virtualization Templates](https://docs.cpanel.net/knowledge-base/general-systems-administration/best-practices-for-cpanel-virtualization-templates/): Explains how to build a templated cPanel & WHM installation for VPS/VM hosting, covering pre-installation configuration of /etc/cpupdate.conf, /etc/cpsources.conf, /etc/wwwacct.conf, and /var/cpanel/cpanel.config, running the snapshot_prep script to prevent duplicate credentials and license locking, and resolving common OpenVZ/Virtuozzo hostname, quota, and jailshell issues.
- [cPanel Linked Nodes Guide](https://docs.cpanel.net/knowledge-base/general-systems-administration/cpanel-linked-nodes-guide/): Describes cPanel & WHM's Linked Nodes feature (WHM >> Server Configuration >> Link Server Nodes) for offloading functionality such as mail to child nodes from a parent node, including server profiles, child node restrictions, creating and dedistributing distributed cPanel accounts, transferring distributed accounts between nodes, and password/security considerations.
- [cPanel PHP](https://docs.cpanel.net/knowledge-base/general-systems-administration/cpanel-php/): Lists the PHP 8.4 modules, PEAR/PECL packages, and PHP loaders (ioncube, sourceguardian) that ship with cPanel & WHM's internal PHP; unlike earlier versions this release adds the random PHP module and PEAR packages such as Archive_Tar, Console_Getopt, Net_URL2, and XML_Util while dropping the imap module, and explains that the php.ini file must be edited via WHM's Tweak Settings PHP section rather than directly.
- [Full Disaster Recovery](https://docs.cpanel.net/knowledge-base/general-systems-administration/full-disaster-recovery/): Step-by-step procedure for system administrators to fully rebuild a cPanel & WHM server after a crashed or failed hard drive: back up via pkgacct or WHM's Backup Configuration interface, provision a new drive and reinstall cPanel & WHM, mount the old drive in a chroot environment to recover accounts and service configs with pkgacct and cpconftool (using a simplified, non-CentOS-specific MySQL startup command), transfer backups off-server, and restore accounts with restorepkg and cpconftool.
- [How to Activate a Site Quality Monitoring Subscription](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-activate-a-site-quality-monitoring-subscription/): Walks through activating a Site Quality Monitoring subscription in the cPanel Site Quality Monitoring interface (cPanel >> Home >> Metrics >> Site Quality Monitoring): completing the Ready to start sign-up form (domain, email, consent), verifying via the emailed Security Code, and choosing a plan in Compare plans (free vs. paid, if the hosting provider enables paid subscriptions).
- [How to Allow Users to Manage Interface Analytics](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-allow-users-to-manage-interface-analytics/): Explains how to edit the `/var/cpanel/panel.ini` file (adding a `[global]` section and setting `analytics_consent.enable` to `true` or `false`) to let cPanel users manage Interface Analytics consent themselves, valid for cPanel & WHM 110 and 126+, and lists which interfaces (WHM Configure cPanel Analytics, cPanel Account Preferences, Webmail Consent and Privacy) are affected at server and account level.
- [How to Clean Unmanaged Log Files](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-clean-unmanaged-log-files/): Unsupported workaround for reducing disk usage from unmanaged log files: use `du -h /var/log/` to find large logs, `cat /dev/null > logfile` to truncate them without deleting the filename, and configure WHM's cPanel Log Rotation Configuration interface (and manual `rm` of archived logs in `/usr/local/cpanel/logs/archive/`) for ongoing log rotation.
- [How to Configure Redirects Manually](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-configure-redirects-manually/): Shows how to manually add 301 (permanent) and 302 (temporary) Redirect directives to a site's `.htaccess` file (edited via cPanel's File Manager with hidden files shown) when the cPanel Redirects interface's bottom-of-file placement conflicts with third-party apps or CMSs like WordPress or Drupal, including a Drupal-specific mod_rewrite example.
- [How to Configure Your Firewall for cPanel & WHM Services](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-configure-your-firewall-for-cpanel-services/): Lists the TCP/UDP ports cPanel & WHM uses (including FTP, SSH, SMTP, DNS, HTTP/HTTPS, POP3, IMAP, cPanel/WHM/webmail ports, MySQL, and license callback ports 2082/2083/2086/2087/2096) with inbound/outbound/localhost requirements and per-service notes, and recommends port 2080 over the insecure port 2079 for CalDAV/CardDAV. Lists IP addresses and commands for the Site Quality Monitoring, Search Engine Optimization, and Social Media Management (SocialBee/AWS) features to scan websites, and provides example firewall configuration commands for nftables (AlmaLinux, Rocky Linux, CloudLinux) and iptables (Ubuntu), plus CSF/APF rule syntax.
- [How to Create Custom Jailed Shell Mounts](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-create-custom-jailed-shell-mounts/): Describes creating read-only custom jailed shell mounts by listing absolute directory paths (one per line, no trailing slashes) in `/var/cpanel/jailshell-additional-mounts` and file paths in `/var/cpanel/jailshell-additional-files`, and how to unmount one manually with `umount /home/virtfs/username/...` since removing the file entry alone does not unmount it.
- [How to Disable Disk Space Warnings with Files](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-disable-disk-space-warnings-with-files/): Covers two files for suppressing disk space warnings: `/var/cpanel/chkservd_ignored_mounts`, which lists mount points (one per line, alphanumeric paths only) to exclude from disk monitoring alerts (e.g. for always-full mounts like snapd), and the empty `/var/cpanel/disablediskfreecheck` file, which bypasses disk-space checks entirely so WHM functions aren't blocked by low disk space.
- [How to Disable Services](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-disable-services/): Explains how to disable cPanel & WHM services by creating touch files in the `/var/cpanel/disabled` directory, listing the specific files and their effects: `secureit` (disables the secureit script), `securetmp` (disables /tmp partition hardening), `terminal-colors` (disables WHM Terminal color output), `cloudlinux` (blocks CloudLinux installation), and `auto-restart-services` (disables automatic service restarts during nightly updates).
- [How to Downgrade Local License for Testing](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-downgrade-local-license-files-for-testing/): Explains how to downgrade (never upgrade) a cPanel & WHM license for testing by editing the `producttype` (e.g. databasenode, dnsnode, dnsonly, mailnode, cloudlinux) and `maxusers` values in `/var/cpanel/license.cfg` and then refreshing the license with the `/usr/local/cpanel/cpkeyclt` script.
- [How to Fix Quotas](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-fix-quotas/): Explains how to verify and enable Linux disk quotas on a cPanel & WHM server: checking for the `usrquota` option via the `mount` command and `/etc/fstab`, confirming with `repquota -a`, running `/usr/local/cpanel/scripts/initquotas` or `/usr/local/cpanel/scripts/fixquotas` to enable/repair quotas (required after CloudLinux 7 updates or on XFS filesystems), and fixing missing `quota_v2` kernel modules on Ubuntu via `apt install`.
- [How to Manage a Site Quality Monitoring Subscription](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-manage-a-site-quality-monitoring-subscription/): Explains managing Site Quality Monitoring subscriptions (cPanel >> Home >> Metrics >> Site Quality Monitoring): each user gets one Free subscription (one domain/URL) and can monitor up to ten sites; covers upgrading via Upgrade subscription or the Integrations tab, downgrading by removing and re-adding a website, reassigning an unassigned subscription via User settings > Manage subscriptions, and resetting a password directly on the Site Quality Monitoring website.
- [How to Manage WHM Plugin Search Keywords](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-manage-whm-plugin-search-keywords/): Explains how to add or remove custom WHM search keywords for non-cPanel plugins listed in `/var/cpanel/apps` by editing the plugin's `.conf` file's `searchtext` option, then clearing the plugin cache with `rm -f /var/cpanel/pluginscache.yaml` followed by the `Whostmgr::Plugins->plugins_data` Perl call, so the keyword becomes searchable (or stops being searchable) in WHM's top navigation search.
- [How to Remove a Site Publisher Website](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-remove-a-site-publisher-website/): Lists the specific Site Publisher-generated files and directories to manually delete via cPanel's File Manager when replacing a temporary Site Publisher site (feature removed in cPanel & WHM 134) with a permanent website, e.g. `~/site_publisher/`, `~/public_html/assets/`, `css/`, `font-awesome/`, `img/`, `js/`, `COPYRIGHT`, `LICENSE.txt`, `sitemap.xml`, and `index.html`.
- [How to Restart Services](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-restart-services/): Covers restarting cPanel & WHM services via WHM's Restart Services interface, the `/usr/local/cpanel/scripts/restartsrv_*` scripts, or direct `systemctl restart service-name.service` commands, plus common error log locations for Apache, BIND, ProFTP, Pure-FTP, Exim, Dovecot, MySQL, and OpenSSH, and notes on required hostname-change procedures (WHM Change Hostname, WHM API sethostname, or `set_hostname` script).
- [How to Share Multiple IP Addresses](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-share-multiple-ip-addresses/): Walks through sharing IP addresses across cPanel & WHM reseller accounts: adding and reserving IPs via WHM's Add a New IP Address and Show/Edit Reserved IPs interfaces, rebuilding the IP address pool, creating reseller accounts and packages, setting reseller privileges (including the 'Everything - All Features' option and its root-level access risk), and assigning shared IPs via WHM's Manage Reseller's Shared IP interface.
- [How to Update Your System](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-update-your-system/): Describes how to update cPanel & WHM components: the cPanel & WHM product itself via WHM's Upgrade to Latest Version interface or the /usr/local/cpanel/scripts/upcp script; Apache via EasyApache 4; MySQL/MariaDB via WHM's Upgrade Database Version interface; the OS kernel via WHM's System Update interface or yum update; and Perl, PHP (Apache and system), manually-installed packages, and Ruby Gems via upcp or EasyApache 4.
- [How to Use Server Profiles](https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-use-server-profiles/): Explains WHM's Server Profile interface (WHM >> Home >> Server Configuration >> Server Profile), which lets administrators choose a server profile (Standard, DNS, Mail, or Database) that enables or disables functional roles (Local Mail, Web Server, DNS, FTP, MySQL/MariaDB, PostgreSQL, Send/Receive/Relay Mail, Webmail, Web Disk, File Storage, Calendars and Contacts, Spam Filter) and their associated services. Details, per profile, which roles are enabled, disabled, or optional, which cPanel & WHM services are disabled, and which WHM and cPanel interfaces are hidden; unlike earlier versions, the DNS and Database profiles no longer disable cPAddons Site Software interfaces, and the Database profile now also disables the DNS Cluster interface. Also covers the cphttpd service that handles AutoSSL hostname certificate requests on non-web-hosting profiles.
- [Notification Templates](https://docs.cpanel.net/knowledge-base/general-systems-administration/notification-templates/): Lists the notification templates cPanel & WHM stores under /usr/local/cpanel/etc/icontact_templates/ that generate alert emails for events like backups, SSL/AutoSSL, quotas, account actions, and system checks, and explains how to customize a template by copying it to /var/cpanel/templates/icontact_templates/ and using the CPANEL and NOTICE template variables. This version (120) adds the Mail/ReconfigureCalendars template for the CCS-to-cpdavd migration and removes the NSD/BadZones template present in earlier versions.
- [Perl Module Installation](https://docs.cpanel.net/knowledge-base/general-systems-administration/perl-module-installation/): Explains installing Perl modules to the system Perl (`/usr/bin/perl`) via WHM's Install a Perl Module interface, the `/usr/local/cpanel/scripts/perlinstaller` script, or the `cpan` command, and to the cPanel-included Perl (`/usr/local/cpanel/3rdparty/bin/perl`) via `/usr/local/cpanel/bin/cpanm -i`; also covers verifying installed modules, managing them with `/usr/local/cpanel/scripts/perlmods` (-l/-s/-u), and troubleshooting via `/usr/local/cpanel/logs/error_log`, `strace`, and `@INC` errors.
- [Service and Proxy Subdomains](https://docs.cpanel.net/knowledge-base/general-systems-administration/service-and-proxy-subdomains/): Documents cPanel & WHM service/proxy subdomains (cpanel, whm, webmail, cpcalendars, cpcontacts, webdisk, autoconfig, autodiscover) and their corresponding secure/non-secure ports (e.g. 2083/2082 for cPanel, 2087/2086 for WHM), the Service subdomains Tweak Setting, use of the `/usr/local/cpanel/scripts/servicedomains` script, Domain TLS SNI defaults, and how to redirect subdomains manually to bypass the shared cPanel service SSL certificate (not recommended).
- [Service Proxying](https://docs.cpanel.net/knowledge-base/general-systems-administration/service-proxying/): Explains how to configure cPanel & WHM service proxying, which redirects a cPanel account's web server (httpd) and Dovecot mail requests to a remote backend server, via the WHM API 1 set_service_proxy_backends, unset_all_service_proxy_backends, and get_service_proxy_backends functions. Covers assigning a general proxy backend versus per-service-group backends (e.g. the Mail group), notes that SMTP/Exim cannot be proxied (use manual MX redirects instead), and notes that unsuspending an account removes proxying, as used by the Live Transfer feature.
- [Supported MySQL/MariaDB Versions](https://docs.cpanel.net/knowledge-base/general-systems-administration/supported-mysql-mariadb-versions/): Lists supported MySQL (8.0, 8.4, with 5.7 unavailable for new installs) and MariaDB (10.5, 10.6, 10.11, 11.4, 11.8, with 10.0-10.3 deprecated) versions per operating system for this cPanel & WHM version (136), covering AlmaLinux 8/9/10, CloudLinux 8/9/10, and Ubuntu 24. This version defaults to MariaDB 10.11 if no database engine is chosen during installation, adds MariaDB 11.8 support, and drops Ubuntu 22 support that appeared in version 134.
- [System User Accounts](https://docs.cpanel.net/knowledge-base/general-systems-administration/system-user-accounts/): Reference table of cPanel & WHM system OS user accounts and their purposes, including `clamav`, `cpanel`, `cpanelanalytics`, `cpanelcabcache`, `cpanelconnecttrack`, `cpanellogin`, `cpaneleximfilter`, `cpaneleximscanner`, `cpanelhorde`, `cpanelphpmyadmin`, `cpanelphppgadmin`, `cpanelroundcube`, `cpanelrrdtool`, `cpanelsolr`, `dovecot`, `nobody`, and `root`, noting which are created by cPanel & WHM versus third-party software.
- [The cpanelsync.exclude File](https://docs.cpanel.net/knowledge-base/general-systems-administration/the-cpanelsync-exclude-file/): Explains using `/etc/cpanelsync.exclude` (one absolute file path per line, e.g. via `echo path >> /etc/cpanelsync.exclude`) to block the `cpanelsync` utility from updating specific cPanel-distributed files; notes it only blocks cpanelsync updates (not runtime changes or config/datastore files) and cannot block package-managed files, and shows using `rpm -qf` or `dpkg -S` to check if a file is package-managed.
- [The License Callback Mechanism](https://docs.cpanel.net/knowledge-base/general-systems-administration/the-license-callback-mechanism/): Describes the license callback mechanism, which notifies (but does not modify) a cPanel & WHM server immediately after a license change in Manage2 or the cPanel Store, by contacting inbound ports 2082, 2083, 2086, 2087, or 2096 from the IP ranges 208.74.121.0/24 and 208.74.123.0/24; at least one of these ports must be open for the callback to succeed.
- [The Statistics Software Configuration File](https://docs.cpanel.net/knowledge-base/general-systems-administration/the-statistics-software-configuration-file/): Documents the `/etc/stats.conf` file (not to be edited manually) that backs WHM's Statistics Software Configuration interface, listing its settings: `ALLOWALL` (lets users change their stats-generating software), `BLACKHOURS` (blocks stats processing during specified hours), `DEFAULTGENS` (default generators like ANALOG, WEBALIZER), and `allow_awstats_include` (allows a custom AWStats include file).
- [Uninstall Legacy Ruby Installations](https://docs.cpanel.net/knowledge-base/general-systems-administration/uninstall-legacy-ruby-installations/): Covers uninstalling legacy Ruby (cPanel & WHM version 64 and earlier, deprecated in version 66) via manual compilation cleanup (`make uninstall` plus archiving leftover files like `/usr/bin/ruby`, `/usr/lib/ruby`, `/usr/bin/gem`, `/usr/bin/rails`), the `rpm -qa|grep -i ruby` and `rpm -e --nodeps` commands, or the `yum provides ruby` and `yum erase` commands.
- [What is Domain TLS?](https://docs.cpanel.net/knowledge-base/general-systems-administration/what-is-domain-tls/): Domain TLS is a domain-indexed certificate repository that stores the server's verified SSL/TLS certificates and provides SNI support for cpsrvd, cpdavd, exim, and dovecot. It excludes expired or invalid certificates and updates automatically as certificates are installed, managed, or deleted through cPanel & WHM.
- [CVE-2015-0235-GHOST](https://docs.cpanel.net/knowledge-base/important-notices/cve-2015-2035-ghost/): Covers CVE-2015-0235 (GHOST), a buffer overflow in the GNU C library (glibc) DNS hostname resolution functions that allows unauthenticated remote code execution, notably exploitable via the Exim mail transport agent used by cPanel & WHM; includes glibc update and service restart/reboot instructions. This resolved article receives no further updates.
- [CVE-2016-1238 Perl](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-1238-perl/): Covers CVE-2016-1238, a Perl 5 vulnerability caused by the current directory (".") being included in @INC, which can lead to arbitrary code execution; includes affected cPanel & WHM version ranges and commands to verify and apply the fix.
- [CVE-2016-1531 Exim](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-1531-exim/): Covers CVE-2016-1531, a local privilege escalation vulnerability affecting all set-uid root Exim installations that use perl_startup, allowing any user who can start Exim to gain root; includes patched cPanel & WHM versions and the keep_environment/add_environment configuration mitigation.
- [CVE-2016-3714 ImageMagick](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-3714-imagemagick/): Covers CVE-2016-3714 (ImageTragick), a remote code execution vulnerability in ImageMagick affecting web services that process images; includes patched cPanel & WHM builds and a policy.xml mitigation that disables the vulnerable EPHEMERAL, URL, HTTPS, MVG, and MSL coders.
- [CVE-2016-5387 HTTPOXY](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-5387-httpoxy/): Covers CVE-2016-5387 (httpoxy), an Apache-disclosed vulnerability affecting CGI and CGI-like environments (including mod_php and php-fpm) that misuse the HTTP_PROXY environment variable to redirect outbound proxy connections; includes EasyApache 3/4 patch versions and mod_headers/ModSecurity mitigation steps.
- [CVE-2016-6662 MySQL](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-6662-mysql/): Covers CVE-2016-6662, a MySQL/MariaDB vulnerability allowing users with SUPER or FILE privileges to remotely inject malicious settings into the my.cnf configuration file, potentially leading to root-level remote code execution; affects MySQL 5.5/5.6/5.7 and derivatives like MariaDB and Percona Server, with patched MariaDB versions and my.cnf permission-hardening mitigations.
- [CVE-2016-9963 Exim](https://docs.cpanel.net/knowledge-base/important-notices/cve-2016-9963-exim/): Covers CVE-2016-9963, an information-disclosure vulnerability in Exim versions 4.69-4.87 that can leak DKIM signing keys to log files, or to remote attackers when built with EXPERIMENTAL_DSN_INFO=yes; includes patched cPanel & WHM versions and update verification commands.
- [CVE 2017 1000369 Exim Stack Clash](https://docs.cpanel.net/knowledge-base/important-notices/cve-2017-1000369-exim-stack-clash/): Covers CVE-2017-1000369 (Stack Clash), a memory-handling vulnerability that can leverage a bug in the Exim software to achieve local privilege escalation to root; includes patched cPanel & WHM versions and update verification commands.
- [CVE 2017 16943 and CVE 2017 16944 Exim](https://docs.cpanel.net/knowledge-base/important-notices/cve-2017-16943-and-cve-2017-16944-exim/): Covers CVE-2017-16943 and CVE-2017-16944, remote code execution and denial-of-service vulnerabilities in the Exim ESMTP CHUNKING extension affecting Exim 4.88 and later; includes patched cPanel & WHM versions and a workaround to disable chunking support.
- [CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Meltdown ](https://docs.cpanel.net/knowledge-base/important-notices/cve-2017-5753-cve-2017-5715-cve-2017-5754-meltdown/): Covers CVE-2017-5753 and CVE-2017-5715 (Spectre) and CVE-2017-5754 (Meltdown), speculative-execution CPU vulnerabilities affecting Intel, AMD, ARM, and other architectures on CentOS 6 and CentOS 7 servers, allowing unprivileged attackers to read privileged kernel memory via cache side-channel attacks; includes kernel update and verification steps.
- [CVE-2019-10149 Exim](https://docs.cpanel.net/knowledge-base/important-notices/cve-2019-10149-exim/): Covers CVE-2019-10149, a remote code execution vulnerability in Exim versions 4.87-4.91 (Exim 4.92 is not vulnerable); includes affected/patched cPanel & WHM versions, update instructions, and RPM verification commands.
- [CVE 2019 7524 Buffer overflow when reading extension header from Dovecot index files](https://docs.cpanel.net/knowledge-base/important-notices/cve-2019-7524-buffer-overflow/): Covers CVE-2019-7524, a stack buffer overflow in Dovecot versions 2.0.14-2.3.5 when reading FTS or POP3-UIDL headers via the Solr plugin, allowing local root privilege escalation or arbitrary code execution in the Dovecot process; includes affected cPanel & WHM versions and mitigation by uninstalling the Solr plugin.
- [Guide to IPv6](https://docs.cpanel.net/knowledge-base/ipv6/guide-to-ipv6/): Introductory guide to IPv6 on cPanel & WHM servers covering what IPv6 is, an IPv4-versus-IPv6 comparison, IPv6 address formatting and collapsing rules, and which cPanel & WHM services (Apache, BIND, Dovecot, Exim, PowerDNS, ProFTPD, Pure-FTPd) support IPv6.
- [How to Get Started With IPv6](https://docs.cpanel.net/knowledge-base/ipv6/how-to-get-started-with-ipv6/): Step-by-step setup guide for enabling IPv6 on a cPanel & WHM server, covering acquiring an IPv6 range, configuring IPv6 at the OS level (NetworkManager or legacy network-scripts), WHM configuration (Basic WebHost Manager Setup, Resolver Configuration), adding IPv6 address ranges, assigning dedicated addresses to accounts, and verifying connectivity with ping6.
- [IPv6 Server Administration](https://docs.cpanel.net/knowledge-base/ipv6/ipv6-server-administration/): Covers cPanel & WHM IPv6 server administration topics including the iproute2 command-line tools, IPv6 firewall configuration, IP address/volume limits and BIND recommendations, Apache VirtualHost and DNS AAAA record configuration for IPv6, and IPv6 entries in userdata files.
- [Troubleshoot IPv6 Problems](https://docs.cpanel.net/knowledge-base/ipv6/troubleshoot-ipv6-problems/): Covers troubleshooting common IPv6 problems on cPanel & WHM servers, including verifying IPv6 connectivity with ping6, diagnosing netmask misconfiguration, resolving Neighbor Discovery Protocol (NDP) issues on KVM/bridged networks, and checking assigned IPv6 addresses with the ip -6 addr show command.
- [Caching with NGINX® with Reverse Proxy](https://docs.cpanel.net/knowledge-base/nginx/caching-with-nginx-with-reverse-proxy/): Explains NGINX with reverse proxy's per-user caching under /var/cache/ea-nginx/proxy/username, configuring custom cache keys via $CACHE_KEY_PREFIX, using .htaccess Cache-Control/Pragma headers to manage caching for dynamic or static content, and how third-party integrators detect cache status via /etc/nginx/ea-nginx/cache.json and per-user nginx-cache.json files.
- [Customize NGINX® with Reverse Proxy Configurations](https://docs.cpanel.net/knowledge-base/nginx/customize-reverse-proxy-nginx-configurations/): Covers customizing NGINX with reverse proxy: Global Configuration keepalive settings, global and per-user/per-domain .conf include directories under /etc/nginx/conf.d/, pre-install settings.json/cache.json files, disabling Cloudflare proxying via the include_cloudflare directive, restricting file access (e.g. .git directories), increasing worker_processes, and enabling the X-Cache-Status response header via cache.json.
- [NGINX® Troubleshooting](https://docs.cpanel.net/knowledge-base/nginx/nginx-troubleshooting/): Troubleshooting steps for NGINX with reverse proxy, covering the "could not build proxy_headers_hash" error (fixed via the proxy_headers_hash_bucket_size directive) and NGINX failing to restart after being started with the nginx command instead of restartsrv_nginx or systemctl.
- [NGINX® with Reverse Proxy](https://docs.cpanel.net/knowledge-base/nginx/nginx-with-reverse-proxy/): Installation guide (latest version, 112) for the ea-nginx package (NGINX with reverse proxy) on cPanel & WHM with EasyApache 4: restarting NGINX via restartsrv_nginx (not the nginx command); per-user/domain configuration via the ea-nginx script; and the gzip, Brotli, HTTP/2, and NJS add-on packages. Unlike version 102, this revision omits the CentOS 7-specific systemctl reload restart instructions.
- [The Default Configuration of NGINX with Reverse Proxy](https://docs.cpanel.net/knowledge-base/nginx/the-default-configuration-of-nginx-with-reverse-proxy/): Describes the configuration changes NGINX with reverse proxy makes on install: Apache port reassignment, the Apache mod_remoteip module, the /etc/nginx/conf.d/ea-nginx.conf and ea-nginx/*.json files, CloudFlare integration, restricted access to .ht files, and NGINX log file locations and rotation via logrotate.
- [The ea-nginx Script](https://docs.cpanel.net/knowledge-base/nginx/the-ea-nginx-script/): Reference for the /usr/local/cpanel/scripts/ea-nginx script, covering its config, remove, cache, clear_cache, reload, help, and hint options for managing per-user and system NGINX configuration and cache in EasyApache 4 environments.
- [How to Build and Install Custom RPMs on Red-Hat Systems](https://docs.cpanel.net/knowledge-base/package-management/how-to-build-and-install-custom-rpms-on-red-hat-systems/): Step-by-step guide to building and installing custom RPMs (e.g. Roundcube customizations) on Red Hat-based cPanel & WHM servers: installing rpm-build, enabling the cpanel-devel target, setting up ~/.rpmmacros and the rpmbuild directory tree, editing a package's .spec file, running rpmbuild -bb and rpm -Uvh --force, and freezing the custom RPM against future updates with update_local_rpm_versions --add srpm_versions.
- [How to Set or Unset Package Management](https://docs.cpanel.net/knowledge-base/package-management/how-to-set-or-unset-package-management/): Explains how to set cPanel & WHM's rpm.versions targets (e.g. clamav, exim, proftpd/pure-ftpd, roundcube, cpanel-php8x) to the unmanaged state or back to managed using /usr/local/cpanel/scripts/update_local_rpm_versions --edit/--del target_settings, and lists which targets must never be set to unmanaged.
- [Package Manager Locks](https://docs.cpanel.net/knowledge-base/package-management/package-manager-locks/): Explains package manager lock files (yum/dnf: /var/lib/rpm/.rpm.lock, /var/run/yum.pid, /var/lib/dnf/rpmdb_lock.pid; apt/dpkg: /var/lib/dpkg/lock and related files) that can block cPanel & WHM upgrades starting in version 136, and how to diagnose active locks with fuser, ps, and strace and clear stale locks before retrying /scripts/upcp.
- [RPM Installation Failures](https://docs.cpanel.net/knowledge-base/package-management/rpm-installation-failures/): Catalogs common RPM installation failure messages on Red Hat-based cPanel & WHM servers and their fixes: "No package available", "package is obsoleted", RPM conflicts, RPM package file conflicts, failure to unpack a new package (immutable binaries), and "Your RPM database appears unstable" errors.
- [Apache vs. PHP-FPM Bottleneck with Child Processes](https://docs.cpanel.net/knowledge-base/php-fpm/apache-vs-php-fpm-bottleneck-with-child-processes/): Describes a performance bottleneck on Apache prefork MPM servers when pm_max_children in the PHP-FPM pool configuration exceeds Apache's Minimum/Maximum Spare Servers and Max Request Workers settings, and how to fix it via WHM's Global Configuration interface.
- [Configuration Values of PHP-FPM](https://docs.cpanel.net/knowledge-base/php-fpm/configuration-values-of-php-fpm/): Reference tables of PHP-FPM global directives (in /var/cpanel/ApachePHPFPM/system.yaml) and pool name directives (in system_pool_defaults.yaml), listing each key, YAML name, default value, and whether it's present if not listed, plus instructions for adding custom or unknown directives via YAML maps.
- [PHP FastCGI Process Manager - PHP-FPM](https://docs.cpanel.net/knowledge-base/php-fpm/php-fastcgi-process-manager-php-fpm/): Overview of PHP-FPM (PHP FastCGI Process Manager) in cPanel & WHM with EasyApache 4, including RAM requirements, the PrivateTmp temp-directory behavior, restarting the service via /usr/local/cpanel/scripts/restartsrv_apache_php_fpm --hard, and links to related PHP-FPM configuration and domain pool documentation.
- [PHP-FPM Code and FileSystem Layout for EasyApache 4](https://docs.cpanel.net/knowledge-base/php-fpm/php-fpm-code-and-filesystem-layout-for-easyapache-4/): Details the PHP-FPM filesystem layout under EasyApache 4, including the Cpanel::PHPFPM module, the /var/cpanel/ApachePHPFPM/system.yaml and system_pool_defaults.yaml configuration files, per-domain php-fpm.yaml pool files, generated php-fpm.conf and php-fpm.d/[domain].conf files, and how to restore PHP versions with ea_install_profile.
- [PHP-FPM Domain Pools](https://docs.cpanel.net/knowledge-base/php-fpm/php-fpm-domain-pools/): Explains how cPanel creates PHP-FPM domain pools from /var/cpanel/userdata/[user]/[domain].php_fpm.yaml files, the Cpanel::PHPFPM::rebuild_files() function and /scripts/php_fpm_config --rebuild script, the generated httpd.conf handler and FPM socket paths, and jailshell/virtfs binding for PHP-FPM pools.
- [cPanel Common Questions](https://docs.cpanel.net/knowledge-base/q-and-a-with-cpanel-support/cpanel-common-questions/): FAQ reference answering common cPanel user questions across website outages and HTTP error codes (500/403/404/504), updating PHP, installing WordPress, backing up/restoring sites, email sending/receiving and mail client configuration issues, SSL/AutoSSL renewal, domain transfers, DNS/MX record changes, and database connection failures.
- [Why Can't I Clean a Hacked Machine?](https://docs.cpanel.net/knowledge-base/q-and-a-with-cpanel-support/why-cant-i-clean-a-hacked-machine/): Explains why a root-compromised Linux server can never be proven fully clean, covering hidden backdoors, rootkits, and the limitations of tools like rkhunter and chkrootkit, and recommends migrating to a clean server or restoring from a pre-compromise snapshot.
- [Manage Team Roadmap](https://docs.cpanel.net/knowledge-base/roadmaps/manage-team-roadmap/): Describes cPanel's Manage Team feature (introduced experimentally in version 108, fully released in 112 for Premier/Autoscale/development licenses), covering team owner/user/role terminology, enabling it via WHM's Feature Manager, creating and managing team users including 2FA and passwords, and the Manage Team Audit Log.
- [How to Override the rpm.versions System](https://docs.cpanel.net/knowledge-base/rpm-versions/how-to-override-the-rpm-versions-system/): Explains how files in /var/cpanel/rpm.versions.d/ (local.versions for system administrators, *.versions for third-party developers) override the cPanel-provided /usr/local/cpanel/etc/rpm.versions settings, how third-party conflicts are resolved, and the expected YAML file format.
- [Introduction to the rpm.versions System](https://docs.cpanel.net/knowledge-base/rpm-versions/introduction-to-the-rpm-versions-system/): Introduces the rpm.versions package management system on cPanel & WHM servers, explaining RPMs and source packages (SRPMs), the priority order of local.versions, third-party .versions files, and the cPanel-provided rpm.versions file, and notes it does not manage OS distribution packages.
- [Target Settings](https://docs.cpanel.net/knowledge-base/rpm-versions/target-settings/): Explains rpm.versions 'targets' (groups of packages required for a service), the installed/uninstalled/unmanaged target states, how to override defaults via /var/cpanel/rpm.versions.d/local.versions, and legacy package settings (ftpserver, local_nameserver_type, mailserver, mysql-version) in /var/cpanel/cpanel.config.
- [The check_cpanel_pkgs Script](https://docs.cpanel.net/knowledge-base/rpm-versions/the-check_cpanel_pkgs-script/): Documents the /usr/local/cpanel/scripts/check_cpanel_pkgs script (version 102), which scans cPanel-managed packages for missing, outdated, or altered files and can repair them; covers options like --fix, --list-only, --download-only, --targets, and the verification check codes (S, M, 5, D, L, U, G, T, P).
- [The rpm.versions File](https://docs.cpanel.net/knowledge-base/rpm-versions/the-rpm-versions-file/): Documents the sections of the /usr/local/cpanel/etc/rpm.versions YAML file — install_targets, obsolete, rpm_groups, rpm_locations, srpm_sub_packages, srpm_versions, target_settings, unsupported_rpms, and url_templates — and warns against editing it directly, directing overrides to /var/cpanel/rpm.versions.d/local.versions.
- [The update_local_rpm_versions Script](https://docs.cpanel.net/knowledge-base/rpm-versions/the-update_local_rpm_versions-script/): Documents the /usr/local/cpanel/scripts/update_local_rpm_versions script and its --add, --edit, and --del options for modifying package target states in /var/cpanel/rpm.versions.d/local.versions, with examples for setting pure-ftpd to unmanaged and reverting to cPanel defaults, followed by running check_cpanel_pkgs --fix.
- [Autofixer](https://docs.cpanel.net/knowledge-base/scripts-and-utilities/autofixer/): Describes the Autofixer script collection, accessed as root at https://serverip:2087/scripts2/autofixer, for fixing common server issues from a browser. Lists available scripts including safesshrestart (restores SSH config and restarts SSH), test (a no-op test script), and update_gatherer_permissions (enables Configuration Analytics features); notes scripts should only be run when instructed by cPanel Technical Support.
- [Cloud-Hosted Hostname Solution](https://docs.cpanel.net/knowledge-base/scripts-and-utilities/cloud-hosted-hostname-solution/): Explains how to create a dhclient exit hook script (zzz-set-hostname in /etc/dhcp/dhclient-exit-hooks.d/) so cloud provider hostname-setting scripts like google_set_hostname don't conflict with WHM's Change Hostname feature and cause hostname misconfiguration or a locked cPanel & WHM license.
- [How to Restore Database Grants](https://docs.cpanel.net/knowledge-base/scripts-and-utilities/how-to-restore-database-grants/): Explains the restoregrants command-line utility (/usr/local/cpanel/bin/restoregrants) that restores a MySQL or PostgreSQL database user's lost grants for a cPanel account, using --cpuser, --db={mysql,pg}, and either --dbuser=$dbuser or --all. Also notes that resetting the cPanel account password (via cPanel's Password & Security interface or WHM's List Accounts interface) can restore access if restoregrants fails.
- [The scl Utility](https://docs.cpanel.net/knowledge-base/scripts-and-utilities/the-scl-utility/): Documents the scl command-line utility used to manage Software Collection Library (SCL) environments, specifically the PHP versions EasyApache 4 (EA4) installs as SCLs. Covers syntax (scl option action library 'command'), options like -l/--list and -h/--help, actions enable/register/deregister, and running commands like php -m or pecl --help against a specific ea-phpXX version.
- [Troubleshooting Guide for Perl and CGI Scripts](https://docs.cpanel.net/knowledge-base/scripts-and-utilities/troubleshooting-guide-for-perl-and-cgi-scripts/): Covers common CGI/Perl script failures: checking and fixing script permissions with chmod (e.g. chmod 755), diagnosing code errors by adding CGI::Carp qw(fatalsToBrowser) and running perl -w, and fixing missing Content-type headers that cause scripts to work from the command line but not in a browser.
- [Additional Security Software](https://docs.cpanel.net/knowledge-base/security/additional-security-software/): Lists third-party Linux security tools compatible with cPanel & WHM, including firewalls (APF, ConfigServer Security & Firewall), antivirus/malware scanners (ImunifyAV, ImunifyAV+, Imunify360, Linux Malware Detect, chkrootkit, RootKit Hunter), and other add-ons (Atomicorp, BitNinja, CloudLinux, KernelCare, Logwatch, Monarx, Patchman), with installation commands for chkrootkit and RootKit Hunter.
- [Basic Security Concepts](https://docs.cpanel.net/knowledge-base/security/basic-security-concepts/): Explains cross-site request forgery (XSRF) protections in cPanel & WHM: cookie-based vs HTTP authentication, validated cookies with IP address checks (and disabling service subdomains), requiring SSL/TLS login, security tokens, and URL referrer checks, plus setting minimum password strength via WHM's Password Strength Configuration interface.
- [cPHulk Management on the Command Line](https://docs.cpanel.net/knowledge-base/security/cphulk-management-on-the-command-line/): Covers command-line management of the cPHulk brute-force protection service (cphulkd): enabling/disabling cPHulk and debug mode, checking status, restarting (soft, hard, and Dovecot rebuild), whitelisting/blacklisting IP addresses via cphulkdwhitelist/cphulkdblacklist scripts, log file locations, and removing lockouts including flushing the SQLite login_track table.
- [Determine Your System Status](https://docs.cpanel.net/knowledge-base/security/determine-your-system-status/): Guides administrators through detecting root-level rootkit compromises by checking whether system library files are owned by an RPM package (rpm -qf), comparing package Size and Key ID values against a known-clean server, checking library file size and modification timestamp, verifying file hashes on VirusTotal, and running the cPanel Security Investigator (CSI) script for root- and user-level compromise scans.
- [Download Security](https://docs.cpanel.net/knowledge-base/security/download-security/): Explains cPanel & WHM's GPG signature verification for files downloaded from the httpupdate mirror system, the release vs development GPG keys, the Signature validation on assets downloaded from cPanel & WHM mirrors setting in WHM's Tweak Settings, and how to interpret common failure messages such as missing public key, checksum mismatch, signature verification failure, and missing GPG keyring, including use of the updatesigningkey script.
- [Guide to SSL](https://docs.cpanel.net/knowledge-base/security/guide-to-ssl/): Explains SSL/TLS fundamentals for cPanel & WHM, including certificate types (single-domain, multi-domain, self-signed, wildcard), SSL key security, SNI support, CA bundle files, and CAA records. Describes Let's Encrypt as the default AutoSSL provider for all new installations, with its rate limits (300 certificate orders per 3 hours, 50 registered domains per week, 100 subdomains per certificate, 29-day renewal window), and covers manually renewing or updating an expired SSL certificate with or without AutoSSL in WHM and cPanel. This is the current (latest) version of the guide.
- [How to Configure Microsoft Windows 7 to Use TLS Version 1.2](https://docs.cpanel.net/knowledge-base/security/how-to-configure-microsoft-windows-7-to-use-tls-version-1.2/): Step-by-step procedure to enable TLS 1.2 on Windows 7 for use with Outlook 2010 mail clients: installing the KB3140245 Windows update, creating WinHttp and SCHANNEL TLS 1.1/1.2 registry keys via regedit (DefaultSecureProtocols and DisabledByDefault DWORD values), configuring Outlook's IMAP/POP3/SMTP ports, and includes downloadable PowerShell scripts (install-kb.ps1, tls-reg-edit.ps1) to automate the changes.
- [How to Configure MySQL SSL Connections](https://docs.cpanel.net/knowledge-base/security/how-to-configure-mysql-ssl-connections/): Step-by-step guide to encrypting MySQL database connections on a cPanel & WHM server: creating a key storage directory, generating CA, server, and client SSL keys/certificates with openssl, adding `ssl-*` directives to the `[mysqld]` and `[client]` sections of `/etc/my.cnf`, restarting MySQL, and verifying the SSL configuration. Notes that MariaDB 11.4 automatically configures a self-signed certificate and that this guide instead sets up a signed SSL certificate. Also covers creating a database user and configuring remote access via cPanel's Manage My Databases and Remote Database Access interfaces. Requires root access to the client and host servers. This is the current (latest) version of the guide.
- [How to Determine Password Strength](https://docs.cpanel.net/knowledge-base/security/how-to-determine-password-strength/): Explains how cPanel & WHM calculates password strength scores (0-100) based on length and complexity across four character categories (lowercase, capital, number, symbol), notes that repeated/dictionary/consecutive characters reduce strength, provides an example strength table, and points to the WHM API 1 get_password_strength function for testing passwords.
- [How to Mitigate Slowloris Attacks](https://docs.cpanel.net/knowledge-base/security/how-to-mitigate-slowloris-attacks/): Describes mitigating Slowloris denial-of-service attacks (which exhaust a web server's available connections) using the Apache mod_reqtimeout (recommended) or mod_qos modules, installed via WHM's EasyApache 4 interface, with example configuration files (RequestReadTimeout directive; QS_ClientEntries, QS_SrvMaxConnPerIP, QS_SrvMaxConnClose, QS_SrvMinDataRate directives) and explanations of each setting.
- [How to Prevent cPanel Users from Creating Certain Domains](https://docs.cpanel.net/knowledge-base/security/how-to-prevent-cpanel-users-from-creating-certain-domains/): Explains how to block cPanel users from creating specific domains or TLDs (e.g., to prevent parking well-known domains) by viewing the default /usr/local/cpanel/etc/commondomains list, adding entries to /var/cpanel/commondomains (one domain/TLD per line, which also blocks subdomains), and enabling the 'Prevent cPanel users from creating specific domains' setting in WHM's Tweak Settings.
- [How to Reset a cPanel Account Password](https://docs.cpanel.net/knowledge-base/security/how-to-reset-a-cpanel-account-password/): Walks through the self-service cPanel account password reset flow at the login page (port 2083): requires the 'Reset Password for cPanel accounts' Tweak Setting and a configured contact email address, then steps through entering the username, receiving and submitting a security code, and setting a new password.
- [How to Reset a cPanel Subaccount Password](https://docs.cpanel.net/knowledge-base/security/how-to-reset-a-cpanel-subaccount-password/): Walks through the self-service cPanel Subaccount password reset flow at the login page (port 2083): requires the 'Reset Password for Subaccounts' Tweak Setting and a configured contact email address, then steps through entering the username, receiving and submitting a security code, and setting a new password.
- [How to Secure SSH](https://docs.cpanel.net/knowledge-base/security/how-to-secure-ssh/): Lists SSH hardening steps for cPanel & WHM servers: restricting shell access via WHM's Manage Shell Access (or jailed shells), setting an SSH legal message in /etc/motd, disabling password authentication in favor of SSH keys via WHM's Manage root's SSH Keys and SSH Password Authorization Tweak, and editing /etc/ssh/sshd_config settings (Port, Protocol, ListenAddress, PermitRootLogin) with a full example sshd_config file and firewall/autofixer recovery notes.
- [How to Troubleshoot Jailshell Problems on a Virtuozzo or OpenVZ VPS](https://docs.cpanel.net/knowledge-base/security/how-to-troubleshoot-jailshell-problems-on-a-virtuozzo-or-openvz-vps/): Troubleshoots jailed shell (jailshell) issues on Virtuozzo/OpenVZ VPS environments: the ~4000 mount target limit, jailed users seeing the full /proc mount (fixed by enabling the sys_admin capability via vzctl for the CLONE_NEWPID flag), the 'Unable to set uids' error caused by custom hard nproc limits in /etc/security/limits.conf, and MySQL connection errors from OpenVZ loop device limits (resolved by adding max_loop=256 to /etc/grub.conf).
- [How to Troubleshoot PCI Compliance Scans](https://docs.cpanel.net/knowledge-base/security/how-to-troubleshoot-pci-compliance-scans/): Troubleshoots PCI compliance scan failures on port 443 caused by conflicting SSLCipherSuite entries after configuring the SSLCipherSuite directive in WHM's Apache Configuration interface: remove duplicate SSLCipherSuite entries from httpd.conf and users' SSL data files, rebuild httpd.conf with /usr/local/cpanel/scripts/rebuildhttpconf, and restart Apache with restartsrv_httpd before retrying the scan.
- [How to Update Ciphers and TLS Protocols](https://docs.cpanel.net/knowledge-base/security/how-to-update-ciphers-and-tls-protocols/): Lists where to configure OpenSSL cipher and TLS protocol settings for cpsrvd (cPanel/WHM/Webmail), Web Disk, Dovecot, Apache, and Exim in cPanel & WHM, including the relevant WHM interfaces (cPanel Web Services Configuration, cPanel Web Disk Configuration, Mailserver Configuration, Global Configuration, Exim Configuration Manager) and each service's protocol syntax. Notes that cPanel & WHM 86+ supports only TLSv1.2 or later.
- [How to Use cPanel API Tokens](https://docs.cpanel.net/knowledge-base/security/how-to-use-cpanel-api-tokens/): Explains cPanel API tokens, which authenticate UAPI and cPanel API 2 (not API 1) function calls without logging into the cPanel interface: creating a token via cPanel's Manage API Tokens interface or the Tokens::create_full_access UAPI function, revoking tokens (they don't auto-expire-remove) via Tokens::revoke, and calling functions with curl using the 'Authorization: cpanel username:APITOKEN' header.
- [Legacy Security Levels](https://docs.cpanel.net/knowledge-base/security/legacy-security-levels/): Documents the legacy vulnerability rating system used in cPanel & WHM Targeted Security Releases (TSRs) prior to TSR-2017-0002: the CVSSv2 Base Score/Base Vector scoring methodology (AV, AC, Au, C, I, A metrics) used from TSR-2015-0001 to TSR-2017-0001, and the older Critical/Important/Moderate/Minor severity rating scale used before that.
- [More About TLS and SSL](https://docs.cpanel.net/knowledge-base/security/more-about-tls-and-ssl/): Explains TLS/SSL cryptographic protocols and the handshake process (key exchange for encrypting sessions), self-signed vs certificate authority (CA)-verified server certificates, and cPanel & WHM's TLS version support: TLSv1.2-only by default from version 86 onward, TLSv1.2 recommended for 84 and earlier, and TLSv1.3 support requiring OpenSSL 1.1.1+.
- [OWASP® ModSecurity CRS](https://docs.cpanel.net/knowledge-base/security/owasp-modsecurity-crs/): Explains the OWASP ModSecurity Core Rule Set (CRS) for Apache's mod_security2 module, including how to install the ea-modsec2-rules-owasp-crs package via WHM's EasyApache 4 interface or the command line, and how to review blocked traffic in WHM's ModSecurity Tools interface.
- [PCI Compliance and Software Versions](https://docs.cpanel.net/knowledge-base/security/pci-compliance-and-software-versions/): Explains how PCI compliance scanners can produce false positives when a vendor backports a security patch without incrementing the software version number, and provides commands to check OpenSSL, OpenSSH, SSH daemon, and Exim versions for backported fixes.
- [PHP Security Concepts](https://docs.cpanel.net/knowledge-base/security/php-security-concepts/): Describes methods to harden PHP configuration against Local File Inclusion (LFI) and Remote File Inclusion (RFI) attacks, unsafe development functions, and exposed error messages, primarily via directives in WHM's MultiPHP INI Editor interface.
- [Recommended Security Settings](https://docs.cpanel.net/knowledge-base/security/recommended-security-settings/): Provides a checklist of recommended server security settings and points to WHM's Security Advisor, Background Process Killer, and Configure ClamAV Scanner interfaces for scanning and hardening a cPanel & WHM server.
- [Security Best Practices](https://docs.cpanel.net/knowledge-base/security/security-best-practices/): Covers general cPanel & WHM security best practices, including the difference between a root-level server compromise and a site-level compromise, and links to related hardening documentation.
- [Security Levels](https://docs.cpanel.net/knowledge-base/security/security-levels/): Explains how cPanel scores security advisories using the CVSSv3 (Common Vulnerability Scoring System version 3) Base Score and Base Vector, including the metrics that make up the vector string.
- [SSL/TLS Key Types](https://docs.cpanel.net/knowledge-base/security/ssl-tls-key-types/): Compares RSA and ECDSA SSL/TLS key types in cPanel & WHM, covering size, speed, compatibility, and adoption tradeoffs, and includes a key-length-to-strength comparison table. Explains how to change the default key type via WHM's SSL/TLS Configuration interface or Tweak Settings (Security section), or cPanel's SSL/TLS interface.
- [The failurls File](https://docs.cpanel.net/knowledge-base/security/the-failurls-file/): Documents the /var/cpanel/failurls file, which lets a reseller redirect users who fail authentication on a custom login form to a custom error page, including entry format requirements and the /usr/local/cpanel/startup command needed to apply changes.
- [The ModSecurity® Guardian Log](https://docs.cpanel.net/knowledge-base/security/the-modsecurity-guardian-log/): Describes how to download, configure, and enable Apache's httpd-guardian script to detect and block Denial-of-Service (DoS) attacks via ModSecurity's SecGuardianLog directive, configured through WHM's ModSecurity Configuration interface.
- [The SSL Installation and Precedence Logic](https://docs.cpanel.net/knowledge-base/security/the-ssl-installation-and-precedence-logic/): Explains how cPanel & WHM and Apache select and install SSL certificates, covering name-based virtual host matching, Domain TLS storage, and how service-default SSL certificates are compared against and merged into Domain TLS based on certificate grade.
- [Tips to Make Your Server More Secure](https://docs.cpanel.net/knowledge-base/security/tips-to-make-your-server-more-secure/): Lists server-hardening tips for cPanel & WHM, including secure password configuration via /etc/login.defs and moving SSH access to a non-default, privileged port via /etc/ssh/sshd_config.
- [Troubleshoot SSL-Related Issues](https://docs.cpanel.net/knowledge-base/security/troubleshoot-ssl-related-issues/): Troubleshoots common SSL certificate installation problems in cPanel & WHM, including certificate/key mismatches (verified via openssl x509 and openssl rsa commands) and TLS protocol version support (TLSv1.2 and TLSv1.3) across cPanel & WHM versions.
- [Enable Sitejet Commerce](https://docs.cpanel.net/knowledge-base/sitejet/enable-sitejet-commerce/): Explains how cPanel & WHM partners and resellers enable Sitejet Commerce, an optional e-commerce subscription for Sitejet. Partners submit a priority support request if not auto-enabled; resellers activate it via the WHM API set_commerce function and add the Starter, Professional, or Unlimited plan SKUs as store products.
- [How to Add Custom Sitejet Templates](https://docs.cpanel.net/knowledge-base/sitejet/how-to-add-custom-sitejet-templates/): Explains how cPanel & WHM Partners request access to Sitejet Studio and create custom Sitejet templates for their cPanel users, either by building a new website-based template from the Manager interface and saving it via Create as template, or by customizing a prebuilt template from the template library, then publishing it to the My templates section.
- [How to Integrate Sitejet Builder in Your Customer Portal](https://docs.cpanel.net/knowledge-base/sitejet/how-to-integrate-sitejet-builder-in-your-customer-portal/): Describes how to embed Sitejet Builder directly in a hosting partner's customer portal using the cPanel & WHM UAPI: create a Sitejet account with create_sitejet_account, generate a website ID with create_website, produce a single sign-on link with get_sso_link, and publish the built site with start_publish_sitejet, which sends generated HTML back to the control panel's document root.
- [How to Delete a MySQL® Database](https://docs.cpanel.net/knowledge-base/sql/how-to-delete-a-mysql-database/): Describes manually deleting a MySQL database on a cPanel & WHM server via WHM's SQL Services > phpMyAdmin (select database, Operations tab, Drop the database), then cleaning up the corresponding entry in cPanel's Manage My Databases interface. Recommends using Manage My Databases first, since manual deletion can corrupt the database map and break backups.
- [How to Enable the Slow Query Log in MySQL® or MariaDB](https://docs.cpanel.net/knowledge-base/sql/how-to-enable-the-slow-query-log-in-mysql-or-mariadb/): Explains two ways to enable the MySQL/MariaDB Slow Query Log: via WHM's Edit Database Configuration interface (setting Slow Query Log, Slow Query Log File Name, Long Query Time) or by manually editing my.cnf with slow_query_log, slow-query_log_file, and long_query_time settings, noting renamed variables in MariaDB 10.11+ and MySQL 5.6-, then analyzing results with the mysqldumpslow command.
- [How to Resolve Password Authentication Failed Errors in PostgreSQL®](https://docs.cpanel.net/knowledge-base/sql/how-to-resolve-password-authentication-failed-errors-in-postgresql/): Fixes PostgreSQL 'password authentication failed' errors by checking /root/.pgpass for the correct password format, and if missing, walks through stopping Tailwatch, temporarily setting pg_hba.conf's auth method from md5 to trust, resetting the postgres user's password via psql, reverting pg_hba.conf to md5, and restarting Tailwatch and PostgreSQL.
- [How to Restore a User's Database Access](https://docs.cpanel.net/knowledge-base/sql/how-to-restore-a-user-database-access/): Explains how to restore a cPanel user's lost MySQL or PostgreSQL database grants using the restoregrants command-line utility (--cpuser, --db, --dbuser or --all flags). If restoregrants fails, describes the fallback of resetting the cPanel account password via cPanel's Password & Security interface (user) or WHM's List Accounts interface with Sync MySQL password with account password (admin/reseller).
- [Install or Update PostgreSQL® on Your cPanel & WHM Server](https://docs.cpanel.net/knowledge-base/sql/install-or-update-postgresql-on-your-cpanel-server/): Covers installing or updating PostgreSQL on a cPanel & WHM server (excluding Ubuntu) using the installpostgres script only, including backing up databases with pg_dumpall and preserving the old data directory, running installpostgres, configuring via WHM's Configure PostgreSQL interface (Install Config, Create Users, Change Password), importing databases with psql, and reverting to a prior PostgreSQL version if the upgrade fails.
- [MySQL® Upgrade Information Center](https://docs.cpanel.net/knowledge-base/sql/mysql-upgrade-information-center/): FAQ-style hub on upgrading MySQL/MariaDB on cPanel & WHM servers, covering risks of staying on end-of-life MySQL, upgrade steps using the start_background_mysql_upgrade WHM API or the MySQL/MariaDB Upgrade / Upgrade Database Version interfaces, Strict Mode implications, Interactive vs. Unattended upgrade choice, remote MySQL upgrades, backup/restoration via WHM Backup Configuration, and the MySQL 5.5/5.6 upgrade blocker for cPanel & WHM 132+.
- [The MysqlDump Stream](https://docs.cpanel.net/knowledge-base/sql/the-mysqldump-stream/): Documents the experimental MysqlDump WebSocket endpoint in cPanel & WHM, which lets an authenticated client (via Basic HTTP Authentication or a cPanel/WHM API token) remotely stream a MySQL database dump using the dbname, character_set, and include_data parameters, with WebSocket close codes (1000 success, 1011 general error, 4000 collation error) and a wscat usage example. Root or root-privileged resellers can dump any database in WHM.
- [Troubleshoot MySQL® Profiles](https://docs.cpanel.net/knowledge-base/sql/troubleshoot-mysql-profiles/): Troubleshoots remote MySQL profile connection failures in cPanel & WHM, covering DNS errors, invalid IP addresses, incorrect SSH/MySQL ports, invalid SSH credentials, host-not-allowed permission errors, firewall/handshake failures, reverse DNS requirements, and changing the MySQL root password via WHM's MySQL Root Password interface, including MySQL 8.0+ password validation and authentication-plugin caveats for remote and cPanel-to-cPanel setups.
- [Contact cPanel](https://docs.cpanel.net/knowledge-base/technical-support-services/contact-cpanel/): Describes how to contact cPanel Support by opening a ticket through WHM's Create Support Ticket interface or the cPanel Customer Portal, including checking your license vendor first, and how to review, reopen, or leave feedback on existing support requests.
- [cPanel Migration Services and Guides](https://docs.cpanel.net/knowledge-base/technical-support-services/cpanel-migration-services-and-guides/): Covers free migration services from Plesk and DirectAdmin (plus select end-of-life operating systems) to cPanel & WHM: server and access requirements, the ticket-based migration process from submission through DNS switchover, control panel-specific data exceptions (e.g., SpamAssassin configs, feature lists, Roundcube data, FTP account naming), and an FAQ on migration scope, access, and duration.
- [Feedback for Tickets](https://docs.cpanel.net/knowledge-base/technical-support-services/feedback-for-tickets/): Explains how to use the My requests interface in the cPanel Support Center to select a resolved ticket, rate the support received as good or bad, add optional comments, and submit or revise feedback within a five-day window after the ticket is marked Solved.
- [How to Authenticate your Server for cPanel Technical Support](https://docs.cpanel.net/knowledge-base/technical-support-services/how-to-authenticate-your-server-for-cpanel-technical-support/): Explains how to grant cPanel Technical Support access to your server via WHM's Grant cPanel Support Access interface or manually through the cPanel Help Center's ticket Server Info panel, including entering server credentials, managing SSH keys, allowlisting cPanel Technical Support IP addresses, and authorizing access directly via SSH for root and non-root users.
- [How to Open a Technical Support Request](https://docs.cpanel.net/knowledge-base/technical-support-services/how-to-open-a-technical-support-ticket/): Lists the products cPanel Technical Support covers (cPanel & WHM, DNSOnly, CloudLinux, KernelCare, Imunify360, LiteSpeed Web Server, JetBackup), the information required before submitting a ticket (server hostname/IP and Support Access ID), and the methods to open a request: WHM's Create Support Ticket interface, the cPanel Customer Portal, or Manage2 for Partners.
- [Connect to Web Disk with Third-Party Software](https://docs.cpanel.net/knowledge-base/third-party/connect-to-web-disk-with-third-party-software/): How to connect to cPanel's Web Disk (WebDAV) feature using third-party clients such as Transmit, BitKinex, Konqueror, Nautilus, Apple Finder, and Windows, either via downloadable configuration scripts from cPanel's Web Disk interface or manual WebDAV connection settings.
- [How to Install ConfigServer Security & Firewall (CSF)](https://docs.cpanel.net/knowledge-base/third-party/how-to-install-csf/): Installing ConfigServer Security & Firewall (CSF), a third-party iptables/firewall plugin for WHM now maintained by WebPros as cpanel-csf (original CSF developers stopped support August 2025). Covers yum/apt install commands per OS, upgrading from legacy CSF versions, disabling testing mode in the WHM interface, and uninstalling with yum/apt remove or apt purge.
- [How to Install ImunifyAV](https://docs.cpanel.net/knowledge-base/third-party/how-to-install-imunifyav/): How to install ImunifyAV (free malware scanning, auto-installed with cPanel & WHM) via WHM's Security Advisor interface, with a feature comparison against ImunifyAV+ and Imunify360 and a link to Imunify's uninstall documentation. This is version 88 of the documentation.
- [How to Install KernelCare](https://docs.cpanel.net/knowledge-base/third-party/how-to-install-kernelcare/): Command-line installation of KernelCare (automatic Linux kernel patching without reboot): running the curl or wget install script, registering the license key with kcarectl --register, checking applied patches with kcarectl --info, and manually checking for updates with kcarectl --update.
- [How to Install WordPress® With cPanel](https://docs.cpanel.net/knowledge-base/third-party/how-to-install-wordpress-with-cpanel/): Explains how to install WordPress on a cPanel account either through the WP Toolkit interface or manually by downloading WordPress and creating a MySQL database. Covers troubleshooting manual installs: document root conflicts (only one WordPress installation per document root, subdirectory installs to work around this) and database connection errors traced to mismatched credentials in wp-config.php, checked/changed via cPanel's Manage My Databases interface (version 120 and later).
- [How to Purchase a KernelCare License](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-a-kernelcare-license/): How to buy a KernelCare license (automatic Linux kernel patching without reboot) through WHM's Security Advisor, Manage2 (cPanel Partners), or the cPanel Store, including compatible OS requirements (CentOS 7, RHEL 7, CloudLinux, AlmaLinux, Rocky Linux, Ubuntu) and the requirement to disable Secure Boot.
- [How to Purchase a LiteSpeed Web Server License](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-a-litespeed-web-server-license/): Purchasing and installing a LiteSpeed Web Server license (LiteSpeed 8GB vs LiteSpeed Unlimited tiers, based on RAM and worker process needs) via WHM's EasyApache 4 interface or the cPanel Store, including compatibility caveats (no mod_status, no NGINX reverse proxy) and how to find your LiteSpeed serial number.
- [How to Purchase an Imunify360 License](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-an-imunify360-license/): Purchasing an Imunify360 license (security suite bundling KernelCare and ImunifyAV+ malware protection, with auto-trim by default) via WHM's Security Advisor, Manage2 (cPanel Partners), or the cPanel Store; includes a feature comparison table, installation, trim/remove configuration, and uninstall instructions.
- [How to Purchase an ImunifyAV+ License](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-an-imunifyavplus-license/): Purchasing an ImunifyAV+ license (adds one-click malware cleanup, email notifications, and automatic removal to the free ImunifyAV scanner) via WHM's Security Advisor or ImunifyAV interface, Manage2 (cPanel Partners), or the cPanel Store; includes a feature comparison against ImunifyAV and Imunify360, installation steps, and trim/remove and file retention configuration.
- [How to Purchase and Install WHMCS](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-and-install-whmcs/): Covers purchasing a WHMCS billing and automation platform license from the cPanel Store and installing self-hosted WHMCS on a cPanel account via WHMCS's browser-based or command-line installation methods.
- [How to Purchase CloudLinux™](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-cloudlinux/): Purchasing and installing a CloudLinux license from WHM's Home interface, MultiPHP Manager, or EasyApache 4, or via Manage2 (cPanel Partners) or the cPanel Store, including the difference between the 'CloudLinux for cPanel' and 'CloudLinux' cart options.
- [How to purchase a domain from the Domains interface](https://docs.cpanel.net/knowledge-base/third-party/how-to-purchase-domains-from-your-hosting-provider/): This document describes how to search for and purchase a domain directly from the cPanel Domains interface.
- [How to Set Up a Third-Party Package Repository with GPG Signatures](https://docs.cpanel.net/knowledge-base/third-party/how-to-set-up-a-third-party-package-repository-with-gpg-signatures/): How third-party vendors set up their own package repositories with GPG signatures for cPanel & WHM: generating sha512 digest files, creating a GPG key pair, signing the digest file with filename notation, publishing the public key, registering it via /scripts/updatesigningkey, and configuring rpm_location/url_templates entries in /var/cpanel/rpm.versions.d/local.versions.
- [How to Set Up Domain Recommendations & Purchase](https://docs.cpanel.net/knowledge-base/third-party/how-to-setup-domain-recommendations-and-purchase/): Setting up the experimental Domain Recommendations & Purchase feature, which sells domains via a connected WHMCS instance: enable it in /var/cpanel/panel.ini, then set store_api_url, skip_ssl_verify, and store_type in domain_recommendations_credentials.json. Jupiter theme only.
- [How to Uninstall LiteSpeed Web Server](https://docs.cpanel.net/knowledge-base/third-party/how-to-uninstall-litespeed-web-server/): Steps to uninstall LiteSpeed Web Server from cPanel & WHM: switch the server back to Apache with cp_switch_ws.sh apache, verify Apache is running, uninstall the LiteSpeed WHM plugin, remove LiteSpeed files with uninstall.sh, and create a /var/cpanel/disable_auto_lsws touch file to prevent upcp from reinstalling it.
- [Munin Update Failures](https://docs.cpanel.net/knowledge-base/third-party/munin-update-failures/): Troubleshooting steps for the Munin cPanel plugin (CPU, Exim, Apache, MySQL monitoring via rrdtool) when it fails to update: verify the munin cron job runs, fix munin:munin file ownership on /var/lib/munin and /var/log/munin, and manually run 'sudo -u munin munin-cron' to refresh graphs.
- [The Let's Encrypt Plugin](https://docs.cpanel.net/knowledge-base/third-party/the-lets-encrypt-plugin/): Covers the Let's Encrypt AutoSSL plugin, cPanel & WHM's default AutoSSL provider as of version 118, including its wildcard domain support, rate/domain limits, and limitations (no HTTP DCV challenges for wildcard domains, requires local or clustered DNS hosting). Also explains how to recreate a corrupted or expired Let's Encrypt registration via WHM's Manage AutoSSL interface; no separate installation is needed since it ships as the default provider.
- [Third Party Software End of Life Policy](https://docs.cpanel.net/knowledge-base/third-party/third-party-software-end-of-life-policy/): WebPros' End of Life (EOL) policy for third-party software and operating systems, including a table of OS EOL dates (RHEL 7, CloudLinux 6/7/8/9/10, CentOS 7 ELS, AlmaLinux 8/9/10, Rocky Linux 8/9, Ubuntu 22.04/24.04) and what happens to cPanel & WHM installations, upgrades, and support once an OS reaches EOL.
- [Third Party Software](https://docs.cpanel.net/knowledge-base/third-party/third-party-software/): Overview of third-party software bundled with cPanel & WHM: where to find license copies (/usr/local/cpanel/3rdparty/share/), how to identify a package's license via its copyright file, how to locate a package's source SRPM on the cPanel update server, and a pointer to per-version third-party software lists in the Release Notes.
- [TuxCare Extended Lifecycle Support (ELS) for PHP](https://docs.cpanel.net/knowledge-base/third-party/tuxcare-extended-lifecycle-support-els-php/): TuxCare Extended Lifecycle Support (ELS) for PHP, a CloudLinux/TuxCare cPanel extension providing security patches for End of Life PHP versions via alt-phpXX packages in WHM's MultiPHP Manager. Covers purchasing via the cPanel Store, WHM, or Manage2; installing; assigning ELS PHP versions to domains; managing versions with the install_tuxcare_els_php, show_php_settings, and mass_change_php_settings scripts; and reverting to an ea-phpXX version.
- [How to Copy an Account with SSH Keys](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-copy-an-account-with-ssh-keys/): Describes copying a cPanel account between a source and destination server using SSH key authentication instead of a password: generate and download a key pair in the destination server's Manage root's SSH Keys interface, import and authorize the public key on the source server, then run WHM's Transfer Tool selecting Root login and SSH Public Key as the authentication method. Warns to keep the private key on the destination server only.
- [How to Manually Migrate Accounts to cPanel & WHM from Unsupported Control Panels](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-manually-migrate-accounts-to-cpanel-from-unsupported-control-panels/): Advanced-sysadmin procedure for migrating accounts from control panels with no official migration tooling (only Plesk® and DirectAdmin have free migration services) to cPanel & WHM: lower DNS TTLs before migrating, install cPanel & WHM with the same hostname/nameservers but a different main IP, then manually copy and set ownership/permissions on the public_html, mail (converting mbox to maildir), tmp, etc, ssl, mysql, and pgsql directories/data, followed by updating nameservers and creating the cPanel/reseller accounts.
- [How to Manually Migrate Horde Data to Roundcube](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-manually-migrate-horde-data-to-roundcube/): Applies to cPanel & WHM version 108 through 118 (Horde was removed in version 108; the export scripts referenced here were themselves removed in version 120). Covers manually migrating calendar events and contacts that did not migrate automatically when Horde was removed: run export_horde_calendars_to_ics and export_horde_contacts_to_vcf as root, copy the resulting .ics/.vcf files into the user's ~/.cpanel/icals and ~/.cpanel/vcards directories for automatic import by the cpanelicsimport/cpanelvcfimport plugins on Roundcube login, and manually import into non-default calendars or address books via Roundcube's Import feature.
- [How to Manually Transfer an Account Between Servers](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-manually-transfer-an-account-between-servers/): Procedure for manually transferring an oversized cPanel account (too large for the WHM Transfer Tool) between servers as root: create a temporary directory with mkdir, compress the account's public_html directory and Apache domlogs with tar, copy the resulting archives to the destination server with scp (including port/-P and key-based/-i options), and extract them on the destination with tar -x.
- [How to Migrate a WordPress® Installation to a cPanel & WHM Server](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-migrate-a-wordpress-installation-to-a-cpanel-server/): Step-by-step tutorial for moving a WordPress site from a locally-hosted macOS server to a cPanel & WHM server: export the WordPress database via phpMyAdmin, upload site files by FTP, create a MySQL database (via the MySQL® Databases interface in version 118 and earlier, or Manage My Databases in version 120 and later), import the database, update the siteurl/home values in the wp_options table, edit database credentials in wp-config.php, fix broken links/images with an SQL UPDATE query, resave permalinks in the WordPress dashboard, and delete the old macOS-hosted site.
- [How to Move All cPanel Accounts from One Server to Another](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-move-all-cpanel-accounts-from-one-server-to-another/): Full-server migration guide (version 112 and later) for moving all cPanel accounts, SSL certificates, and the main IP address from a source server to a new target server: install cPanel & WHM on the target with matching software versions, copy service configurations and reseller accounts before transferring cPanel accounts via WHM's Transfer Tool (including Live Transfer), shut down the source server, then reassign the source's main IP to the target (RHEL and Ubuntu network steps), fix account IPs with the IP Migration Wizard, configure DNS zones/clustering, and reinstall SSL certificates. Warns against migrating calendar/contacts data from a version 120+ source to a version 118 or earlier target, and to cancel the source server's license after cutover to avoid continued invoicing.
- [How to Restore Your cPanel Account - A Guide for New System Administrators](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-restore-your-cpanel-account-a-guide-for-new-system-administrators/): Beginner-oriented guide for new system administrators that explains the difference between WHM (server/backend management) and cPanel (site/frontend management) and the root user, then walks through restoring a cPanel account from a backup archive or cpmove file: upload it via SFTP to the server's /home directory, then use WHM's Transfer or Restore a cPanel Account interface with the Restore from a local cpmove file option. Warns not to pre-create the account before restoring it.
- [How to Transfer Accounts and Configurations Between cPanel & WHM Servers](https://docs.cpanel.net/knowledge-base/transfers-and-restores/how-to-transfer-accounts-and-configurations-between-cpanel-servers/): Index of methods for transferring accounts, configurations, and IP addresses between cPanel & WHM servers: the full-server migration method (linking to How to Move All cPanel Accounts from One Server to Another) for replacing an entire server, WHM's Transfer Tool for moving multiple accounts and/or configurations at once (requires SSH root/sudo access on the remote server), WHM's Transfer or Restore a cPanel Account interface for individual accounts, and WHM's IP Migration Wizard for IP addresses. Notes the caveat against transferring calendar/contacts data from a version 120+ server to a version 118 or earlier server.
- [Touch File for Additional Transfer and Restore Log Diagnostic Entries](https://docs.cpanel.net/knowledge-base/transfers-and-restores/touch-file-for-additional-transfer-and-restore-log-diagnostic-entries/): Explains how to create the /var/cpanel/xferdebug touch file (via touch and /usr/local/cpanel/scripts/synctransfers, run as root) to add verbose SSH connection and per-step diagnostic entries to transfer and restore logs, useful for troubleshooting failed or incomplete account restorations. Warns that enabling this touch file logs passwords in plain text, and shows how to remove it, plus example log output with and without the touch file enabled.
- [Amazon Lightsail Instance Management](https://docs.cpanel.net/knowledge-base/web-services/amazon-lightsail-instance-management/): Covers Amazon Lightsail instance management tasks for cPanel & WHM: starting, stopping, rebooting, and terminating instances; opening and closing firewall ports; managing and deleting static IP addresses; and deleting an instance.
- [cPanel Hyperscaler Installation Guides](https://docs.cpanel.net/knowledge-base/web-services/cpanel-hyperscaler-installation-guides/): Index page linking to cPanel & WHM installation guides for the hyperscalers that provide prebuilt images: Alibaba Cloud, Amazon Lightsail, AWS AMI, DigitalOcean, Google Compute Engine (Google Marketplace), Linode, and Microsoft Azure.
- [Create an Amazon® RDS™ Instance](https://docs.cpanel.net/knowledge-base/web-services/create-an-amazon-rds-instance/): Step-by-step procedure to create an Amazon RDS MySQL instance for use with cPanel & WHM: log in to the AWS Management Console, create a cpanel-whm parameter group (mysql5.7 or mysql8.0) with log_bin_trust_function_creators enabled, create and configure the database (engine, instance class, storage, connectivity, authentication), and obtain the endpoint to use in WHM's Manage MySQL/Database Profiles interface.
- [Create Custom PHP Directives](https://docs.cpanel.net/knowledge-base/web-services/create-custom-php-directives/): For EasyApache 4 systems, explains how to add custom PHP INI directives by creating a .yaml file in /etc/cpanel/ea4/phpini_directives with a directives hash matching the format of phpini_directives.yaml, so the directives become manageable in WHM's MultiPHP INI Editor (Editor Mode).
- [DigitalOcean® Droplet™ Management](https://docs.cpanel.net/knowledge-base/web-services/digitalocean-droplet-management/): Covers DigitalOcean Droplet management for cPanel & WHM instances: initial SSH access and root password setup, WHM access over port 2087, enabling and using Reserved IP addresses, adding DigitalOcean monitoring/alerts, and Droplet actions such as resize, reboot, backups, snapshots, and destroy.
- [DigitalOcean® Guide](https://docs.cpanel.net/knowledge-base/web-services/digitalocean-guide/): Index page linking to DigitalOcean Droplet documentation for cPanel & WHM: Droplet management (start/stop/resize/backups) and how to install cPanel on DigitalOcean.
- [Guide to Git™ — Advanced Configuration and Troubleshooting](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-advanced-configuration-and-troubleshooting/): For system administrators: documents cPanel's Git Version Control restrictions (single remote per repo, disallowed characters, restricted directories like .ssh and cgi-bin), configuration changes (disabled gc.auto, receive.denyCurrentBranch set to updateInstead, symlinked Git binaries), deployment prerequisites and log locations, SSH host key verification behavior, and troubleshooting steps for missing repositories/branches, stalled clones, and SSH access failures.
- [Guide to Git™ — Common Git Commands](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-common-git-commands/): Reference list of common Git command-line commands and key options, including git clone, add, commit, checkout, rm, fetch, pull, push, branch, merge, blame, clean, config, diff, grep, log, revert, shortlog, and stash.
- [Guide to Git™ — Common Git Terms](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-common-git-terms/): Glossary of common Git terms for novice users, defining archive, branch, checkout, cherry-pick, clone, commit, commit object, deployment, fetch, fork, HEAD/head, hook, index, log, master/main, merge, origin, pull, push, rebase, remote, repository, SHA-1, stash, version control, and working tree.
- [Guide to Git™ — Deployment](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-deployment/): Explains cPanel's Git Version Control deployment: repository requirements (checked-in .cpanel.yml, at least one branch, clean working tree), the .cpanel.yml deployment YAML format with example tasks for deploying individual files or an entire directory, and the difference between automatic push deployment (post-receive hook runs on git push) and manual pull deployment (Update from Remote and Deploy HEAD Commit in the Git Version Control interface).
- [Guide to Git™ — Host Git Repositories on a cPanel Account](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-host-git-repositories-on-a-cpanel-account/): Command-line tutorial for hosting a Git repository on a cPanel account: requirements (Shell Access, registered SSH key), naming/directory restrictions, creating a new repository with git init or cloning an existing one, setting receive.denyCurrentBranch to updateInstead, cloning the repository to a local computer via SSH, and pushing local changes back with git push origin master -u.
- [Guide to Git™ — Set Up Access to Private Repositories](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-set-up-access-to-private-repositories/): Walks through setting up SSH access from a cPanel account to a private Git repository (using GitHub as the example host): generate an SSH key with ssh-keygen, create and configure a ~/.ssh/config file with Host/IdentityFile entries, register the public key as a deploy key on the remote host, test the key with ssh -T, and clone the private repository for single- or multiple-repository setups.
- [Guide to Git™ — Set Up Deployment Cron Jobs](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-set-up-deployment-cron-jobs/): Explains how to schedule automatic Git repository deployment in cPanel using WHM/cPanel Cron Jobs: locate the repository path in the Git Version Control interface, then configure a cron job's minute/hour/day/month/weekday interval and command (e.g. cpanel-deploy) to run deployment automatically.
- [Guide to Git™ — Set Up Deployment](https://docs.cpanel.net/knowledge-base/web-services/guide-to-git-set-up-deployment/): Describes the two Git deployment types configurable in cPanel's Git Version Control interface: Push deployment, which auto-deploys changes pushed to the cPanel-managed repository, and Pull deployment, which requires manually deploying changes pulled from the remote repository via the same interface.
- [How to Create a cPanel & WHM Instance on Linode](https://docs.cpanel.net/knowledge-base/web-services/how-to-create-a-cpanel-instance-on-linode/): Walks through creating a cPanel & WHM production hosting environment on Linode using the official cPanel Marketplace listing: logging in to Linode and creating the Linode instance, and notes licensing requirements (valid cPanel license or 15-day trial via a cPanel Store account).
- [How to Create a Jekyll® Ruby Application](https://docs.cpanel.net/knowledge-base/web-services/how-to-create-a-jekyll-ruby-application/): Covers installing the Jekyll static site generator (Ruby platform) on a cPanel server via the command line or cPanel Terminal, requiring compiler access in WHM's Compiler Access interface; not officially supported by cPanel Technical Support.
- [How to Create a Sinatra Ruby Application](https://docs.cpanel.net/knowledge-base/web-services/how-to-create-a-sinatra-ruby-application/): Explains how to install and register a Sinatra Ruby web application in cPanel's Application Manager interface, requiring hosting-provider-enabled feature access, installed EasyApache 4 RPMs, and WHM Compiler Access; not officially supported by cPanel Technical Support.
- [How to Create Ruby Web Applications](https://docs.cpanel.net/knowledge-base/web-services/how-to-create-ruby-web-applications/): Overview of creating Ruby web applications (e.g. Redmine, Sinatra, Jekyll) on cPanel & WHM version 66+ using the Phusion Passenger platform, requiring WHM Compiler Access; notes the legacy Ruby on Rails/RubyGems interfaces are deprecated and unsupported.
- [How to Customize PHP Directives](https://docs.cpanel.net/knowledge-base/web-services/how-to-customize-php-directives/): Explains how to customize PHP directives per-directory using a .user.ini file created via cPanel's File Manager (requires PHP 5.3.0+ and cannot be used with the DSO PHP handler).
- [How to Install a Node.js Application](https://docs.cpanel.net/knowledge-base/web-services/how-to-install-a-node.js-application/): Explains how to install a Node.js web application on cPanel as a non-root cPanel user, listing required EasyApache 4 packages (e.g. ea-nodejs16/18/20/22, mod_passenger, mod_env) that vary by OS (AlmaLinux 8/9, Rocky Linux, CentOS 7); not officially supported by cPanel Technical Support.
- [How to Install a Python WSGI Application](https://docs.cpanel.net/knowledge-base/web-services/how-to-install-a-python-wsgi-application/): Explains how to install a Python WSGI web application (using the Flask framework as an example) on cPanel via the command line or Terminal, requiring pip and specific EasyApache 4 packages; not officially supported by cPanel Technical Support.
- [How to Install cPanel & WHM on DigitalOcean®](https://docs.cpanel.net/knowledge-base/web-services/how-to-install-cpanel-on-digitalocean/): Steps for creating a DigitalOcean Droplet running the cPanel & WHM drive image via the DigitalOcean Marketplace, selecting the correct OS listing (e.g. AlmaLinux OS 8); requires a valid cPanel license (or 15-day trial) and at least one IPv4 address since IPv6-only servers are unsupported.
- [How to Install cPanel & WHM on Google Compute Engine™ through the Google Marketplace](https://docs.cpanel.net/knowledge-base/web-services/how-to-install-cpanel-on-google-compute-engine-through-the-google-marketplace/): Walks through installing a cPanel & WHM instance on Google Compute Engine via the Google Marketplace, covering account creation/login, accepting the trial offer, and entering payment information; requires a valid cPanel license and at least one IPv4 address (IPv6-only is unsupported).
- [How to Install Drush](https://docs.cpanel.net/knowledge-base/web-services/how-to-install-drush/): Explains how to install Drush, a command-line tool for managing Drupal, on cPanel via Composer: install Composer first, add drush/drush as a requirement in composer.json, then run composer install; requires SSH access and at least 4GB memory (or 2GB with 2GB swap).
- [How to Limit Available PHP Versions in the MultiPHP Manager](https://docs.cpanel.net/knowledge-base/web-services/how-to-limit-available-php-versions-in-the-multiphp-manager/): Explains how to restrict which PHP versions appear in cPanel's MultiPHP Manager for a user: create/modify a Feature List in WHM's Feature Manager to deselect PHP versions, assign it to a package in Add/Edit a Package, then assign the package to users in Modify an Account. Notes users can bypass the restriction by setting a PHP version manually via .htaccess.
- [How to Manage Your php.ini Directives with PHP FPM](https://docs.cpanel.net/knowledge-base/web-services/how-to-manage-your-php.ini-directives-with-php-fpm/): Explains how to manage php.ini directives when PHP-FPM is enabled (the cPanel & WHM default): confirm PHP-FPM is on for a domain in WHM's MultiPHP Manager, then create a phpinfo file in the domain's document root to view current PHP settings.
- [How to Set PHP Version Recommendations](https://docs.cpanel.net/knowledge-base/web-services/how-to-set-php-version-recommendations/): Explains how to set PHP version recommendations shown in cPanel's MultiPHP Manager by editing the /etc/cpanel/ea4/recommendations/custom_php_recommendation.json file, whose "versions" array lists recommended PHP version strings (e.g. php54, php72, php74).
- [How to Set Up PHP Composer](https://docs.cpanel.net/knowledge-base/web-services/how-to-set-up-php-composer/): Explains how to install and configure Composer (the PHP dependency/package manager) on a cPanel server: install it globally per the Composer website (cPanel & WHM 130+ no longer ships the cpanel-php-composer package), then set up required PHP modules and ensure the server's php.ini (in /opt/cpanel/ea-*/root/etc/php.ini) is configured correctly; requires SSH access.
- [How to Use Python on AlmaLinux, Rocky Linux, Ubuntu, and CloudLinux 9 and Later](https://docs.cpanel.net/knowledge-base/web-services/how-to-use-python-on-almalinux-rocky-linux-ubuntu-and-cloudlinux-9-and-later/): Explains that on AlmaLinux, Rocky Linux, Ubuntu, and CloudLinux 9 and later, the /usr/bin/python command no longer exists, so scripts must call python2 or python3 explicitly (python3 is required on cPanel & WHM 126+ since Python 2 was removed). Covers using alternatives/update-alternatives or a symlink to redirect /usr/bin/python to python3 for third-party code that cannot be modified.
- [HTTP Error Codes and Quick Fixes](https://docs.cpanel.net/knowledge-base/web-services/http-error-codes-and-quick-fixes/): Reference of HTTP status codes (4xx client errors and 5xx server errors, e.g. 400, 401, 403, 404, 500, 502, 503, 504, 505, 506, 507, 509, 510) with causes and quick fixes, such as checking file permissions or cPanel's Indexes interface for 403 errors and clearing the client cache for 502 errors.
- [InstaSite Configuration File](https://docs.cpanel.net/knowledge-base/web-services/instasite-configuration-file/): Documents the /var/cpanel/.create-website JSON configuration file used by cPanel & WHM's InstaSite feature (an experimental hyperscaler-only feature for generating a website right after install). Lists the required domain, username, and password parameters and notes the file must use 0600 permissions since it stores a password in plain text.
- [Launch a cPanel & WHM Instance on Alibaba® Cloud](https://docs.cpanel.net/knowledge-base/web-services/launch-a-cpanel-instance-on-alibaba-cloud/): Step-by-step procedure for launching a cPanel & WHM instance on Alibaba Cloud: downloading the cPanel Alibaba security rules file, selecting the cPanel & WHM product in the Alibaba Marketplace, configuring the ECS instance (billing, region, zone, instance type, storage), and setting up networking including VPC creation and assigning a public IPv4 address.
- [Launch an Amazon Lightsail Instance](https://docs.cpanel.net/knowledge-base/web-services/launch-an-amazon-lightsail-instance/): Procedure for launching a cPanel & WHM instance on Amazon Lightsail: creating an instance, selecting the Linux/Unix platform and the cPanel & WHM for AlmaLinux blueprint, managing SSH key pairs, choosing an instance plan (minimum 1 GB RAM required), and naming/tagging the instance.
- [Launch an AWS™ AMI™ Instance](https://docs.cpanel.net/knowledge-base/web-services/launch-an-aws-ami-instance/): Procedure for launching a cPanel & WHM instance on Amazon Web Services (AWS) using the cPanel & WHM Amazon Machine Image (AMI): creating and adding an EC2 key pair (macOS and Windows/PuTTY steps), requiring at least one IPv4 address, and fixing hostname issues that can cause license errors.
- [Launch an Azure Virtual Machine](https://docs.cpanel.net/knowledge-base/web-services/launch-an-azure-virtual-machine/): Procedure for creating an Azure virtual machine with a cPanel & WHM image via the Azure Marketplace listing (not the generic Virtual machines interface), covering operating system choice (CentOS, Ubuntu, or Rocky Linux, bring-your-own-license), project/resource group setup, instance sizing (minimum 1GB RAM/20GB disk, recommended 2GB/40GB), security type, and authentication configuration.
- [Linode Instance Management](https://docs.cpanel.net/knowledge-base/web-services/linode-instance-management/): Covers managing a cPanel & WHM instance (Linode) through the Linode Manager interface: first-time access via LISH console or SSH, initial WHM setup and hostname configuration, and instance actions such as Power On/Off, Reboot, Clone, Resize, Rebuild, Rescue, Migrate, and Delete.
- [The cpuser_service_manager Script and the Ubic Subsystem](https://docs.cpanel.net/knowledge-base/web-services/the-cpuser_service_manager-script-and-the-ubic-subsystem/): Documents the /usr/local/cpanel/scripts/cpuser_service_manager script (requires terminal access) for adding, removing, and listing user-managed services (e.g. Apache Tomcat, PSGI, Rails, WSGI apps) run under a cPanel user rather than root, using add --init-script or --ubic-service, list, remove, info, hint, and help arguments. Also explains the Ubic subsystem it configures (~/ubic directory, ~/.ubic.cfg, watchdog cron job) and the ubic status/start/stop/restart commands for managing those services.
- [The splitlogs Binary](https://docs.cpanel.net/knowledge-base/web-services/the-splitlogs-binary/): Describes the /usr/local/cpanel/bin/splitlogs binary, which processes piped Apache/NGINX log data (enabled via WHM's Apache Configuration > Enable Piped Apache Logs setting) and splits a combined log stream into per-domain byte and access logs, reducing open file handles versus one file per virtual host. Documents command-line arguments such as --dir, --suffix, --sslsuffix, --sslport, --main, --mainout, --maxopen, and --buffer for custom logging configuration and debugging.
- [Using Passenger Applications](https://docs.cpanel.net/knowledge-base/web-services/using-passenger-applications/): Explains the ea-apache24-mod-passenger package (the only Passenger option on Ubuntu, also available on AlmaLinux OS 9+ and Rocky Linux 9), which replaces the ea-ruby2*-mod_passenger packages and no longer bundles Ruby, instead using the system's newest installed Ruby, NodeJS, and Python. Covers installing via EasyApache 4, managing apps in cPanel's Application Manager, default path/symlink files under /etc/cpanel/ea4/, and using ea-passenger-runtime-applications-settings --fix to resolve missing-parameters errors.
- [cpdavd Service Replaces CCS Plugin](https://docs.cpanel.net/knowledge-base/webmail/cpdavd-service-replaces-ccs-plugin/): Explains how cPanel & WHM version 120 replaced the Calendar and Contacts Server (CCS) plugin with the cpdavd service for CalDAV/CardDAV calendar and contact sharing, covering the automatic migration from CCS's PostgreSQL data to .ics/.vcf files, required user reconfiguration of calendar/contacts applications, service subdomain and autodiscover requirements, and related interfaces like Calendars and Contacts Sharing/Management.
- [How to Convert Roundcube to SQLite](https://docs.cpanel.net/knowledge-base/webmail/how-to-convert-roundcube-to-sqlite/): Explains the /usr/local/cpanel/scripts/convert_roundcube_mysql2sqlite script, which migrates Roundcube's configuration from a single shared MySQL database to per-user SQLite databases stored under each cPanel user's /home directory; covers the (irreversible) full-server conversion, per-user conversion for troubleshooting, and steps to migrate a Roundcube database between servers while converting to SQLite.
- [How to Import and Export Mail in Roundcube](https://docs.cpanel.net/knowledge-base/webmail/how-to-import-export-mail-roundcube/): Explains how to import mail into Roundcube from MIME or Mbox format files (50MB size limit) via the More > Import menu, and how to export a single selected message as an .eml file via the More > Export menu.
- [How to Manage Spam in Roundcube](https://docs.cpanel.net/knowledge-base/webmail/how-to-manage-spam-in-roundcube/): Explains Roundcube's Junk mailbox spam handling (Roundcube 1.5 and later), which relies on a server-side filter like Apache SpamAssassin rather than built-in scanning; covers marking messages as spam or ham with the Junk and Not Junk buttons to train the filter, and using Empty Junk to move spam to Trash for deletion.
- [How to Manage Webmail Folders](https://docs.cpanel.net/knowledge-base/webmail/how-to-manage-webmail-folders/): Explains how to create and delete folders in the Roundcube webmail client (default folders: Inbox, Drafts, Sent, Junk, Trash, Archive), with separate step-by-step procedures for the Roundcube desktop and mobile interfaces, and a warning not to subscribe to the plain-icon Junk folder used internally for spam storage.
- [How to Set Up a Signature in Webmail](https://docs.cpanel.net/knowledge-base/webmail/how-to-set-up-a-signature-in-webmail/): Explains how to create and configure an email signature in the Roundcube Webmail client, including steps to set a signature under Settings > Identities and to embed an image in an HTML signature using the Insert/edit image tool, since the Webmail interface itself has no built-in signature setting.
- [How to Set Up Calendars and Contacts](https://docs.cpanel.net/knowledge-base/webmail/how-to-set-up-calendars-and-contacts/): Covers setting up cPanel calendars (CalDAV) and contacts (CardDAV) for cPanel & WHM version 120 (the latest version) on Apple desktop/mobile operating systems and on Linux via Thunderbird, using account details from Webmail's Calendars and Contacts Configuration interface; includes iOS, macOS (Automatic/Manual/Advanced account types), and Linux Thunderbird setup. Unlike version 110, calendars and address books can no longer be added directly in Roundcube and must be managed via the Calendars and Contacts Management interface; recommends DAVx5 for Android and the Outlook CalDAV Synchronizer plugin for Outlook.
- [How to Sync Calendars, Contacts, and Email on Android™ Devices](https://docs.cpanel.net/knowledge-base/webmail/how-to-set-up-calendars-contacts-and-email-on-android-devices/): Describes configuring an Android device to sync cPanel email, calendars, and contacts via Exchange ActiveSync (EAS), valid for cPanel & WHM 118 and earlier and requiring the Calendar and Contacts Server and Z-Push - ActiveSync Support plugins; covers Global Address List behavior, manual account setup steps, and troubleshooting issues like port resets, connection failures, duplicate events, and Samsung-specific bugs.
- [How to Synchronize Calendars and Contacts on Android Devices](https://docs.cpanel.net/knowledge-base/webmail/how-to-synchronize-calendars-and-contacts-on-android-devices/): Covers syncing cPanel calendars and contacts on Android (cPanel & WHM 120 and later, requires cpdavd) using the third-party DAVx5 app via CalDAV/CardDAV, including DAVx5 installation and permissions setup, adding a calendar/contacts account, setting sync intervals, and troubleshooting issues like disabled auto-sync/push mode and battery optimization.
- [How to View a Delegated Calendar in Roundcube](https://docs.cpanel.net/knowledge-base/webmail/how-to-view-a-delegated-calendar-in-roundcube/): Explains how to view a delegated calendar in Roundcube (cPanel & WHM 118 and earlier only, requires the Calendar and Contacts Server plugin and cPanel's Calendar Delegation feature) by retrieving the calendar owner's CalDAV URL from Webmail's Configure Calendar and Contacts Client interface and adding it as a new calendar in the delegate's Roundcube account, plus how to test delegated viewing and editing of events.
- [Sender Rewriting Scheme (SRS) in Exim version 4.96](https://docs.cpanel.net/knowledge-base/webmail/srs-support-in-exim-v496/): Describes Exim 4.96's Sender Rewriting Scheme (SRS) support added in cPanel & WHM version 108, including how cPanel duplicates routers and transports with return_path and max_rcpt directives to rewrite forwarded mail's return address for SPF compliance, when custom smarthost or archival configurations need changes, and the new Smarthost requires SMTP authentication setting in the Exim Configuration Manager's Basic Editor.

## cPanel

- [Apache Handlers](https://docs.cpanel.net/cpanel/advanced/apache-handlers/): cPanel's Apache Handlers interface for mapping file extensions to Apache handlers such as default-handler, send-as-is, cgi-script, imap-file, server-info, server-parsed, server-status, and type-map. Covers adding a handler by entering a handler name and file extension(s), and deleting user-defined handlers (built-in extension mappings cannot be removed).
- [API Shell for cPanel](https://docs.cpanel.net/cpanel/advanced/api-shell-for-cpanel/): API Shell for cPanel, a reseller-only interface for interactively calling cPanel API 2 and UAPI functions. Covers enabling it via WHM's Tweak Settings and Feature Manager, selecting an API version and function, entering variable key/value pairs, filtering/sorting/paginating results, and viewing the response in Tree, Table, or Raw view.
- [Cron Jobs](https://docs.cpanel.net/cpanel/advanced/cron-jobs/): cPanel's Cron Jobs interface for scheduling recurring tasks. Covers setting a notification email (and disabling notifications for all or a single job via `/dev/null 2>&1`), adding a cron job by setting Minute, Hour, Day, Month, Weekday, and Command values, and editing or deleting existing cron jobs in the Current Cron Jobs table.
- [Error Pages](https://docs.cpanel.net/cpanel/advanced/error-pages/): cPanel's Error Pages interface for creating custom error pages for any HTTP status code (for example, 404). Covers selecting a domain (for multi-domain accounts), choosing the status code to customize, entering a message with optional visitor-information tags and additional HTML, and saving the page.
- [Indexes](https://docs.cpanel.net/cpanel/advanced/indexes/): cPanel's Indexes interface for controlling how a directory's file listing displays to site visitors. Covers navigating to a directory (Home, Web Root, or a domain's document root) and setting its index option: Inherit, No Indexing, Show Filename Only, or Show Filename and Description.
- [MIME Types](https://docs.cpanel.net/cpanel/advanced/mime-types/): cPanel's MIME Types interface for defining custom MIME types. Covers creating a MIME type by entering a handler name (for example, `application/cgi`) and its file extension(s), and deleting user-defined MIME types; system MIME types in the System MIME Types table cannot be deleted.
- [Terminal for cPanel](https://docs.cpanel.net/cpanel/advanced/terminal-in-cpanel/): The Terminal (Terminal for cPanel) interface, an in-browser terminal for direct command-line access within a cPanel & WHM session. Requires shell access and the hosting provider's SSH Access & Terminal feature (enabled in WHM's Feature Manager) and server profile support; covers accepting the warning notice before use and reconnecting/terminating a session.
- [Track DNS](https://docs.cpanel.net/cpanel/advanced/track-dns/): cPanel's Track DNS interface, which provides a Domain Lookup tool (resolves a domain's IP address, mail servers, and zone information) and a Trace Route tool (traces and times the network path from your computer to the site's server).
- [Virus Scanner](https://docs.cpanel.net/cpanel/advanced/virus-scanner/): cPanel's Virus Scanner interface, powered by ClamAV®, for scanning an account for security threats. Requires the hosting provider to install the ClamAV Scanner plugin and Exim Mail Server service in WHM; scan targets include Scan Mail, Scan Entire Home Directory, Scan Public FTP Space, and Scan Public Web Space, with progress shown for files scanned, data scanned, and infected files found.
- [Database Wizard](https://docs.cpanel.net/cpanel/databases/database-wizard/): cPanel's Database Wizard interface for creating a first MySQL® or MariaDB® database, user, and privileges in one guided flow: name a new database, create a user (subject to MySQL 5.7+ and MariaDB username length limits tied to database prefixing), set a password, and grant privileges. Known as MySQL® Database Wizard in cPanel & WHM version 118 and earlier; this version drops the MySQL 5.6-and-earlier username guidance present in older releases.
- [Manage My Databases](https://docs.cpanel.net/cpanel/databases/manage-my-databases/): cPanel's Manage My Databases interface for creating, managing, and deleting MySQL® or MariaDB® databases and users. Covers creating a database, checking and repairing a database, renaming or deleting a database, adding a user (subject to MySQL 5.7+ and MariaDB username limits), adding a user to a database with specific privileges, and managing users via the Current Databases and Current Users tables. Known as MySQL® Databases in cPanel & WHM version 118 and earlier; this version drops the MySQL 5.6-and-earlier username guidance present in older releases.
- [MySQL® Database Wizard](https://docs.cpanel.net/cpanel/databases/mysql-database-wizard/): MySQL® Database Wizard, cPanel's interface (predecessor to Database Wizard, renamed in version 120) for creating a first MySQL® database, user, and privileges in one guided flow: name a new database, create a user (subject to MySQL 5.6, 5.7+, and MariaDB username length limits tied to database prefixing), set a password, and grant privileges.
- [MySQL® Databases](https://docs.cpanel.net/cpanel/databases/mysql-databases/): MySQL® Databases, cPanel's interface (predecessor to Manage My Databases, renamed in version 120) for creating, managing, and deleting MySQL® databases and users. Covers creating a database, checking and repairing a database, renaming or deleting a database, adding a user (subject to MySQL 5.6, 5.7+, and MariaDB username limits), adding a user to a database with specific privileges, and managing users via the Current Databases and Current Users tables.
- [MySQL® Manager](https://docs.cpanel.net/cpanel/databases/mysql-manager/): MySQL® Manager, an experimental cPanel interface (removed in version 122 in favor of Manage My Databases) for creating and managing MySQL® databases and users. The Databases tab supports creating a database and database user (with automatic Select/Insert/Update/Delete privileges), renaming, and deleting a database; the Database Users and Configuration tabs are not yet implemented. Covers enabling/disabling the feature flag via WHM SSH commands, which differ for cPanel & WHM 114+ versus 112 and earlier.
- [phpMyAdmin](https://docs.cpanel.net/cpanel/databases/phpmyadmin/): phpMyAdmin, a third-party tool in cPanel for manipulating MySQL® or MariaDB® databases (for example, adding or deleting records). Notes that MySQL 8.0 and later enable stats caching by default, so table size/metadata changes can take up to 24 hours to appear unless the `information_schema_stats_expiry` variable is configured.
- [phpPgAdmin](https://docs.cpanel.net/cpanel/databases/phppgadmin/): phpPgAdmin, a third-party tool in cPanel for manipulating PostgreSQL® databases (for example, adding or deleting records).
- [PostgreSQL Database Wizard](https://docs.cpanel.net/cpanel/databases/postgresql-database-wizard/): cPanel PostgreSQL Database Wizard interface (cPanel >> Home >> Databases >> PostgreSQL Database Wizard) for creating a first PostgreSQL database, user, and password in one flow: enter database name, create the database, enter username and password, create the user, then submit to link user and database. Only appears if the hosting provider enabled PostgreSQL in WHM's Configure PostgreSQL interface, now under WHM >> Home >> Database Services >> Configure PostgreSQL (relocated from SQL Services in earlier versions).
- [PostgreSQL Databases](https://docs.cpanel.net/cpanel/databases/postgresql-databases/): cPanel PostgreSQL Databases interface (cPanel >> Home >> Databases >> PostgreSQL Databases) for creating, renaming, and deleting PostgreSQL databases; creating and deleting database users; assigning/removing user privileges on a database; changing user passwords and usernames; and synchronizing grants for ANSI SQL-92 compliant PostgreSQL versions. Requires the hosting provider to enable PostgreSQL in WHM's Configure PostgreSQL interface, now under WHM >> Home >> Database Services >> Configure PostgreSQL (relocated from SQL Services in earlier versions); data entry/queries use the separate phpPgAdmin interface.
- [Remote Database Access](https://docs.cpanel.net/cpanel/databases/remote-database-access/): cPanel Remote Database Access interface (cPanel >> Home >> Databases >> Remote Database Access) for granting or revoking remote host access to a cPanel account's MySQL and MariaDB databases: add an access host by hostname, IPv4/IPv6 address, or wildcard pattern with an optional comment, edit host descriptions, and delete access hosts. In cPanel & WHM 118 and earlier this interface was named Remote MySQL.
- [Remote MySQL®](https://docs.cpanel.net/cpanel/databases/remote-mysql/): cPanel Remote MySQL interface (cPanel >> Home >> Databases >> Remote MySQL) for granting or revoking remote host access to a cPanel account's MySQL databases: add an access host by hostname, IPv4/IPv6 address, or wildcard pattern with an optional comment, edit host descriptions, and delete access hosts. In cPanel & WHM 120 and later this interface was renamed Remote Database Access and added MariaDB support.
- [Domains ](https://docs.cpanel.net/cpanel/domains/domains/): cPanel Domains (List Domains) interface (cPanel >> Home >> Domains >> Domains) for viewing and managing all domains on a cPanel account: create a new domain via the Create a New Domain interface, view each domain's document root and redirect target, toggle Force HTTPS Redirect for domains with a valid SSL certificate, manage a domain's settings via Manage (this version's Manage the Domain interface also supports renaming primary, addon, and parked domains), create email accounts for a domain, and show subdomains automatically created for addon domains. Includes guidance on temporary domains; DNS record changes are handled separately in the Zone Editor interface.
- [Create a New Domain](https://docs.cpanel.net/cpanel/domains/domains/create-a-new-domain/): Use this interface to create a domain on your cPanel account.
- [Manage the Domain](https://docs.cpanel.net/cpanel/domains/domains/manage-the-domain/): Covers cPanel's Manage the Domain interface (cPanel >> Home >> Domains >> Domains) for converting a temporary domain to a registered domain, setting a new document root, renaming primary, addon, and parked domains (new in this version, which updates associated email accounts, DNS records, and the document root), viewing domain information (domain, redirects to, document root), and removing a domain along with its vhost and DNS entries; also links to related actions such as creating an email account, Sitejet Builder, Zone Editor, and Redirects.
- [Dynamic DNS](https://docs.cpanel.net/cpanel/domains/dynamic-dns/): Covers cPanel's Dynamic DNS (DDNS) interface for resolving a hostname on an external network with a dynamic IP address, including hosting-provider nameserver prerequisites and temporary-domain restrictions, the Dynamic DNS Domains table (Domain, IP Address, URL, SSL Certificate), creating a DDNS domain and its webcall URL, recreating or deleting a DDNS domain, viewing/managing its SSL certificate, and configuring routers such as DD-WRT, pfSense, and OpnSense for DDNS.
- [Redirects](https://docs.cpanel.net/cpanel/domains/redirects/): Covers cPanel's Redirects interface (cPanel >> Home >> Domains >> Redirects) for sending visitors of a domain or page to a different URL, including choosing a redirect type (Permanent 301 vs Temporary 302), selecting a domain and path, www-matching options, wildcard redirects, and the Current Redirects table for viewing and deleting existing redirects; also notes limitations when third-party applications manage the .htaccess file.
- [Search Engine Optimization](https://docs.cpanel.net/cpanel/domains/search-engine-optimization/): cPanel Search Engine Optimization interface (cPanel >> Home >> Domains >> Search Engine Optimization, powered by XOVI) for running SEO audits on hosted websites: run a Quick SEO Audit (10 URLs, weekly, high-priority issues) or sign up for unlimited Full SEO Audits (all URLs, high- and lower-priority issues); review the domain audit report's All issues and Page-based issue list tabs with High/Medium/Low priority filtering and per-issue fix recommendations; manage audited sites in the current websites table; and manage the SEO account in Account Settings, including deleting all audit data. Requires a website with a valid IP and a registered (non-temporary) domain.
- [Site Publisher](https://docs.cpanel.net/cpanel/domains/site-publisher/): Covers cPanel's Site Publisher interface (removed in cPanel & WHM version 134) for quickly building a simple website by selecting a domain and a template and entering the requested content, including how publishing backs up and overwrites the document root, where backup and configuration files are stored (/home/user/site_publisher/backups/ and /configurations/), and how to manually remove a Site Publisher-generated website.
- [Sitejet Builder](https://docs.cpanel.net/cpanel/domains/sitejet-builder/): cPanel Sitejet Builder interface (cPanel >> Home >> Domains >> Sitejet Builder) for creating and managing websites with the Sitejet Website Builder (CMS) drag-drop editor: create a new Sitejet website for a domain or subdomain, publish designs to the domain's document root (with optional restore points), view/edit/preview sites from the Sitejet Website table, manage Sitejet-controlled files and robots.txt, troubleshoot reasons a domain can't build a Sitejet site (shared document root, redirected website, domain limit reached), and move a Sitejet website between domains using a sharing code.
- [Social Media Management (Powered by SocialBee)](https://docs.cpanel.net/cpanel/domains/social-media-management/): cPanel Social Media Management interface (Powered by SocialBee) for creating and scheduling social media campaigns for hosted domains across networks like Facebook, LinkedIn, and X: set up a campaign by confirming business info, reviewing suggested social networks, generating and editing sample posts, and approving a weekly posting plan; connect social media profiles via a SocialBee account (14-day free trial, then license required); and manage ongoing activity through suggested accounts to connect, connected accounts, and a posting calendar. Requires the domain to have a valid IP and an existing website.
- [WP Toolkit for cPanel](https://docs.cpanel.net/cpanel/domains/wp-toolkit-for-cpanel/): Covers cPanel's WP Toolkit interface (cPanel >> Home >> Domains >> WP Toolkit) for managing WordPress installations on a cPanel account, notes the additional features available in the WP Toolkit Deluxe version, and points to Plesk's WP Toolkit documentation for installing, configuring, and managing WordPress sites.
- [Zone Editor](https://docs.cpanel.net/cpanel/domains/zone-editor/): Documents cPanel's Zone Editor interface (Home >> Domains >> Zone Editor) for adding, editing, and deleting DNS zone records — A, AAAA, ALIAS, CAA, CNAME, DMARC, HTTPS, MX, SRV, SVCB, and TXT — through the Manage Zone interface, plus the DNSSEC sub-interface for creating, importing, exporting, and deleting DNSSEC keys and viewing DS records. This is the latest version and adds the SVCB record type alongside HTTPS.
- [Address Importer](https://docs.cpanel.net/cpanel/email/address-importer/): Address Importer interface for bulk-creating email accounts or forwarders by uploading a .xls or .csv file listing usernames, passwords, and quotas; covers file formatting, delimiter selection, and mapping columns to Email/Password/Domain fields during import. Supports temporary domain addresses.
- [Archive](https://docs.cpanel.net/cpanel/email/archive/): Archive interface configures per-domain email archiving (requires the Enable Email Archiving Tweak Setting and the Email Archiving feature in WHM's Feature Manager), retaining incoming, outgoing, and mailing list messages in dated archivetype.YYYY-MM-DD directories; covers IMAP access setup, downloading archives as .zip files, viewing archives in Webmail, and deleting old messages via Manage Disk Usage.
- [Autoresponders](https://docs.cpanel.net/cpanel/email/autoresponders/): Autoresponders interface for creating, editing, and removing automatic email replies per address, configuring the response interval, character set, from/subject/body text (with %subject%, %from%, and %email% tags), HTML formatting, and start/stop scheduling; also covers adding autoresponders in Webmail and the interaction with Spam Filters scoring.
- [BoxTrapper](https://docs.cpanel.net/cpanel/email/boxtrapper/): BoxTrapper interface configures challenge-response spam filtering per email account: enabling/whitelisting, the minimum SpamAssassin spam score to bypass verification, whitelist/blacklist/ignore lists, editable verify/verifyreleased/returnverify/blacklist message templates with variables like %email% and %msgid%, the forward list, and the Review Log and Review Queue for managing held mail.
- [Calendar Delegation](https://docs.cpanel.net/cpanel/email/calendar-delegation/): Calendar Delegation interface (renamed to Calendars and Contacts Sharing in cPanel & WHM version 120) lets a cPanel account owner grant other email users read-only or read-write delegate access to a user's calendar via the Calendar Delegates table; requires the Calendar and Contacts Server plugin, two or more email accounts, and is unavailable for Exchange ActiveSync.
- [Calendars and Contacts Management](https://docs.cpanel.net/cpanel/email/calendars-and-contacts-management/): Calendars and Contacts Management interface lets users create, edit, rename, and delete calendars, address books, and task lists (collections), including setting a calendar's color and an optional description; also appears in Webmail, and the default calendar/address book created with an email account cannot be deleted.
- [Calendars and Contacts Sharing](https://docs.cpanel.net/cpanel/email/calendars-and-contacts-sharing/): Calendars and Contacts Sharing interface (replaces Calendar Delegation) lets email users grant read-only or read-write access to their calendars or address books (collections) to other email users on the same cPanel account, via the Share Collection section and Shared Collections table, including adding and removing editing rights.
- [Configure Greylisting](https://docs.cpanel.net/cpanel/email/configure-greylisting/): Configure Greylisting interface toggles per-domain greylisting, which temporarily defers mail from unrecognized IP/sender/recipient triplets (default 5-minute delay, configurable by the hosting provider) to filter spam; includes per-domain on/off toggles and a gear-menu option to enable or disable greylisting for all domains, and requires the feature and Greylisting Daemon service enabled in WHM.
- [Create an Email Account](https://docs.cpanel.net/cpanel/email/create-an-email-account/): Create an Email Account interface for adding a new email account: select the domain, set a username, set a password (manually, generated, or via a login link sent to an alternate address), and configure Optional Settings including storage quota, automatic folder creation for plus-addressed mail, and a welcome email with mail client setup instructions; also lists usage restrictions such as the reserved "cpanel" username and supports temporary domain addresses.
- [Default Address](https://docs.cpanel.net/cpanel/email/default-address/): Default Address interface sets a domain's catch-all address for mail sent to invalid or nonexistent addresses, with delivery options to bounce with an error message, forward to an email address or the system account, pipe to a program, or discard; distinguishes the domain default address from the system default email account used to send system/script-generated mail, and supports temporary domain addresses.
- [Email Accounts](https://docs.cpanel.net/cpanel/email/email-accounts/): Email Accounts interface lists and manages all email accounts on the cPanel account: shows quota status, links to create a new account, and provides per-account actions to check mail in Webmail, manage quota/password/restrictions via Manage Email Accounts, connect devices via Set Up Mail Client, and delete accounts; supports searching and filtering by restricted, system user, or exceeded-storage accounts, and supports temporary domain addresses.
- [Email Deliverability in cPanel](https://docs.cpanel.net/cpanel/email/email-deliverability-in-cpanel/): Documents cPanel's Email Deliverability interface, which must be enabled via WHM's Feature Manager, and which scans a domain's DKIM, SPF, DMARC, and PTR (reverse DNS) DNS records for problems, noting special handling for temporary domains. Covers repairing or manually managing records via the Manage the Domain screen (generating/viewing DKIM keys, customizing SPF settings, installing a suggested DMARC record requiring valid SPF/DKIM), and notes that expired or unmanaged domains with a DNS zone still on the server continue to appear in the list.
- [Email Disk Usage](https://docs.cpanel.net/cpanel/email/email-disk-usage/): Documents cPanel's Email Disk Usage interface, which lists each mailbox's message count and disk usage, and lets users search mailboxes and bulk-delete messages using presets (1 year or older, 30MB or larger, previously viewed, all messages) or a custom Dovecot doveadm mailbox search query (e.g., LARGER 10M, BEFORE 04-Nov-2024).
- [Email Filters](https://docs.cpanel.net/cpanel/email/email-filters/): Documents cPanel's Email Filters interface for creating, editing, deleting, reordering, and testing per-account email filter rules and actions (e.g., matching a From address to redirect or delete mail), including how to read the Filter Trace Results output when testing a filter.
- [Email Routing](https://docs.cpanel.net/cpanel/email/email-routing/): Documents cPanel's Email Routing interface, which configures how a domain's incoming mail is routed based on its MX records, either automatically (Local, Backup, or Remote Mail Exchanger detected from the lowest-numbered MX entry) or via manual selection of Local Mail Exchanger, Backup Mail Exchanger, or Remote Mail Exchanger, and notes special handling for temporary domains.
- [Encryption](https://docs.cpanel.net/cpanel/email/encryption/): Documents cPanel's Encryption interface for generating, importing, viewing, and deleting GnuPG public/private key pairs used to encrypt and decrypt outbound and inbound email, including key size and expiration settings and links to mail-client-specific GnuPG setup instructions (Apple Mail, Thunderbird, eM Client, Gmail).
- [Forwarders](https://docs.cpanel.net/cpanel/email/forwarders/): Documents cPanel's Forwarders interface for creating and deleting email account forwarders (forward to an address, forward to a system account, discard with or without an SMTP error, or pipe to a program) and domain forwarders that redirect undeliverable mail for an entire domain to another domain, plus how to trace a forwarder's delivery path; notes special handling for temporary domains.
- [Global Email Filters](https://docs.cpanel.net/cpanel/email/global-email-filters/): Documents cPanel's Global Email Filters interface for creating, editing, deleting, and testing account-wide (all-domain) email filters, including how to build a wildcard redirect using a regex From-address pattern (e.g., test_user.+@example.com) to catch multiple addresses, and how to read Filter Trace Results output.
- [Mailing Lists](https://docs.cpanel.net/cpanel/email/mailing-lists/): Documents cPanel's Mailing Lists interface (powered by Mailman) for creating, deleting, and managing mailing lists, including setting list privacy (Public or Private), changing a list password, delegating or removing administrative rights to list members, and accessing the Mailman administration interface; requires the hosting provider to enable Mailman mailing lists and the Mailman service in WHM.
- [Manage Email Accounts](https://docs.cpanel.net/cpanel/email/manage-email-accounts/): Covers the cPanel Manage Email Accounts interface for editing an existing email account and the system user email account, including address book sharing, UTF-8 mailbox names, plus addressing folder behavior, password changes, storage quota allocation, send/receive/login restrictions (Allow/Suspend/Hold), and account deletion.
- [Set Up Mail Client](https://docs.cpanel.net/cpanel/email/set-up-mail-client/): Explains the cPanel Set Up Mail Client interface for connecting an external mail client to a cPanel email address, including automatic configuration scripts for common clients (Windows Live Mail, iOS, macOS Mail) and manual IMAP/POP3/SMTP settings for Secure SSL/TLS (ports 993/995/465) and Non-SSL (ports 143/110/587) connections. This version also notes special behavior for temporary domains.
- [Spam Filters](https://docs.cpanel.net/cpanel/email/spam-filters/): Covers the cPanel Spam Filters interface (Apache SpamAssassin) for enabling spam detection, setting the Spam Threshold Score, routing suspected spam to a Spam Box or auto-deleting messages above an Auto-Delete Threshold Score, and configuring whitelist/blacklist entries and individual SpamAssassin test scores.
- [Track Delivery](https://docs.cpanel.net/cpanel/email/track-delivery/): Explains the cPanel Track Delivery interface's Delivery Report table for reviewing email send/receive attempts, filtering by recipient address or delivery status (blocked, failed, deferred, successful), interpreting event icons for troubleshooting (e.g., rejected, filtered, archived), and using the Email Address Trace diagram to trace a message's delivery route.
- [Anonymous FTP](https://docs.cpanel.net/cpanel/files/anonymous-ftp/): Describes the cPanel Anonymous FTP interface for configuring passwordless anonymous access (username anonymous@example.com) to the public_ftp directory, including permission toggles such as disallowing uploads and setting a custom welcome message shown to anonymous FTP users.
- [Backup for cPanel](https://docs.cpanel.net/cpanel/files/backup-for-cpanel/): Explains the cPanel Backup interface for generating and downloading full or partial account backups (home directory, database, email forwarders, email filters) to a Home Directory, remote FTP, or SCP destination. In this version, full backup generation adds an option to include integration links, and partial backups are restored through a dedicated Restore workflow with a Select Restore Type step; full backups can only be restored through WHM, not cPanel.
- [Backup Wizard](https://docs.cpanel.net/cpanel/files/backup-wizard/): Describes the cPanel Backup Wizard interface (available when enabled by the hosting provider's server profile) for creating full or partial backups (home directory, email forwarders/filters, MySQL databases) to a Home Directory, remote FTP, or SCP destination, and for restoring a partial backup by selecting a restore type and uploading the file; full backups can only be restored through WHM, not cPanel.
- [Directory Privacy](https://docs.cpanel.net/cpanel/files/directory-privacy/): Explains cPanel's Directory Privacy interface for password-protecting website directories: enabling password protection and creating a directory label via the Security Settings section, creating authorized users with password strength requirements, and managing or deleting existing authorized users. Notes that protection only applies to web access (not FTP/SFTP/Web Disk) and requires 0700 permissions to add users.
- [Disk Usage](https://docs.cpanel.net/cpanel/files/disk-usage/): Describes cPanel's Disk Usage interface, which shows disk space usage by files, hidden subdirectories, and Mailman mailing lists, with bar graphs relative to the largest directory, and links to File Manager to browse listed directories. Covers causes of a 'disk quota exceeded' error and discrepancies between Disk Usage and File Manager figures (recycled UIDs, block size overhead, database size inclusion).
- [File and Directory Restoration for cPanel](https://docs.cpanel.net/cpanel/files/file-and-directory-restoration-for-cpanel/): Covers cPanel's File and Directory Restoration interface, which restores files and directories from local backups only (not .cpanel or mail directories, which require a full account restore) via two workflows: entering a direct path or browsing the home directory, then selecting a backup from the Backups section and confirming Restore. Requires the hosting provider to enable account backups in WHM's Backup Configuration.
- [File Manager](https://docs.cpanel.net/cpanel/files/file-manager/): Documents cPanel's File Manager interface for managing account files and folders: changing default open folder and hidden-file/encoding settings, creating/copying/moving files and folders, changing permissions (default 0644), deleting/restoring items via Trash, and per-item actions (Upload, Download, Rename, Edit, HTML Editor (Beta), View, Extract, Compress, Password Protect, Leech Protection, Manage Indices) plus file search. Version 126 adds the experimental HTML Editor (Beta) action for editing files, linking to the standalone HTML Editor interface.
- [FTP Accounts](https://docs.cpanel.net/cpanel/files/ftp-accounts/): Covers cPanel's FTP Accounts interface for creating and managing FTP accounts: adding an account (username, domain, password, home directory, disk quota), changing an account's password or quota, deleting an account (with or without its files), configuring FTP clients (Core FTP, Cyberduck) via auto-generated config files, and the built-in Special FTP Accounts (primary account and log access account) and optional Anonymous FTP accounts.
- [FTP Connections](https://docs.cpanel.net/cpanel/files/ftp-connections/): Describes cPanel's FTP Connections interface, which lists active FTP sessions (user, source host, login time, status, process ID) and lets users disconnect a session via the Disconnect action, useful for terminating idle or suspicious connections. Only available when the hosting provider enables FTP services; not shown on CloudLinux servers.
- [Git™ Version Control](https://docs.cpanel.net/cpanel/files/git-version-control/): Documents cPanel's Git Version Control interface for hosting and managing Git repositories: creating a repository by cloning, creating new, or importing an existing one, repository path/character restrictions and cPanel-controlled directories that block repos, SSH host key verification for SSH clone URLs, and managing repositories (branch checkout, pulling with --ff-only, and deploying via a .cpanel.yml file). Also links to the Gitweb interface for browsing repository history.
- [Gitweb](https://docs.cpanel.net/cpanel/files/gitweb/): Explains cPanel's Gitweb interface (accessed via 'History' in Git™ Version Control) for browsing repository contents and history through reports: summary, tree, blob, commit, commitdiff, log, shortlog, history, heads, and tags, plus searching by commit, grep, author, committer, or pickaxe. Gitweb is a third-party tool (not developed by WebPros) so displayed reports vary by repository content.
- [HTML Editor](https://docs.cpanel.net/cpanel/files/html-editor/): Documents the HTML Editor interface, a WYSIWYG (Jodit-based) editor for HTML files accessed from cPanel's File Manager, covering its toolbar tools (save, text formatting, alignment, lists, indent, undo/redo, insert image/video/file/table/link, find and replace, and switching between HTML source and WYSIWYG modes). Notes that JavaScript is not supported, so JS-dependent features may not render as on the live site.
- [Images](https://docs.cpanel.net/cpanel/files/images/): Covers cPanel's Images interface with three tools: Thumbnailer (creates a thumbnails subdirectory with tn_-prefixed smaller versions of all images in a folder), Scaler (resizes an individual image by dimensions or percentage, optionally keeping a backup copy), and Converter (converts image files between PNG, JPG, GIF, BMP, and WEBP formats). Images must first be uploaded via File Manager, Web Disk, FTP Accounts, or Git Version Control. Version 128 adds WEBP as a supported Converter output format.
- [Web Disk](https://docs.cpanel.net/cpanel/files/web-disk/): Covers the cPanel Web Disk interface for creating and managing WebDAV accounts used to remotely manage server files; explains the default main Web Disk account, creating additional accounts (username, domain, password, directory, Read-Write/Read-Only permissions), managing existing accounts, and when to enable Digest Authentication for unencrypted Windows connections.
- [Browsing, Querying, and Migrating Databases](https://docs.cpanel.net/cpanel/meridian/databases/browsing-querying-and-migrating-databases/): A guide to browsing, querying, and migrating databases in cPanel's Meridian theme. Notes that phpMyAdmin (for MySQL or MariaDB databases) and phpPgAdmin (for PostgreSQL databases) are third-party tools, and links to each tool's own documentation for detailed steps, supported file formats, and export options. Explains how to open a database in its admin tool from the Databases hub (Databases hub, then Manage, then the Advanced tab, then Open phpMyAdmin or Open phpPgAdmin), where you can browse tables and run SQL queries. Covers importing an SQL dump file into an existing database, such as when migrating a site or restoring from a backup, and exporting a database as an SQL dump for migration, backup, or handoff to a developer, both by opening the database the same way and then using the admin tool's own Import or Export feature.
- [Creating and Managing Databases](https://docs.cpanel.net/cpanel/meridian/databases/creating-and-managing-databases/): A guide to creating and managing databases in Meridian. Explains how to create a database from the Databases hub: select a database type if the account supports more than one, enter a database name, create the database's first user with a username and password, and set that user's privileges. Notes that Meridian displays the new user's password only once and that PostgreSQL® is only available if the hosting plan and account allow it. Covers adding more users to an existing database from its Users tab, noting that each user can access exactly one database. Explains managing user privileges: for MySQL® and MariaDB®, granting All Privileges, Read Only (SELECT) access, or choosing from a full list of individual privileges (SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER); for PostgreSQL, all-or-nothing access with no individual privileges to choose; and removing privileges with Revoke All Access, which also deletes the user's account. Explains deleting a database (Advanced tab, Danger Zone) and deleting a user (Users tab), including that deleting a database does not delete its users, that deleting a user revokes its database access, and that you can delete several users at once with the bulk Delete action.
- [Connecting Email to a Mail Client or Device](https://docs.cpanel.net/cpanel/meridian/email/connecting-email-to-a-mail-client-or-device/): Explains how a hosting customer using Meridian connects a cPanel email address to a desktop or mobile mail client. Covers reaching the Set Up Mail Client interface through Webmail (Email hub, Manage, Open Webmail), setting up a device automatically with configuration scripts or auto-discovery, emailing setup instructions to a device, and configuring a client manually with Secure SSL/TLS settings (IMAP 993, POP3 995, SMTP 465) or Non-SSL settings (IMAP 143, POP3 110, SMTP 587). Also covers choosing IMAP over POP3 and troubleshooting when the Email hub or Webmail is unavailable.
- [Managing Email Forwarders, Autoresponders, and Filters](https://docs.cpanel.net/cpanel/meridian/email/forwarders-autoresponders-filters/): Documents the Meridian Email hub's per-account Forwarders, Autoresponder, and Filters tools: adding, viewing, and removing forwarders; adding, editing, and deleting autoresponders (message, reply interval, start/stop schedule); and creating email filters with one or more conditions and actions, including reordering and deleting filters.
- [Managing Email Accounts](https://docs.cpanel.net/cpanel/meridian/email/managing-email-accounts/): The Email hub in cPanel's Meridian theme creates, views, and manages email accounts for a cPanel account's domains, including setting passwords and storage quotas, suspending accounts, toggling plus addressing, managing forwarders, autoresponders, and filters, and accessing Webmail.
- [Backing Up and Restoring Account Data](https://docs.cpanel.net/cpanel/meridian/files/backing-up-and-restoring-account-data/): cPanel's Meridian Backups tab generates full account archives, restores files from an existing backup to a chosen directory, and downloads individual components such as databases, email forwarders, or filters, gated behind WHM's Backup Manager feature.
- [File Transfer Accounts](https://docs.cpanel.net/cpanel/meridian/files/file-transfer-accounts/): Covers Meridian's File Transfer Accounts interface in the Files hub for creating and managing FTP and SFTP accounts with scoped directory access; explains the plan-gated ftpaccts feature and signing out and back in to reveal a newly enabled tab, creating an account (username, password with generator, directory path, and an MB quota or Unlimited), the accounts table (Type, Account, Login URL, Directory, Quota, and Actions columns) with its Primary, System, and User account types, editing an account's directory or quota, changing an account's password, deleting an account (which removes only the login and not its files), and retrieving an account's Login URL and connection details to connect with an FTP client.
- [Managing Disk Usage](https://docs.cpanel.net/cpanel/meridian/files/managing-disk-usage/): cPanel's Meridian Disk Usage tab breaks account storage down by category, such as home directory files, databases, email, and website files, and ranks the largest directories so users can free up space, gated behind WHM's Disk Usage Viewer feature.
- [Managing Your Files](https://docs.cpanel.net/cpanel/meridian/files/managing-files/): cPanel's Meridian Files hub's File Manager tab browses, uploads, downloads, organizes, compresses, extracts, and manages permissions for account files in the home directory.
- [Connect to MCP](https://docs.cpanel.net/cpanel/meridian/getting-started/connect-to-mcp/): Meridian's MCP Connection feature links a cPanel account to a WebPros MCP (Model Context Protocol) server so AI tools like Claude Code can automate website deployment and account maintenance. Covers linking a WebPros account from the MCP Connection section in Account Preferences, adding the mcp.json connection configuration to the mcpServers section of ~/.claude.json or .mcp.json, authenticating Claude Code with the /mcp command, and disconnecting by unlinking the WebPros account.
- [Managing Account Settings](https://docs.cpanel.net/cpanel/meridian/getting-started/managing-account-settings/): Covers the Account Preferences interface in cPanel Meridian, including the Change Password section (current password, new password with a strength indicator, and Generate option), the Two-step Verification section (QR code setup with an authenticator app via TOTP), the Change Language section (Language dropdown), the Theme section (switching between the Jupiter and Meridian themes, and the separate light/dark display preferences toggle), the Personalization section (three dropdown questions that help cPanel understand how users use the system), the Contact Information section (Primary Email and Secondary Email fields with password verification), and the Notification Preferences section (toggles for Account, Disk & Quota, Bandwidth, and General events, plus the four AutoSSL Certificate Notification volume options: Disabled, Failures Only, Failures & Warnings, and All Events), and the MCP Connection section (linking a WebPros account to connect Meridian to a WebPros MCP server for AI tools like Claude Code).
- [Navigating Meridian](https://docs.cpanel.net/cpanel/meridian/getting-started/navigating-meridian/): Overview of the Meridian theme for cPanel: the persistent header (cPanel logo, Search/Command Palette, Switch back to Jupiter, Help, Notifications, Display preferences, and user avatar menu), the collapsible sidebar (Websites, Email, Files, and Databases under Manage, Security under Protect, and Performance under Monitor), the Dashboard (Action Required, Suggested Next Actions, Resource Usage, and Account Overview), and the shared hub layout (summary stat cards, tabs, and content area) for the Websites, Email, Files, Databases, Security, and Performance hubs.
- [Using the AI Assistant](https://docs.cpanel.net/cpanel/meridian/getting-started/using-the-ai-assistant/): The AI Assistant is an embedded chat panel in the cPanel Meridian theme for asking questions about your account in plain language. Covers opening the assistant from the Ask AI button, the three kinds of questions it answers (Explain a feature, Guide through a task, and Diagnose issues using account details such as domains, disk quota, email accounts, FTP accounts, databases, and SSL status), and the tasks it can complete on your behalf when your hosting provider enables them, such as creating an email account after you approve an Approval required card. Also covers what it can't do (make changes without your approval, perform actions that can't be undone, fix complex multi-step problems, act as the WHM administrator assistant, write code, or replace your hosting provider's support). No personally identifying information is sent to analytics, and conversations may be logged for quality and support.
- [Welcome to Meridian](https://docs.cpanel.net/cpanel/meridian/getting-started/welcome-to-meridian/): Introduces the Meridian theme for cPanel, a goal-based alternative to Jupiter that organizes features into six hubs (Websites, Email, Files, Databases, Security, and Performance). Covers the Dashboard (Action Required, Suggested Next Actions, and Account Overview), the Command Palette for jumping to any feature by name, the Guided Setup flow for configuring a domain, website, and email in one pass using Sitejet Builder, WordPress, Node.js, or file upload, and switching back to Jupiter from the navigation bar or Account Preferences.
- [Checking Traffic and Resource Usage](https://docs.cpanel.net/cpanel/meridian/performance/checking-traffic-and-resource-usage/): A guide to checking traffic and resource usage for your account in cPanel's Meridian theme. Describes the Bandwidth, Visitors, and (on some servers) Resources cards in the Performance hub, including how often each one refreshes. Covers how to check bandwidth usage account-wide and per website using the By Websites tab, and how to interpret visitor statistics (hits and unique visitors) both account-wide and per domain. Explains how the Bandwidth card's progress bar changes color as usage approaches the plan limit, notes that the Resources card (CPU, memory, I/O rate, and entry processes) only appears on servers that use CloudLinux, and advises contacting your hosting provider for upgrade options when you're approaching a limit.
- [Diagnosing Site Errors](https://docs.cpanel.net/cpanel/meridian/performance/diagnosing-site-errors/): Covers the cPanel Meridian Performance hub's Recent Errors tab: reading and searching the account's error log (up to 300 entries, newest first, limited to Apache application-level errors, with the Errors metric card as an alternate way to open the same tab), and diagnosing the two most common error types found there, 404 Not Found and 500 Internal Server Error; diagnosing a 404 error by identifying whether it came from a bot scan (which you can ignore) or a broken link to real content (update the link or set up a redirect); diagnosing a 500 error by checking the log for .htaccess misconfigurations, then editing the file and reloading the page to confirm the fix.
- [Blocking and Protecting Your Website](https://docs.cpanel.net/cpanel/meridian/security/blocking-and-protecting-your-website/): Covers the traffic-blocking tools on the Protection tab of cPanel's Meridian Security hub (Security >> Protection): blocking and unblocking IP addresses and ranges (IPv4, IPv6, CIDR) under IP Blocker; enabling Hotlink Protection, choosing protected file types, blocking direct requests with no referrer, choosing a 403 or redirect response, and managing allowed referrer URLs under Hotlink Protection; and enabling or disabling the Web Application Firewall (ModSecurity) per domain or for all domains under Web Application Firewall; notes that WAF availability depends on your hosting plan.
- [Managing SSH Keys and API Tokens](https://docs.cpanel.net/cpanel/meridian/security/managing-ssh-keys-and-api-tokens/): Covers the developer-access tools on the Advanced tab of cPanel's Meridian Security hub (Security >> Advanced): managing SSH keys under Terminal Access (SSH) — generating a new key pair with an optional passphrase, importing an existing public key, and deleting a key from the keys table — and creating and revoking API tokens under Developer Access — naming a token, setting an optional expiration date, choosing Full Access or Limited (per-feature) access, copying the one-time token value, and revoking a token from the tokens table; notes that these features may not appear on every account and to contact your hosting provider to enable them.
- [Managing SSL Certificates](https://docs.cpanel.net/cpanel/meridian/security/managing-ssl-certificates/): Covers the SSL certificate features on the SSL Certificates tab of cPanel's Security hub (Security >> SSL Certificates): reading the account-level Security Score gauge and the SSL Status card to understand your domains' certificate health, and the certificate counts (Expired, Expiring Soon, Self-Signed, No Certificate) and per-domain certificate table (Domain, Type, Issuer, Expires, Automatic SSL, HTTPS Redirect); getting a free trusted certificate by running AutoSSL (which typically uses Let's Encrypt and requires a reachable domain with correct DNS) and troubleshooting failures with the AutoSSL error log; manually installing a paid or third-party certificate purchased from a certificate authority through the Install SSL Certificate wizard by supplying the certificate, private key, and CA bundle; and enabling the HTTPS Redirect for a domain to force all visitors onto https:// once a valid certificate is installed.
- [Change Your Website's PHP Version](https://docs.cpanel.net/cpanel/meridian/websites/change-your-websites-php-version/): Explains how to change a website's PHP version in cPanel's Meridian theme: select the domain's PHP version from the table in the Websites hub (which opens the domain's Settings tab) or open the Settings tab directly, then choose an installed PHP version or Inherit (System default) from the PHP Version menu. Also covers confirming a domain's current PHP version from the PHP column in the Websites hub table or from its Overview tab, and notes that the PHP Version menu only applies to domains with their own website folder — parked (alias) domains share their main domain's PHP version, website folder, and SSL certificate instead.
- [Create a Website with Sitejet Builder](https://docs.cpanel.net/cpanel/meridian/websites/create-a-website-with-sitejet-builder/): Explains how to build and publish a website with Sitejet Builder, a drag-and-drop website builder with AI capabilities integrated into the cPanel Meridian theme. Covers launching Sitejet Builder from the Websites hub for a new or existing domain, building a site from Sitejet's template library or the AI Website Generator (including importing content from an existing website), publishing the finished site to your domain, and editing a published site from the Websites hub.
- [Managing DNS Records](https://docs.cpanel.net/cpanel/meridian/websites/managing-dns-records/): A guide to managing DNS (Domain Name System) records for the domains on your account in cPanel's Meridian theme. Explains how to open the DNS tab from the Websites hub (Websites hub, then Manage, then the DNS tab) and how to view, add, edit, and remove DNS records for any domain on your account, with supported record types including A, AAAA, CNAME, MX, TXT, and NS. Notes that you can only manage records for domains on your account and that DNS changes can take several hours to take effect. Includes a table of common record types — A, CNAME, MX, and TXT — that describes what each record does and when to use it, including the AAAA record as the IPv6 equivalent of the A record.
- [Managing Your Domains](https://docs.cpanel.net/cpanel/meridian/websites/managing-your-domains/): Covers the cPanel Meridian Websites hub for managing domains on an account: viewing all domains in the websites table (Website, Features, SSL, and PHP columns), where the primary domain carries the Main Domain tag and addon, subdomain, and alias (parked) domains also appear, with inline row controls to open the site in a new tab, manage SSL, change the PHP version, and open the per-domain detail view via Manage; adding a domain or subdomain through the Add Website Setup wizard (choosing to use the primary domain, add another domain if the plan allows, or create a subdomain, then a public-registry check warning, and a choice to build with Sitejet or Custom Code); managing an individual domain from its detail view, organized into Overview (website folder/document root, PHP version, SSL certificate and expiry, IP address, and domain type), SSL, Email, DNS (the Zone Editor for A, AAAA, CNAME, MX, TXT, NS, and other records), Files, Backups, Aliases, and Settings (301 permanent or 302 temporary redirects) tabs; and adding an alias domain that points another domain name at an existing website and shares the parent domain's content, noting that an alias was called a Parked Domain in the Jupiter interface.
- [Redirecting a Domain](https://docs.cpanel.net/cpanel/meridian/websites/redirecting-a-domain/): A guide to redirecting a domain in cPanel's Meridian theme, where a redirect sends visitors from one domain to another. Explains how to open the redirect settings from the Websites hub (Websites hub, then Manage, then the Settings tab) and describes when to use a redirect — when you have changed where your content lives but want old links, bookmarks, and search rankings to keep working, such as forwarding a retired domain to a new site. Provides the steps to add a redirect (click Add Redirect, enter the domain to redirect to, and click Save) and to remove a redirect (click Delete).
- [Analog Stats](https://docs.cpanel.net/cpanel/metrics/analog-stats/): Explains the cPanel Analog Stats interface (version 82), which displays monthly website traffic statistics generated by the Analog software; covers viewing a domain's stats by clicking View and then selecting a specific month.
- [Awstats](https://docs.cpanel.net/cpanel/metrics/awstats/): Explains the cPanel Awstats interface (version 82), which displays AWStats traffic statistics for a domain including monthly, daily, and hourly averages, referring links, HTTP codes, operating systems, browsers, and visitor locales; notes that hosting providers customize AWStats configuration via WHM's Statistics Software Configuration interface.
- [Bandwidth](https://docs.cpanel.net/cpanel/metrics/bandwidth/): Describes the cPanel Bandwidth interface (version 84), which graphs HTTP, POP3, IMAP, FTP, SMTP, and total bandwidth usage over the past 24 hours, week, and year, plus monthly pie charts and a Bandwidth Transfer Detail drill-down view; also lists activity, such as file manager transfers, incoming mail, and DNS, excluded from bandwidth calculations. Only appears if the hosting provider's server profile enables it.
- [CPU and Concurrent Connection Usage](https://docs.cpanel.net/cpanel/metrics/cpu-and-concurrent-connection-usage/): Covers the cPanel CPU and Concurrent Connection Usage interface (version 82) for viewing and monitoring account resource usage; available only on servers running CloudLinux.
- [Errors](https://docs.cpanel.net/cpanel/metrics/errors/): Describes the cPanel Errors interface (version 102), which displays up to 300 of the most recent entries from the web server's error logs, drawn from Apache's /var/log/apache2/ file including suexec_log, in reverse chronological order; notes that with NGINX with Reverse Proxy it only shows Apache-logged web traffic errors, and log verbosity is controlled by the system administrator.
- [Metrics Editor](https://docs.cpanel.net/cpanel/metrics/metrics-editor/): Explains the cPanel Metrics Editor interface (version 82) for selecting which traffic statistics programs (Webalizer, Analog Stats, AWStats) process log files for each domain on the account; hosting providers control which programs are available via WHM's Statistics Software Configuration interface.
- [Raw Access](https://docs.cpanel.net/cpanel/metrics/raw-access/): Describes the cPanel Raw Access interface (version 126, latest) for downloading compressed (.gz) raw access logs covering Apache and NGINX website visitor traffic; covers configuring automatic log archiving to /home/username/logs, end-of-month deletion, a custom retention period for archived logs, downloading current and archived logs per domain, and deleting archived logs. Does not show NGINX ModSecurity logs, only Apache ModSecurity 2.
- [Site Quality Monitoring](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/): Describes the cPanel Site Quality Monitoring feature for tracking website SEO, performance, availability, and security issues via its Crawling, Monitoring, Settings, Extras, and Website Summary tabs; covers requirements (cPanel & WHM 110 or 116+, hosting provider enablement, subscription sign-up), color-coded scoring, adding or upgrading monitored websites and subscriptions, and managing user settings.
- [Site Quality Monitoring — Crawling](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/site-quality-monitoring-crawling/): Explains the Site Quality Monitoring Crawling tab's three manual crawl checks (Dead links, Missing images and files, Oversize files), how to start or stop a crawl, the Past Checks table columns (Date, Found Pages, Searched Pages, Status), and the Result report's Found Pages and Examined Pages sections.
- [Site Quality Monitoring — Extras](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/site-quality-monitoring-extras/): Covers the Site Quality Monitoring Extras tab's Integrations section and its subscription-based extensions, with setup steps for configuring Slack alerts, Microsoft Teams alerts, IETF Health Check monitoring, and WordPress/WooCommerce monitoring.
- [Site Quality Monitoring — Monitoring](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/site-quality-monitoring-monitoring/): Documents the Site Quality Monitoring Monitoring tab's automated check categories: Availability (Uptime), Performance (Browser load time, Server load time, Page size, Lighthouse performance rating), SEO (Lighthouse SEO rating, Sitemap), Content (dead links and broken elements), Technical (JavaScript errors), and Security (SSL/TLS certificates, insecure elements, cookie analysis), including each category's configurable thresholds and High/Moderate/Low error-sensitivity settings.
- [Site Quality Monitoring — Settings](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/site-quality-monitoring-settings/): Details the Site Quality Monitoring Settings tab: the Monitored website manager (root domain, server location, deleting a monitored website), the Monitored URL manager (adding, editing, and deleting monitored URLs with Name, URL, and Page type), and Configure alert emails (adding/editing alert email addresses with critical/non-critical notification frequency and language).
- [Site Quality Monitoring — Website Summary](https://docs.cpanel.net/cpanel/metrics/site-quality-monitoring/site-quality-monitoring-website-summary/): Explains the Site Quality Monitoring Website Summary tab's three sections: Rating (overall scores and health bars per check category), Current findings (unresolved errors with Page, Section, Found, and Description columns), and Past findings (errors resolved within the last 48 hours).
- [Visitors](https://docs.cpanel.net/cpanel/metrics/visitors/): Describes cPanel's Visitors interface (cPanel >> Home >> Metrics >> Visitors), which reads Apache or NGINX domain access logs to show recent visitor details (IP, URL, Time, Size, Referring URL, User Agent) with optional Status, Method, and Protocol columns, plus a search box for filtering log entries.
- [Webalizer FTP](https://docs.cpanel.net/cpanel/metrics/webalizer-ftp/): Describes cPanel's Webalizer FTP interface (cPanel >> Home >> Metrics >> Webalizer FTP), available only when the hosting provider enables the Webalizer feature in WHM's Feature Manager, showing per-domain FTP traffic statistics with monthly drill-downs for daily/hourly stats, HTTP codes, operating systems, browsers, and countries of origin.
- [Webalizer](https://docs.cpanel.net/cpanel/metrics/webalizer/): Describes cPanel's Webalizer interface (cPanel >> Home >> Metrics >> Webalizer), which displays traffic statistics from the Webalizer program split into SSL and non-SSL domain entries, with monthly drill-down views showing daily/hourly stats, referring links, HTTP codes, operating systems, browsers, and countries of origin.
- [Account Preferences](https://docs.cpanel.net/cpanel/preferences/account-preferences/): Covers cPanel's Account Preferences interface (version 130, latest): Consent and Privacy (Interface Analytics opt-in/out), Contact Information and Contact Preferences (primary/secondary email addresses and account notification toggles), AutoSSL Notifications levels, System Notifications screen-location settings, Change Language, and Change Password with the Password Generator.
- [Change Language](https://docs.cpanel.net/cpanel/preferences/change-language/): Describes cPanel's Change Language interface (version 118, latest), deprecated as of cPanel & WHM version 128 in favor of the Account Preferences interface; explains the cookie-based language-selection setting and lists the supported languages (English, German, Indonesian, Japanese, Portuguese, Russian, Spanish, Turkish).
- [Contact Information](https://docs.cpanel.net/cpanel/preferences/contact-information/): Describes cPanel's standalone Contact Information interface (version 106), merged into the Account Preferences interface as of version 130; covers setting primary/secondary contact email addresses, Contact Preferences notification toggles (password changes, disk quota, bandwidth limit, SSL certificate expiry, account logins, external account links), and AutoSSL Notifications levels.
- [Manage Team — Audit Log](https://docs.cpanel.net/cpanel/preferences/manage-team-audit-log/): Documents the Audit Log interface within cPanel's Manage Team feature (cPanel >> Home >> Preferences >> Manage Team), which lets team owners track team user API calls made via the cPanel UAPI. Covers the search text box and the audit log table columns (Timestamp, Called By, API Version, Call, Origin), and notes that WHM's Tweak Settings >> Enable cPanel API Log setting must be enabled to view entries.
- [Manage Team — Create a Team User](https://docs.cpanel.net/cpanel/preferences/manage-team-create-a-team-user/): Documents the Create a Team User interface (cPanel >> Home >> Preferences >> Manage Team >> Create Team User), where a team owner sets a username, password, contact email, assigns roles and services (Email, FTP, Web Disk), acknowledges a security risk warning, adds optional notes, and can set an account expiration date. Notes that team users cannot use email services or edit DNS for temporary domains, and that the system creates a corresponding virtual MySQL user account (team-owner_team-user) whose status mirrors the team user's status.
- [Manage Team — Edit a Team User](https://docs.cpanel.net/cpanel/preferences/manage-team-edit-a-team-user/): Documents the Edit a Team User interface (opened via Edit User in the Manage Team List Team table), where a team owner can update an existing team user's username, password, contact email, roles, services (Email, FTP, Web Disk), notes, and account expiration date (optionally notifying the user), then click Save to apply the changes. Notes that team users cannot use email services or edit DNS for temporary domains.
- [Manage Team](https://docs.cpanel.net/cpanel/preferences/manage-team/): Documents the cPanel >> Home >> Preferences >> Manage Team interface, where a team owner creates and manages virtual team user accounts, assigns roles (Administrator, Database, Email, Web) and services (Email, FTP, Web Disk) with quotas, and reviews the account-quota status box. Notes that team users cannot use email services or edit DNS for temporary domains regardless of role. Also covers team user self-service preferences (password, language, contact info), the List Team table, suspend/delete actions, and the API-call Audit Log. Available only on Premier, Autoscale, and development cPanel licenses.
- [Password & Security](https://docs.cpanel.net/cpanel/preferences/password-and-security/): Documents cPanel's Password & Security interface (cPanel >> Home >> Preferences), covering how cPanel, team owner, and team user accounts change their password, use the Password Generator (with configurable length and character-type requirements, 18-character limit for generated passwords), and link or unlink External Authentication credentials (e.g., cPanelID, OpenID Connect providers) for logging in to cPanel and Webmail.
- [User Manager](https://docs.cpanel.net/cpanel/preferences/user-manager/): Procedure for using cPanel's User Manager interface (version 132) to link existing email/FTP/Web Disk service accounts into Subaccounts, add a Subaccount (name, username, domain, contact email, password method, and Email/FTP/Web Disk service settings), and edit or delete existing Subaccounts; Subaccounts can only access FTP, Web Disk, and Webmail, not cPanel itself, and email services are unavailable on temporary domains.
- [Hotlink Protection](https://docs.cpanel.net/cpanel/security/hotlink-protection/): Describes cPanel's Hotlink Protection interface (version 82), which stops other sites from embedding and serving your site's files using your bandwidth; covers enabling protection, allowing specific referrer URLs, blocking direct access by file extension, allowing direct requests, redirecting blocked requests, and disabling protection.
- [IP Blocker](https://docs.cpanel.net/cpanel/security/ip-blocker/): Describes cPanel's IP Blocker interface (version 82) for denying website access to specific IP addresses, ranges, implied ranges, CIDR blocks, or FQDNs via the .htaccess file; covers adding blocks, viewing currently-blocked CIDR ranges, and unblocking addresses. Only blocks the website, not other services like Webmail.
- [Leech Protection](https://docs.cpanel.net/cpanel/security/leech-protection/): Describes cPanel's Leech Protection interface (version 82), which detects excessive logins to password-protected directories within a two-hour window and can redirect or disable compromised accounts; covers enabling protection on a directory, setting the login threshold, email alerts, managing per-directory users via Directory Privacy, and disabling protection. Not supported on LiteSpeed.
- [Manage API Tokens in cPanel](https://docs.cpanel.net/cpanel/security/manage-api-tokens-in-cpanel/): Describes cPanel's Manage API Tokens interface (version 82, experimental) for creating, listing, renaming, and revoking API tokens used to authenticate UAPI and cPanel API 2 calls without logging into cPanel; covers setting a token name, optional expiration date, viewing the tokens table, and renaming or revoking a token.
- [ModSecurity®](https://docs.cpanel.net/cpanel/security/modsecurity/): Describes cPanel's ModSecurity® interface (version 82) for enabling or disabling the ModSecurity web application firewall for all domains or per individual domain; requires the mod_security2 Apache module and ModSecurity Domain Manager feature to be enabled by the hosting provider.
- [Security Policy](https://docs.cpanel.net/cpanel/security/security-policy/): Describes cPanel's Security Policy interface (version 82) for managing account security questions/answers and a list of verified access IP addresses that skip security-question verification at login; covers updating or resetting security questions and adding/removing access IPs (with wildcard support in the last octet).
- [SSH Access](https://docs.cpanel.net/cpanel/security/ssh-access/): Describes cPanel's SSH Access interface (version 82), which provides instructions for connecting to the server via SSH using PuTTY (password or private key) or a macOS/Linux terminal (password or SSH key), plus generating, importing, viewing, downloading, authorizing, deauthorizing, and deleting SSH key pairs.
- [SSL/TLS Certificates](https://docs.cpanel.net/cpanel/security/ssl-tls-certificates/): Describes cPanel's unified SSL/TLS Certificates interface (version 134), a tabbed view combining the SSL/TLS, SSL/TLS Status, and SSL/TLS Wizard interfaces; covers enabling/disabling the unified view via the unified_interface setting in /var/cpanel/panel.ini (requires the SSL Host Installer feature) and summarizes the Wizard, Status, Certificates, Keys, Requests, Installation, and Settings tabs.
- [SSL/TLS Status](https://docs.cpanel.net/cpanel/security/ssl-tls-status/): cPanel's SSL/TLS Status interface (cPanel >> Home >> Security >> SSL/TLS Status, version 134, latest) lists a user's domains with their certificate type (Unsecured, Self-Signed, AutoSSL DV, DV, OV, EV) and status (Active, Expired, Expiring Soon, Unsecured, AutoSSL problems), lets users filter by domain type or certificate/AutoSSL status, include or exclude domains from AutoSSL runs, force an AutoSSL run, and link to the SSL/TLS Wizard to purchase or upgrade a certificate. Since this version, the interface can appear standalone or as a tab within the unified SSL/TLS Certificates interface, controlled by the unified_interface setting in /var/cpanel/panel.ini.
- [SSL/TLS Wizard](https://docs.cpanel.net/cpanel/security/ssl-tls-wizard/): cPanel's SSL/TLS Wizard interface (cPanel >> Home >> Security >> SSL/TLS Wizard, version 134, latest) lets users buy and automatically install SSL certificates through the cPanel Store using a cPanelID (or, if the hosting provider enables AutoSSL with Let's Encrypt, without one). It covers the Simple purchase workflow (all domains at once, including wildcard certificates) and the Advanced workflow (certificates grouped per website/virtual host, no wildcards), domain selection and DCV checks, OV/EV organization-information steps, checkout, and tracking Pending Certificates with CSR, DCV, Free DV Up, EV Click-Through, OV Callback, and Validation status messages. Since this version, the interface can appear standalone or as a tab within the unified SSL/TLS Certificates interface, controlled by the unified_interface setting in /var/cpanel/panel.ini.
- [SSL/TLS](https://docs.cpanel.net/cpanel/security/ssl-tls/): Describes cPanel's SSL/TLS interface (version 134) for managing SSL/TLS certificates, keys, and signing requests: setting a default SSL/TLS key type, generating/uploading/editing/deleting private keys (KEY), generating/viewing/deleting certificate signing requests (CSR), generating/uploading/editing/deleting certificates (CRT), and installing/updating/uninstalling SSL certificates on domains. Supports TLS 1.2 and 1.3; can appear standalone or as a tab within the unified SSL/TLS Certificates interface, controlled by the unified_interface setting in /var/cpanel/panel.ini.
- [Two-Factor Authentication for cPanel](https://docs.cpanel.net/cpanel/security/two-factor-authentication-for-cpanel/): cPanel's Two-Factor Authentication interface (cPanel >> Home >> Security >> Two-Factor Authentication, version 134, latest) lets users set up, reconfigure, or disable 2FA for cPanel logins using a smartphone authenticator app (Google Authenticator on Android, Duo Mobile on iOS) via QR code or manual key entry plus a six-digit security code. Covers cross-window logout behavior on setup/reconfigure, recovering access via the hosting provider if the 2FA device is lost, and how the hosting provider's Security Policies setting for API requests affects whether password-based API calls can bypass 2FA. Requires the hosting provider to enable 2FA in WHM's Two-Factor Authentication interface.
- [Application Manager](https://docs.cpanel.net/cpanel/software/application-manager/): cPanel's Application Manager interface (cPanel >> Home >> Software >> Application Manager, version 136, latest) deploys and manages Node.js, Python, and Ruby applications via the Phusion Passenger application server on Apache/NGINX. Covers registering an application (name, deployment domain, base URL, application path, Development/Production environment), editing or unregistering it, adding environment variables, and log file locations. Requires the hosting provider to enable the Application Manager feature in WHM's Feature Manager and install an OS-specific Apache Passenger module (ea-apache24-mod-passenger for Ubuntu/AlmaLinux 9 or later/Rocky Linux 9, ea-ruby27-mod_passenger for AlmaLinux 8/Rocky Linux 8). By this version the RubyGems interface has been removed, so the compatibility warning now only calls out the Module Installers' Ruby Gem installer as incompatible.
- [MultiPHP INI Editor for cPanel](https://docs.cpanel.net/cpanel/software/multiphp-ini-editor-for-cpanel/): The MultiPHP INI Editor for cPanel interface configures php.ini directives per domain or account-wide (Home Directory) using two modes: Basic Mode for toggling known directives, and Editor Mode for directly editing the raw php.ini text. Changes propagate to php.ini, .user.ini, and .htaccess files as supported, and the doc covers DSO handler major-version reset behavior and LSAPI .htaccess sections.
- [MultiPHP Manager for cPanel](https://docs.cpanel.net/cpanel/software/multiphp-manager-for-cpanel/): The MultiPHP Manager for cPanel interface (cPanel >> Home >> Software >> MultiPHP Manager) lists non-parked domains with their current PHP version, inheritance status, and PHP-FPM enabled/disabled state, and lets a user select domains, choose a PHP version (or inherit), enable PHP-FPM, and click Apply to change a domain's PHP version. It also notes that FPM is disabled after a primary domain rename and must be re-enabled by the hosting provider.
- [Optimize Website](https://docs.cpanel.net/cpanel/software/optimize-website/): The Optimize Website interface (cPanel >> Home >> Software) configures Apache's mod_deflate compression of website content by choosing Disabled, Compress All Content, or Compress the specified MIME types (entering a space-separated MIME type list) and clicking Update Settings; settings save to a .htaccess file in the home directory, and mod_deflate must be enabled by the server administrator.
- [Perl Modules](https://docs.cpanel.net/cpanel/software/perl-modules/): The Perl Modules interface (cPanel >> Home >> Software) searches for and installs Perl modules from the CPAN repository, showing the Module Include Path and the code to include in Perl scripts. It also lists Installed Modules with Update, Reinstall, Uninstall, and Show Documentation actions, and lets a user view system-installed Perl modules.
- [PHP PEAR Packages](https://docs.cpanel.net/cpanel/software/php-pear-packages/): The PHP PEAR Packages interface (cPanel >> Home >> Software) searches for, installs, updates, reinstalls, and uninstalls PHP PEAR packages, showing the Module Include Path, required PHP include code, and a table of Installed PEAR packages; pre-installed system modules cannot be removed.
- [Ruby on Rails](https://docs.cpanel.net/cpanel/software/ruby-on-rails/): The Ruby on Rails interface (cPanel >> Home >> Software, removed in cPanel & WHM version 136) creates and deploys Ruby on Rails applications registered via Application Manager, assigns each application an incrementing port (for example 12001) since Rails does not use port 80, and lets a user create/edit/delete a rewrite to map a domain, subdomain, addon domain, or page to that port; resellers can limit the number of Rails applications per account in WHM's Modify an Account interface.
- [RubyGems](https://docs.cpanel.net/cpanel/software/rubygems/): cPanel's RubyGems interface (cPanel >> Home >> Software >> RubyGems) is a Ruby package manager UI that lists installed Ruby Gems with their module name and version, and lets users update, reinstall, uninstall, or view documentation for each gem. Requires the hosting provider to install Ruby via EasyApache 4 packages (ea-apache24-mod_env, ea-ruby24-ruby-devel). This interface was removed in cPanel & WHM version 136; use the Application Manager interface for Ruby application deployment instead.
- [Site Software](https://docs.cpanel.net/cpanel/software/site-software/): The Site Software interface (cPanel >> Home >> Software, removed in cPanel & WHM version 126) manages cPAddon software packages (for example WordPress) via Install, Manage, Upgrade, and Uninstall tabs, plus a More menu for Details, License terms, and Security information; it also configures cPAddon update email notifications, and hosting providers control which cPAddons are available.
- [Getting Started in cPanel](https://docs.cpanel.net/cpanel/the-cpanel-interface/getting-started-in-cpanel/): Getting-started guide for cPanel account users: how to log in at https://<ip-or-domain>:2083 with username and password, an overview of the first-login Onboarding Assistant, how to create a website using Sitejet Builder, WP Toolkit, or Site Publisher (removed in version 134), how to upload files via File Manager, and how to create email accounts via Email Accounts.
- [Server Information for cPanel](https://docs.cpanel.net/cpanel/the-cpanel-interface/server-information-for-cpanel/): The Server Information interface (cPanel >> Home >> Server Information) displays a Server Information table (hosting package, server name, cPanel/Apache/MySQL/PostgreSQL versions, architecture, operating system, shared/dedicated/local IP addresses, Perl paths and version, kernel version) and a Service Information table showing each server service's status (up/down, load, or memory percentage) with a status icon.
- [The cPanel Interface](https://docs.cpanel.net/cpanel/the-cpanel-interface/the-cpanel-interface/): cPanel & WHM version 132 reference for the cPanel Tools home page: the navigation bar (search, account menu, notifications), the Main Menu (Social Media Management, Sitejet Builder, WP Toolkit, Manage Team, Search Engine Optimization, Site Quality Monitoring), the Features list, the General Information panel (current user, primary domain and certificate status, shared/dedicated IP, home directory, last login IP, Site Quality Monitoring banner, optional User Analytics ID, theme, NGINX caching toggle, link to Server Information), and the Statistics panel listing account usage stats such as bandwidth, disk usage, addon domains, subdomains, email accounts, databases, and CloudLinux CPU/memory/entry-process usage. Compared to version 126, the User Analytics ID field now only appears if enabled by the hosting provider.

## WHM

- [Change Site's IP Address](https://docs.cpanel.net/whm/account-functions/change-site-ip-address/): Describes WHM's Change Site's IP Address interface, which lets root-level users or authorized resellers reassign an account's IP address (for example, to host an SSL-secured website) by selecting an account and choosing a new IP address that has already been added to the server.
- [Create a New Account](https://docs.cpanel.net/whm/account-functions/create-a-new-account/): This interface allows you to create new cPanel or WHM accounts.
- [Email All Users](https://docs.cpanel.net/whm/account-functions/email-all-users/): The Email All Users interface (WHM >> Home >> Account Functions >> Email All Users) sends a single email with a specified sender name, sender email, subject, and message body to every cPanel user on the server, with an option to also include resellers' customers; useful for maintenance notices or security announcements.
- [Force Password Change](https://docs.cpanel.net/whm/account-functions/force-password-change/): The Force Password Change interface (WHM >> Home >> Account Functions >> Force Password Change) lets administrators select one or more cPanel users and require them to set a new password the next time they log in to cPanel; affected users cannot use full cPanel functionality until they change their password.
- [Limit Bandwidth Usage](https://docs.cpanel.net/whm/account-functions/limit-bandwidth-usage/): The Limit Bandwidth Usage interface (WHM >> Home >> Account Functions >> Limit Bandwidth Usage) sets or changes an account's monthly data transfer (bandwidth) limit, distinct from account suspension; the server checks bandwidth limits once daily between midnight and 6:00 am, so changes may not take effect immediately.
- [Manage Account Suspension](https://docs.cpanel.net/whm/account-functions/manage-account-suspension/): The Manage Account Suspension interface (WHM >> Home >> Account Functions >> Manage Account Suspension) suspends or unsuspends cPanel accounts, optionally with a reason and a setting to prevent resellers from unsuspending; suspension redirects the account's web traffic, invalidates the account's password hash, and does not suspend Amazon RDS remote databases.
- [Manage Demo Mode](https://docs.cpanel.net/whm/account-functions/manage-demo-mode/): The Manage Demo Mode interface (WHM >> Home >> Account Functions >> Manage Demo Mode) enables or disables demo mode for an existing cPanel account, restricting the account's ability to alter files and folders while the account still appears fully functional; useful as a sales tool for prospective clients. It applies only to cPanel accounts, not WHM accounts.
- [Manage Shell Access](https://docs.cpanel.net/whm/account-functions/manage-shell-access/): The Manage Shell Access interface (WHM >> Home >> Account Functions >> Manage Shell Access) sets each account's or all accounts' command-line access level to Normal Shell, Jailed Shell, or Disabled Shell; jailed shell restricts potentially harmful commands, and disabling shell can be paired with setting /bin/false to also block SFTP.
- [Modify an Account](https://docs.cpanel.net/whm/account-functions/modify-an-account/): WHM's Modify an Account interface for editing an existing cPanel account's basic information (primary domain, username, database renaming, account owner, locale, theme), resource limits (disk quota, bandwidth, email/FTP/database/subdomain limits), account enhancements, privileges (reseller, CGI, shell access), DNS settings (DKIM, SPF, and DMARC), linked server node mail routing, and package extensions. Also supports replacing a temporary domain with a registered domain, which grants the account full email and DNS editing privileges; renaming an account's username now also updates the error_log PHP directive to the new home directory path. Saving changes that conflict with the account's assigned package triggers the Package Conflict Resolution dialog to reconcile package settings.
- [Password Modification](https://docs.cpanel.net/whm/account-functions/password-modification/): WHM's Password Modification interface lets administrators set a new password for a reseller or cPanel account without knowing the original password, useful when a user loses, forgets, or compromises their password. Also supports enabling Digest Authentication for Web Disk access over unencrypted connections.
- [Quota Modification](https://docs.cpanel.net/whm/account-functions/quota-modification/): WHM's Quota Modification interface lets administrators set or change a cPanel account's disk space quota in megabytes, or grant unlimited disk space. Quotas do not limit MySQL or PostgreSQL database growth, and the interface includes guidance on rebuilding quota files, XFS filesystem quirks after disabling/reenabling quotas, and CloudLinux update impacts.
- [Raw Apache Log Download](https://docs.cpanel.net/whm/account-functions/raw-apache-log-download/): WHM's Raw Apache Log Download interface lets administrators download a domain's raw Apache access log as a compressed plain-text file listing every visitor connection made to that domain.
- [Raw FTP Log Download](https://docs.cpanel.net/whm/account-functions/raw-ftp-log-download/): WHM's Raw FTP Log Download interface lets administrators download a domain's raw FTP server access log as a compressed plain-text file listing visitor connections and the files they uploaded or downloaded. Only available when FTP services are enabled on the server.
- [Raw NGINX® Log Download](https://docs.cpanel.net/whm/account-functions/raw-nginx-log-download/): WHM interface (Account Functions) that lists a server's domains and lets an administrator download a selected domain's raw NGINX access log as a compressed .gz file for viewing in a plain text reader.
- [Rearrange an Account](https://docs.cpanel.net/whm/account-functions/rearrange-an-account/): WHM interface (Account Functions) that moves a cPanel account to a different home directory or hard drive on the server, useful when a disk runs low on space; hardcoded paths to the old location must be updated manually.
- [Reset Account Bandwidth Limit](https://docs.cpanel.net/whm/account-functions/reset-account-bandwidth-limit/): WHM interface (Account Functions) listing only accounts whose bandwidth limit differs from their package default, with a one-click action to reset each account's limit back to that package default; it cannot set a custom bandwidth value.
- [Skeleton Directory](https://docs.cpanel.net/whm/account-functions/skeleton-directory/): WHM interface (Account Functions) that shows the filesystem paths (e.g. /root/cpanel3-skel/public_html and public_ftp) used as skeleton directories to pre-populate every new account's public_html and public_ftp folders; removed as a UI in cPanel & WHM 116 but the underlying directories can still be created and used manually.
- [Terminate Accounts](https://docs.cpanel.net/whm/account-functions/terminate-accounts/): WHM interface (Account Functions) for permanently deleting one or many cPanel accounts and their data from the server in a single operation, with an option to retain each terminated domain's DNS zone; termination is irreversible and backups must be removed or relocated manually.
- [Unsuspend Bandwidth Exceeders](https://docs.cpanel.net/whm/account-functions/unsuspend-bandwidth-exceeders/): WHM interface (Account Functions) with a single Proceed action that unsuspends every account currently suspended for exceeding its bandwidth quota; accounts stay unsuspended only until the next scheduled bandwidth check.
- [Upgrade/Downgrade an Account](https://docs.cpanel.net/whm/account-functions/upgrade-downgrade-an-account/): WHM interface (Account Functions) for changing which hosting package is assigned to a cPanel account (upgrade or downgrade a plan); it does not change the account's IP address.
- [Web Log Retention](https://docs.cpanel.net/whm/account-functions/web-log-retention/): WHM interface (Account Functions) that lists every cPanel account's web server log retention setting (custom period in days, or the server's default), with a link to cPanel's Raw Access interface to manage an individual account's setting and to WHM Tweak Settings to change the server default.
- [Web Template Editor](https://docs.cpanel.net/whm/account-functions/web-template-editor/): WHM interface (Account Functions) for creating and editing per-account placeholder web page templates (default page, account moved, connection/firewall problem, and account suspended) shown to visitors when a domain is unconfigured, misdirected, moved, blocked, or suspended.
- [List Accounts](https://docs.cpanel.net/whm/account-information/list-accounts/): WHM interface (Account Information) listing all server accounts with search and filter (by suspension status or upgrade opportunity) and per-account actions including change password, change contact email, suspend/unsuspend, change IP address, change disk partition, change quota, change package, and modify account; also supports CSV export.
- [List Parked Domains](https://docs.cpanel.net/whm/account-information/list-parked-domains/): WHM interface (Account Information) listing the server's parked domains (aliases), showing each parked domain's primary domain and owning user, with actions to unpark a domain or enable it to accept email.
- [List Subdomains](https://docs.cpanel.net/whm/account-information/list-subdomains/): WHM interface (Account Information) listing all subdomains on the server with their parent domain, owning user, and any associated addon or parked domain; supports searching and sorting, and unparking an addon/parked domain.
- [List Suspended Accounts](https://docs.cpanel.net/whm/account-information/list-suspended-accounts/): WHM interface (Account Information) listing suspended users and domains with suspension date, reason, owning reseller, and lock status, with actions to unsuspend or terminate each account.
- [Show Accounts Over Quota](https://docs.cpanel.net/whm/account-information/show-accounts-over-quota/): WHM interface (Account Information) listing accounts that exceed their disk quota, showing space used versus quota, with a control to raise or remove (set unlimited) the disk quota for any listed account.
- [View Bandwidth Usage](https://docs.cpanel.net/whm/account-information/view-bandwidth-usage/): WHM interface (Account Information) showing monthly bandwidth consumption per account/domain across HTTP, FTP, SMTP, and POP3/IMAP traffic (including parked domain bandwidth), with month navigation, per-reseller filtering, unit display toggle, and a link to edit an account's bandwidth limit.
- [Backup Configuration](https://docs.cpanel.net/whm/backup/backup-configuration/): WHM interface (Backup) for configuring scheduled server backups: enable/disable backups, choose compressed/uncompressed/incremental backup type, set daily/weekly/monthly scheduling and retention, select what to back up (accounts, suspended accounts, access logs, bandwidth data, system files, SQL databases), configure the local backup/staging directory, and add remote additional destinations (local directory, Amazon S3, Backblaze B2, custom script, FTP, Google Drive, Rsync, S3-compatible, SFTP, WebDAV) with a validation results view.
- [Backup Restoration](https://docs.cpanel.net/whm/backup/backup-restoration/): WHM interface (Backup >> Backup Restoration) for restoring individual cPanel accounts from local or remote FTP backups, selectable by account or by date, with options to restore subdomains, mail configuration, MySQL databases, and dedicated IP assignment.
- [Backup System Migration](https://docs.cpanel.net/whm/backup/backup-system-migration/): WHM interface (Backup >> Backup System Migration) that converts and migrates legacy cPanel backup configuration files to the current Backup system, preserving settings while enabling multiple retention points for incremental backups.
- [Backup User Selection](https://docs.cpanel.net/whm/backup/backup-user-selection/): WHM interface (Backup >> Backup User Selection) for enabling or disabling scheduled account backups per cPanel user, including legacy backup exclusion, with an option to toggle all accounts at once.
- [File and Directory Restoration for WHM](https://docs.cpanel.net/whm/backup/file-and-directory-restoration-for-whm/): WHM interface (Backup >> File and Directory Restoration) for restoring individual files and directories from local backups of cPanel account users, browsable by path, excluding .cpanel and mail directories which require a full account restoration.
- [Configuration Cluster](https://docs.cpanel.net/whm/clusters/configuration-cluster/): WHM interface (Clusters >> Configuration Cluster) for linking a master server to secondary servers so that Update Preferences settings on the master propagate to all cluster members, authenticated via API token or (deprecated) remote access key.
- [DNS Cluster](https://docs.cpanel.net/whm/clusters/dns-cluster/): WHM interface (Clusters >> DNS Cluster) for configuring a cluster of nameservers that share DNS records, including adding or removing servers, setting DNS roles (Standalone, Synchronize, Write-only), configuring failure thresholds, and DNSSEC/PowerDNS requirements.
- [Remote Access Key](https://docs.cpanel.net/whm/clusters/remote-access-key/): Deprecated WHM interface (Clusters >> Remote Access Key) for generating an access hash used by account-creation scripts, billing software integrations, and DNS/configuration cluster authentication; superseded by API Tokens.
- [Change Log](https://docs.cpanel.net/whm/cpanel/change-log/): WHM interface (cPanel >> Change Log) that redirects to the cPanel & WHM Change Logs documentation listing version release notes.
- [Customization](https://docs.cpanel.net/whm/cpanel/customization/): WHM interface (cPanel >> Customization) for branding the cPanel and Webmail interfaces, including custom logos, Main Menu colors, favicon, footer Documentation/Help links, and public contact info shown on default and suspended website pages.
- [Install cPAddons Site Software](https://docs.cpanel.net/whm/cpanel/install-cpaddons-site-software/): WHM interface (cPanel >> Install cPAddons Site Software), removed in cPanel & WHM version 126 and unavailable on Ubuntu, for installing and enabling cPAddon applications (e.g., WordPress via package manager) and adding or removing third-party cPAddon vendor sources.
- [Manage cPAddons Site Software](https://docs.cpanel.net/whm/cpanel/manage-cpaddons-site-software/): WHM interface (cPanel >> Manage cPAddons Site Software), removed in cPanel & WHM version 126 and unavailable on Ubuntu, for upgrading or uninstalling individual per-user cPAddon installations, viewing outdated or orphaned installs, and approving pending moderation requests.
- [Manage Plugins](https://docs.cpanel.net/whm/cpanel/manage-plugins/): WHM interface (cPanel >> Manage Plugins) for installing and uninstalling third-party WHM plugins that add server functionality; not available on cPanel DNSOnly servers.
- [Modify cPanel & WHM News](https://docs.cpanel.net/whm/cpanel/modify-cpanel-whm-news/): WHM interface (cPanel >> Modify cPanel & WHM News) for setting custom HTML news messages shown to all cPanel users, subordinate reseller WHM accounts, non-owned accounts, and owned accounts.
- [Reset a Mailman Password](https://docs.cpanel.net/whm/cpanel/reset-a-mailman-password/): WHM interface (cPanel >> Reset a Mailman Password) for resetting the password of any Mailman mailing list on the server, including the internal mailman list, without needing the old password.
- [Upgrade to Latest Version](https://docs.cpanel.net/whm/cpanel/upgrade-to-latest-version/): WHM interface (cPanel >> Upgrade to Latest Version) that upgrades cPanel & WHM to the latest build available on the server's configured Release Tier (e.g., CURRENT), with an option to force reinstallation, via the underlying /scripts/upcp script.
- [Change Database Root Password](https://docs.cpanel.net/whm/database-services/change-database-root-password/): WHM interface (Database Services >> Change Database Root Password), formerly named MySQL Root Password before version 119, for setting the MySQL or MariaDB root account password on local or remote database servers.
- [Change Database User Password](https://docs.cpanel.net/whm/database-services/change-database-user-password/): WHM interface (Database Services >> Change Database User Password), formerly named Change MySQL User Password before version 119, for resetting an individual database user's password without requiring the old password.
- [Configure PostgreSQL](https://docs.cpanel.net/whm/database-services/configure-postgresql/): WHM interface (Database Services >> Configure PostgreSQL) for completing the PostgreSQL installation on the server, creating PostgreSQL user accounts for pre-existing cPanel accounts, and changing the PostgreSQL password.
- [Database Map Tool](https://docs.cpanel.net/whm/database-services/database-map-tool/): WHM interface (Database Services >> Database Map Tool) for granting a cPanel user ownership of unowned MySQL or PostgreSQL databases and database users so they can manage them through cPanel; cannot transfer ownership between accounts.
- [Edit Database Configuration](https://docs.cpanel.net/whm/database-services/edit-database-configuration/): WHM's Edit Database Configuration interface adjusts MySQL or MariaDB server settings such as buffer sizes, timeouts, query cache, and logging, and can auto-suggest optimized values based on usage; saving changes restarts the database service. In cPanel & WHM 118 and earlier this was named Edit SQL Configuration.
- [Manage Database Access Hosts](https://docs.cpanel.net/whm/database-services/manage-database-access-hosts/): WHM's Manage Database Access Hosts interface maintains a server-wide list of remote hostnames or IP addresses permitted to access MySQL or MariaDB databases, applied to every cPanel user and database user. Formerly named Additional MySQL Access Hosts in cPanel & WHM 118 and earlier.
- [Manage Database Profiles](https://docs.cpanel.net/whm/database-services/manage-database-profiles/): WHM's Manage Database Profiles interface creates, edits, validates, activates, and deletes connection profiles for local or remote MySQL or MariaDB servers (including Amazon RDS); the active profile determines where the root database user connects and where new databases and users are created. Formerly named Manage MySQL Profiles in cPanel & WHM 118 and earlier.
- [Manage Database Users](https://docs.cpanel.net/whm/database-services/manage-database-users/): WHM's Manage Database Users interface (latest version, 132) lists all MySQL and MariaDB database users on the server, the account that owns each, and their databases, and lets administrators rename a user or set a new password. It documents database username length limits for MySQL 5.7 and later and MariaDB; unlike the 120 version, it no longer covers MySQL 5.6 limits.
- [Manage Databases](https://docs.cpanel.net/whm/database-services/manage-databases/): WHM's Manage Databases interface lists cPanel-managed databases on the server, each database's engine, and its owning user, and lets administrators rename a database. Because MySQL cannot rename databases directly, the system creates a new database, migrates data and grants, then deletes the original.
- [Repair Databases](https://docs.cpanel.net/whm/database-services/repair-databases/): WHM's Repair Databases interface attempts to repair corrupted MySQL or MariaDB database tables by selecting a database and clicking Repair Database; it does not support InnoDB tables for Roundcube databases. Formerly named Repair a MySQL Database in cPanel & WHM 118 and earlier.
- [Show Database Processes](https://docs.cpanel.net/whm/database-services/show-database-processes/): WHM's Show Database Processes interface lists all processes currently running on the server's MySQL or MariaDB databases, showing process ID, user, host, database, command type, runtime, state, and query info. Formerly named Show MySQL Processes in cPanel & WHM 118 and earlier.
- [Upgrade Database Version](https://docs.cpanel.net/whm/database-services/upgrade-database-version/): WHM's Upgrade Database Version interface, available to root and root-level resellers, upgrades or reinstalls the server's MySQL or MariaDB version (e.g., MySQL 5.7 to 8.4, or to MariaDB 10.5 through 11.4) via unattended or interactive upgrade, keeps the chosen engine patched automatically, and includes an upgrade checker utility; downgrades and switching back from MariaDB to MySQL are not supported.
- [API Shell for WHM](https://docs.cpanel.net/whm/development/api-shell-for-whm/): WHM's API Shell interface lets root or root-level resellers interactively call WHM API 1 functions, enter parameters, and filter, sort, or paginate results, viewing responses in tree, table, or raw view; must be enabled via the cPanel & WHM API shell (for developers) Tweak Setting.
- [Apps Managed by AppConfig](https://docs.cpanel.net/whm/development/apps-managed-by-appconfig/): WHM's Apps Managed by AppConfig interface lists WHM, cPanel, and Webmail applications registered through AppConfig (and WP Squared applications if installed), showing each app's required ACLs or features, system user, URLs, origin, PHP config path, and display/entry URL.
- [cPanel Plugin File Generator](https://docs.cpanel.net/whm/development/cpanel-plugin-file-generator/): WHM's cPanel Plugin File Generator interface, usable only by root, builds a .tar.gz plugin installation file for the Jupiter theme by defining plugin items (unique identifier, name, group, priority, URI, icon, Feature Manager support); the generated file is installed via the /usr/local/cpanel/scripts/install_plugin script.
- [Manage API Tokens in WHM](https://docs.cpanel.net/whm/development/manage-api-tokens-in-whm/): WHM's Manage API Tokens interface creates, lists, edits, and revokes API tokens used to authenticate with WHM's remote API, with optional expiration dates, allowed IP address/CIDR restrictions, and assignable ACL privileges. Tokens currently work with WHM API functions, DNS clusters, and configuration clusters.
- [Manage Hooks](https://docs.cpanel.net/whm/development/manage-hooks/): WHM's Manage Hooks interface lists server hooks grouped by hook type and execution order, showing event, location, stage, and attribute icons (blocking, active, root-required, condition-check, failure routine); administrators can view details, reorder, enable/disable, or delete hooks, though hooks must be created or edited from the command line.
- [Add a DNS Zone](https://docs.cpanel.net/whm/dns-functions/add-a-dns-zone/): WHM's Add a DNS Zone interface (latest version, 130) creates a DNS zone for a domain by entering an IPv4 address and domain name, optionally associating it with a cPanel account, using WHM's zone file templates; multiple zones for the same domain are not allowed. Unlike version 90, this version includes an added warning about temporary domains.
- [Add an A Entry for Your Hostname](https://docs.cpanel.net/whm/dns-functions/add-an-a-entry-for-your-hostname/): WHM's Add an A Entry for Your Hostname interface creates an A (address) DNS record pointing a hostname or domain to the server's IP address, automatically creating a new DNS zone if one does not already exist; creating a parent DNS zone for the domain first is recommended.
- [Delete a DNS Zone](https://docs.cpanel.net/whm/dns-functions/delete-a-dns-zone/): WHM's Delete a DNS Zone interface (latest version, 130) deletes one or multiple DNS zones from the server, useful when a domain is no longer hosted locally or another server is authoritative for it; zones on other write-only DNS cluster servers do not appear, and affected cPanel users must reconfigure email routing to a local mail exchanger. Unlike version 82, this version includes an added warning about temporary domains.
- [DNS Zone Manager](https://docs.cpanel.net/whm/dns-functions/dns-zone-manager/): The DNS Zone Manager interface in WHM lets administrators view, filter, add, edit, and delete DNS zone records (A, CNAME, MX, and other types) for server domains, manage DNSSEC keys, view raw zone files, and reset DNS zones.
- [Edit Zone Templates](https://docs.cpanel.net/whm/dns-functions/edit-zone-templates/): The Edit Zone Templates interface in WHM (WHM >> Home >> DNS Functions >> Edit Zone Templates) lets administrators edit the simple, standard, and standardvirtualftp DNS zone file templates that cPanel & WHM uses to generate zone files for new, addon, and parked domains. It documents template variables such as %domain%, %ip%, %ttl%, and nameserver-related placeholders for customizing zone records.
- [Email DNS Record Manager](https://docs.cpanel.net/whm/dns-functions/email-dns-record-manager/): The Email DNS Record Manager interface in WHM (WHM >> Home >> DNS Functions >> Email DNS Record Manager) applies a default DMARC policy (v=DMARC1; p=none;) to a server's domains that lack one, without modifying existing DMARC records. It requires valid SPF and DKIM records, which can be enabled server-wide via Enable DKIM/SPF Globally, and links to DNS Zone Manager for per-domain DMARC customization.
- [Email Routing Configuration](https://docs.cpanel.net/whm/dns-functions/email-routing-configuration/): The Email Routing Configuration interface in WHM (WHM >> Home >> DNS Functions >> Email Routing Configuration) lets administrators set each domain's MX (mail exchanger) routing mode—Automatically Detect Configuration, Local Mail Exchanger, Backup Mail Exchanger, or Remote Mail Exchanger—and configure MX entry TTL, priority, and destination values.
- [Enable DKIM/SPF Globally](https://docs.cpanel.net/whm/dns-functions/enable-dkim-spf-globally/): The Enable DKIM/SPF Globally interface in WHM (WHM >> Home >> DNS Functions >> Enable DKIM/SPF Globally) provisions DKIM and SPF DNS records for all existing accounts on the server as a background task, appending the server's main IP to existing SPF records without modifying existing DKIM records; new accounts get these records automatically. Per-domain DKIM/SPF management is done via cPanel's Email Deliverability interface.
- [Nameserver Record Report](https://docs.cpanel.net/whm/dns-functions/nameserver-record-report/): The Nameserver Record Report interface in WHM (WHM >> Home >> DNS Functions >> Nameserver Record Report) lists each of the server's authoritative nameservers with their IPv4/IPv6 addresses and the number of DNS zones each hosts, based on nightly-updated local DNS zone and localhost lookup data, and links to DNS Zone Manager to edit zones.
- [Park a Domain](https://docs.cpanel.net/whm/dns-functions/park-a-domain/): The Park a Domain interface in WHM (WHM >> Home >> DNS Functions >> Park a Domain) lets administrators park a registered secondary domain (alias) on top of an existing domain so visitors to the parked domain see the primary domain's website. It covers automatic SSL/AutoSSL securing of parked domains (AutoSSL only if server configuration allows it), troubleshooting DNS zone errors that block parking, and blocking parking on protected domains via /usr/local/cpanel/etc/commondomains.
- [Perform a DNS Cleanup](https://docs.cpanel.net/whm/dns-functions/perform-a-dns-cleanup/): The Perform a DNS Cleanup interface in WHM (WHM >> Tools >> DNS Functions >> Perform a DNS Cleanup) cleans a corrupted BIND or PowerDNS named configuration file and removes duplicate nameserver zone entries. It applies only to servers running BIND or PowerDNS nameservers and can also be run via the /usr/local/cpanel/scripts/cleandns script.
- [Set Zone Time to Live (TTL)](https://docs.cpanel.net/whm/dns-functions/set-zone-time-to-live/): The Set Zone Time to Live (TTL) interface in WHM (WHM >> Home >> DNS Functions >> Set Zone Time to Live (TTL)) lets administrators set the TTL, in seconds, for one or more DNS zones, updating all records in the selected zones including SOA and NS records. The default TTL is 14,400 seconds, and changes can optionally be excluded from DNS cluster synchronization.
- [Setup/Edit Domain Forwarding](https://docs.cpanel.net/whm/dns-functions/setup-edit-domain-forwarding/): The Setup/Edit Domain Forwarding interface in WHM (WHM >> Home >> DNS Functions >> Setup/Edit Domain Forwarding) redirects visitors from one domain to another by assigning a forwarding IP address and mapping domains to redirection URLs, storing data in /var/cpanel/domainfwdip and /var/cpanel/domainmap. It differs from domain parking, which returns the same site rather than redirecting.
- [Synchronize DNS Records](https://docs.cpanel.net/whm/dns-functions/synchronize-dns-records/): The Synchronize DNS Records interface in WHM (WHM >> Home >> DNS Functions >> Synchronize DNS Records) compares zone files across servers in a DNS cluster, identifies the most up-to-date versions, and copies them to bring outdated cluster members current. It supports syncing one zone or all zones to just the local server or to every server in the cluster.
- [Email Deliverability in WHM](https://docs.cpanel.net/whm/email/email-deliverability-in-whm/): The Email Deliverability in WHM interface (WHM >> Home >> Email >> Email Deliverability) diagnoses problems with a server's mail-related DNS records—DKIM, SPF, PTR (reverse DNS), and DMARC—and lets administrators generate or view DKIM keys, copy or install suggested SPF, DKIM, and DMARC records, and customize SPF hosts, MX servers, IP ranges, and includes.
- [Filter Incoming Emails by Country](https://docs.cpanel.net/whm/email/filter-incoming-emails-by-country/): The Filter Incoming Emails by Country interface in WHM (WHM >> Home >> Email >> Filter Incoming Emails by Country) blocks or allows incoming email based on the GeoIP-determined country or region of the sending server's IP address, using MaxMind GeoLite2 data. This filter and Filter Incoming Emails by Domain are applied before other email filters.
- [Filter Incoming Emails by Domain](https://docs.cpanel.net/whm/email/filter-incoming-emails-by-domain/): The Filter Incoming Emails by Domain interface in WHM (WHM >> Home >> Email >> Filter Incoming Emails by Domain) rejects incoming email whose From address matches an administrator-specified blocked domain list, supports wildcard subdomain blocking (*.example.com) and Internationalized Domain Names converted to Punycode. It is applied before other email filters, along with Filter Incoming Emails by Country.
- [Greylisting](https://docs.cpanel.net/whm/email/greylisting/): The Greylisting interface in WHM (WHM >> Home >> Email >> Greylisting) configures Greylisting, an anti-spam service that temporarily defers email from unrecognized sender/recipient/IP triplets and accepts it on a legitimate resend. It covers enabling the feature, configuring deferral/acceptance/expiration time thresholds and SPF bypass, managing Trusted Hosts (including neighboring IP netblocks) and Common Mail Providers that bypass greylisting, and viewing deferred-email Reports.
- [Mail Delivery Reports](https://docs.cpanel.net/whm/email/mail-delivery-reports/): WHM interface for searching sent and received emails on a server by sender, recipient, date/time range, and delivery status (delivered, filtered, deferred, failed, rejected); root users can query all accounts and resellers can query only their own.
- [Mail Queue Manager](https://docs.cpanel.net/whm/email/mail-queue-manager/): WHM interface for viewing, searching, deleting, manually redelivering, or unfreezing messages stuck in the mail queue because they could not yet be delivered, such as mail addressed to invalid hosts.
- [Mail Troubleshooter](https://docs.cpanel.net/whm/email/mail-troubleshooter/): WHM tool that traces an email's delivery route from the server to a specified address to pinpoint delivery or routing failures, useful after reconfiguring the mail system.
- [Mailbox Conversion](https://docs.cpanel.net/whm/email/mailbox-conversion/): WHM interface for converting a cPanel account's mailboxes between the maildir and mdbox storage formats, covering tradeoffs around inode usage, symlink support, POP UID changes, and disk usage after conversion.
- [Repair Mailbox Permissions](https://docs.cpanel.net/whm/email/repair-mailbox-permissions/): WHM interface that inspects mailbox ownership and file permissions across the mail system and repairs any contradictions it finds.
- [Spamd Startup Configuration](https://docs.cpanel.net/whm/email/spamd-startup-configuration/): WHM interface for configuring startup options of the Apache SpamAssassin spamd daemon, including allowed IPs, maximum connections per child, maximum child processes, and TCP timeout values.
- [View Mail Statistics Summary](https://docs.cpanel.net/whm/email/view-mail-statistics-summary/): WHM interface displaying Exim mail statistics over a date range, including delivery totals by transport, hourly send/receive volume, queue wait times, rejection reasons, and top senders and destinations by message count and volume.
- [View Relayers](https://docs.cpanel.net/whm/email/view-relayers/): WHM interface listing users who relayed mail (forwarded messages to a remote account) within a specified date/time range, showing user, domain, delivery success, and data sent, with links into Mail Delivery Reports for details.
- [View Sent Summary](https://docs.cpanel.net/whm/email/view-sent-summary/): WHM interface showing, per domain, the number of successful, deferred, and failed outgoing mail delivery attempts and data sent within a chosen date/time range, plus a current-hour view of relay and failure limit status.
- [Add a New IP Address](https://docs.cpanel.net/whm/ip-functions/add-a-new-ip-address/): WHM interface for adding one or more IP addresses (via Class C CIDR, IP/netmask, or IP range notation) to the server's IP address pool, with subnet mask and exclusion options, so cPanel & WHM recognizes them for use such as dedicated IPs on new accounts.
- [Assign IPv6 Address](https://docs.cpanel.net/whm/ip-functions/assign-ipv6-address/): WHM interface for assigning dedicated or shared IPv6 addresses from configured IPv6 ranges to individual cPanel accounts, and for disabling IPv6 on an account; requires IPv6 ranges to exist and cpsrvd to listen on IPv6.
- [Configure Remote Service IPs](https://docs.cpanel.net/whm/ip-functions/configure-remote-service-ips/): WHM interface for registering remote mail server IPs (e.g., third-party spam filters) and remote nameserver IPs so the system treats them as local, enabling scenarios like remote/clustered DNS and remote parked or addon domains.
- [IP Migration Wizard](https://docs.cpanel.net/whm/ip-functions/ip-migration-wizard/): Multi-step WHM wizard for migrating all cPanel accounts (and optionally the server's primary IP) to new IP addresses, covering entering new IPs, confirming the translation matrix, updating Apache/FTP/cPanel config files, DNS migration, a required 48-hour propagation wait, and post-migration cleanup including license IP updates.
- [IPv6 Address Ranges](https://docs.cpanel.net/whm/ip-functions/ipv6-address-ranges/): WHM interface for adding or deleting IPv6 address ranges on the server and marking them as available or reserved, a prerequisite for assigning dedicated IPv6 addresses to accounts via Assign IPv6 Address.
- [Rebuild the IP Address Pool](https://docs.cpanel.net/whm/ip-functions/rebuild-the-ip-address-pool/): WHM feature that scans the server's bound IP addresses for ones not linked to a domain and returns them to the IP address pool used when creating new accounts.
- [Show/Edit Reserved IPs](https://docs.cpanel.net/whm/ip-functions/show-edit-reserved-ips/): WHM interface for reserving or unreserving IP addresses in the address pool so they are excluded from automatic assignment as dedicated IPs to new accounts; reserving an IP also stops Apache from listening on it.
- [Show IP Address Usage](https://docs.cpanel.net/whm/ip-functions/show-ip-address-usage/): WHM interface listing each server IP address along with the domains it hosts for HTTP and FTP, plus the number of email accounts it hosts for mail.
- [Show or Delete Current IP Addresses](https://docs.cpanel.net/whm/ip-functions/show-or-delete-current-ip-addresses/): WHM interface listing IP addresses bound to the server, including interface, notes on assigned users, and (in 1:1 NAT mode) local-to-public IP mappings, with options to validate/edit public IP mappings or delete unused addresses.
- [Configure Application Locales](https://docs.cpanel.net/whm/locales/configure-application-locales/): WHM interface for mapping cPanel locale options to the language settings of bundled statistics software (Analog, Awstats, Webalizer), so customers view stats in their preferred language.
- [Copy a Locale](https://docs.cpanel.net/whm/locales/copy-a-locale/): WHM interface for duplicating an existing locale into either a standard CLDR-based locale or a custom non-standard (i_-prefixed) locale, producing a copy downloadable in XML for further editing.
- [Delete a Locale](https://docs.cpanel.net/whm/locales/delete-a-locale/): WHM interface for deleting a custom locale from the server; locales bundled with cPanel & WHM cannot be removed.
- [Edit a Locale](https://docs.cpanel.net/whm/locales/edit-a-locale/): WHM interface (Bulk Mode editor) for editing a locale's phrases per theme, configuring non-standard locale settings such as display name, fallback locale, number formatting, and character orientation, and enabling the hidden Snowman test locale.
- [Locale XML Download](https://docs.cpanel.net/whm/locales/locale-xml-download/): WHM interface for downloading an existing locale as a legacy XML file or an XLIFF (XLF) file for offline editing before re-upload.
- [Locale XML Upload](https://docs.cpanel.net/whm/locales/locale-xml-upload/): WHM interface for uploading a locale XML file, creating a new locale if it doesn't exist, or for an existing locale, adding missing core keys and overwriting/adding local edit keys.
- [View Available Locales](https://docs.cpanel.net/whm/locales/view-available-locales/): WHM interface listing available locales cross-referenced against supported themes, and indicating whether each locale was provided by WebPros/cPanel or a third party.
- [Market Provider Manager](https://docs.cpanel.net/whm/market/market-provider-manager/): WHM interface for enabling/disabling cPanel Market SSL certificate providers and their products, setting product pricing and "recommended" flags, and configuring the cPanel Store commission recipient email for sales made through the SSL/TLS Wizard.
- [Change Multiple Sites' IP Addresses](https://docs.cpanel.net/whm/multi-account-functions/change-multiple-sites-ip-addresses/): WHM interface for changing the IP addresses of multiple domains/accounts at once, useful for example when transferring accounts between resellers.
- [Modify/Upgrade Multiple Accounts](https://docs.cpanel.net/whm/multi-account-functions/modify-upgrade-multiple-accounts/): WHM's Modify/Upgrade Multiple Accounts interface (WHM >> Home >> Multi-Account Functions >> Modify/Upgrade Multiple Accounts) lets administrators bulk-edit the reseller/owner, cPanel theme, start date, language, and hosting package for multiple selected accounts at once, overriding any custom per-account settings such as bandwidth.
- [Change Hostname](https://docs.cpanel.net/whm/networking-setup/change-hostname/): WHM's Change Hostname interface (WHM >> Home >> Networking Setup >> Change Hostname) lets administrators set the server's fully-qualified domain name (FQDN) hostname, which the system applies immediately, restarts dependent services, and prompts you to add a corresponding DNS A entry.
- [Resolver Configuration](https://docs.cpanel.net/whm/networking-setup/resolver-configuration/): WHM's Resolver Configuration interface (WHM >> Home >> Networking Setup >> Resolver Configuration) provides a wizard to set the primary, secondary, and optional tertiary nameserver IP addresses in the server's /etc/resolv.conf file, which the server uses to resolve domain names.
- [Add a Package](https://docs.cpanel.net/whm/packages/add-a-package/): WHM's Add a Package interface (WHM >> Home >> Packages >> Add a Package) creates a new hosting package that defines resource limits (disk space, bandwidth, email, FTP, databases, subdomains, and similar) and settings (dedicated IP, shell access, CGI access, theme, feature list, locale, and package extensions) that administrators can assign to cPanel accounts.
- [Delete a Package](https://docs.cpanel.net/whm/packages/delete-a-package/): WHM's Delete a Package interface (WHM >> Home >> Packages >> Delete a Package) permanently removes an unused hosting package from the server; you cannot delete a package that is currently assigned to an account, and deleted packages cannot be recovered.
- [Edit a Package](https://docs.cpanel.net/whm/packages/edit-a-package/): WHM's Edit a Package interface (WHM >> Home >> Packages >> Edit a Package) modifies the resource limits (disk space, bandwidth, email, FTP, databases, subdomains, max team users with roles, and similar) and settings (dedicated IP, shell access, CGI access, theme, feature list, locale, and package extensions) of an existing hosting package; package names cannot be changed.
- [Feature Manager](https://docs.cpanel.net/whm/packages/feature-manager/): The WHM Feature Manager interface (WHM >> Home >> Packages >> Feature Manager) manages feature lists, including creating, editing, and deleting feature lists, and enabling or disabling individual cPanel features within them, such as Primary Domain Rename, which is available as a selectable feature in this version. It also manages the predefined default, disabled, and Mail Only feature lists that determine feature access for cPanel accounts and packages.
- [Comet Backup](https://docs.cpanel.net/whm/plugins/comet-backup/): The WHM Comet Backup interface (WHM >> Plugins >> Comet Backup) lets you activate a Comet Backup license via WebPros account authentication, create and manage scheduled or manual backup jobs with WebPros Storage or local storage destinations, restore individual or multiple accounts, and perform disaster recovery from a remote Comet Backup storage server.
- [Configure ClamAV Scanner](https://docs.cpanel.net/whm/plugins/configure-clamav-scanner/): The WHM Configure ClamAV Scanner interface (WHM >> Plugins >> Configure ClamAV Scanner) configures the ClamAV antivirus scanner to check home directories, mail, public FTP space, and public web space for malware, supports per-user scan overrides, and documents the clamscan/clamdscan/freshclam CLI binaries in /usr/local/cpanel/3rdparty/bin/ and the clamd.conf options.
- [Server Monitoring (Powered by 360 Monitoring)](https://docs.cpanel.net/whm/plugins/server-monitoring/): The WHM Server Monitoring interface (WHM >> Plugins >> Server Monitoring), powered by 360 Monitoring, displays real-time dashboards for CPU, memory, disk, network, process, and alert metrics, and lets you sign up for or upgrade a 360 Monitoring account and enable a Home screen dashboard widget.
- [WebPros Dashboard](https://docs.cpanel.net/whm/plugins/webpros-dashboard/): The WebPros Dashboard plugin connects your server to centralized management capabilities.
- [WP Toolkit for WHM](https://docs.cpanel.net/whm/plugins/wp-toolkit-for-whm/): The WHM WP Toolkit interface (WHM >> Plugins >> WP Toolkit) installs, configures, and manages WordPress sites on the server, requires the PHP-FPM Service for cPanel Daemons and specific Feature Manager privileges, and links to Plesk's WP Toolkit documentation for usage details.
- [Change Ownership of Multiple Accounts](https://docs.cpanel.net/whm/resellers/change-ownership-of-multiple-accounts/): The WHM Change Ownership of Multiple Accounts interface (WHM >> Home >> Resellers >> Change Ownership of Multiple Accounts) transfers ownership of multiple selected cPanel accounts to a chosen reseller in a single action.
- [Edit Reseller Nameservers and Privileges](https://docs.cpanel.net/whm/resellers/edit-reseller-nameservers-and-privileges/): The WHM Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges) sets a reseller's account-creation limits (total accounts, resource usage, or specific packages), Account Enhancement assignment limits, ACL-based feature privileges (including Super Privileges and root access), and default or custom nameserver/A/AAAA records.
- [Email All Resellers](https://docs.cpanel.net/whm/resellers/email-all-resellers/): The WHM Email All Resellers interface (WHM >> Home >> Resellers >> Email All Resellers) sends a single email message with a specified subject and body to every reseller account on the server.
- [Manage Reseller's IP Delegation](https://docs.cpanel.net/whm/resellers/manage-resellers-ip-delegation/): The WHM Manage Reseller's IP Delegation interface (WHM >> Home >> Resellers >> Manage Reseller's IP Delegation) controls a reseller's access to server IP addresses via Open Delegation (all available IPs) or Restricted Delegation (specific selected IPs).
- [Manage Reseller's Shared IP](https://docs.cpanel.net/whm/resellers/manage-resellers-shared-ip/): The WHM Manage Reseller's Shared IP interface (WHM >> Home >> Resellers >> Manage Reseller's Shared IP) assigns a shared (IP-less) IP address to a reseller account from the server's available delegated, dedicated, or shared IP addresses.
- [Reseller Center](https://docs.cpanel.net/whm/resellers/reseller-center/): The WHM Reseller Center interface (WHM >> Home >> Resellers >> Reseller Center) adds or removes reseller status on existing accounts and provides navigation links to related reseller interfaces, including Edit Reseller Nameservers and Privileges, Change Ownership of Multiple Accounts, View Reseller Usage and Manage Account Status, IP delegation, and Email All Resellers.
- [Reset Resellers](https://docs.cpanel.net/whm/resellers/reset-resellers/): The WHM Reset Resellers interface (WHM >> Home >> Resellers >> Reset Resellers) applies an existing ACL list to one or more resellers or resets a reseller's package-creation permissions to the server default.
- [Show Reseller Accounts](https://docs.cpanel.net/whm/resellers/show-reseller-accounts/): The WHM Show Reseller Accounts interface (WHM >> Home >> Resellers >> Show Reseller Accounts) lists each reseller account along with the cPanel accounts, domains, and packages that reseller owns.
- [View Reseller Usage and Manage Account Status](https://docs.cpanel.net/whm/resellers/view-reseller-usage-and-manage-account-status/): The WHM View Reseller Usage and Manage Account Status interface (WHM >> Home >> Resellers >> View Reseller Usage and Manage Account Status) displays a reseller's monthly disk space and bandwidth usage per account and lets you suspend, unsuspend, or terminate all of a reseller's accounts, optionally including the reseller's own main account.
- [Restart Services](https://docs.cpanel.net/whm/restart-services/restart-services/): The WHM Restart Services interfaces (WHM >> Home >> Restart Services) restart individual server services including BIND/PowerDNS, ProFTPD/Pure-FTPd, Apache, Dovecot, Exim, Mailman, PHP-FPM for Apache, MySQL, PostgreSQL, and OpenSSH; stopped services must be started via Service Manager instead.
- [The auto-adjust-mysql-limits Script](https://docs.cpanel.net/whm/scripts/the-auto-adjust-mysql-limits-script/): The /usr/local/cpanel/scripts/auto-adjust-mysql-limits script (must run as root) recalculates MySQL open_files_limit, max_allowed_packet, and innodb_buffer_pool_size values when related Tweak Settings change or an account is transferred/restored; supports --verbose, --debug (no changes applied), --no-restart, and --help options.
- [The autossl_check Script](https://docs.cpanel.net/whm/scripts/the-autossl_check-script/): The /usr/local/cpanel/bin/autossl_check script manually checks AutoSSL certificate expiration and domain SSL coverage for a single user or all users, is invoked by WHM's Manage AutoSSL "Run AutoSSL for All Users" setting and a daily cron job, and accepts --user=username, --all, and --help options.
- [The backup_restore_manager Script](https://docs.cpanel.net/whm/scripts/the-backup_restore_manager-script/): The /usr/local/cpanel/bin/backup_restore_manager script manages the backup restoration queue: adds accounts with options like user, restore_point, destid, give_ip, mail_config, mysql, and subdomains; removes accounts with delete/delete_finished/start_time; and supports queue actions such as activate, list, list_active, list_finished, state, and delete_all_* variants.
- [The backup Script](https://docs.cpanel.net/whm/scripts/the-backup-script/): The /usr/local/cpanel/bin/backup script runs a manual WHM backup from the command line using the existing backup configuration, logging to /usr/local/cpanel/logs/cpbackup, and accepts --debug (foreground with progress output), --force (backup even if up to date), --allow-override (use the pkgacct script), and --help options.
- [The backups_clean_metadata_for_missing_backups Script](https://docs.cpanel.net/whm/scripts/the-backups_clean_metadata_for_missing_backups-script/): The /usr/local/cpanel/scripts/backups_clean_metadata_for_missing_backups script (run as root) removes stale metadata for backup files that a user manually deleted from the system outside of the daily Backup System run; it takes no arguments and produces no output.
- [The backups_create_metadata Script](https://docs.cpanel.net/whm/scripts/the-backups_create_metadata-script/): The /usr/local/cpanel/scripts/backups_create_metadata script creates metadata files for account backups (excluding /mail and /.cpanel directories). Key options: --all (all backups), --backup=[filename] (specific backup, optionally with --user), --user=[user], --fix_corrupt (repair corrupt metadata databases, optionally with --schedule_rebuild), --schedule_rebuild (background rebuild), and --vacuum (defragment the metadata SQL database).
- [The backups_list_user_files Script](https://docs.cpanel.net/whm/scripts/the-backups_list_user_files-script/): The /usr/local/cpanel/scripts/backups_list_user_files script (run as root) locates a specified user's backup files and outputs them in CSV format, listing creation date, file size, backup format type (compressed, uncompressed, incremental), matching filename, archive/full path, and file type (FILE, DIR, SYMLINK). Accepts --user=[username] and an optional --regexp=[string] to filter results.
- [The balance_linked_node_quotas Script](https://docs.cpanel.net/whm/scripts/the-balance_linked_node_quotas-script/): The /usr/local/cpanel/scripts/balance_linked_node_quotas script enforces disk use quotas for distributed cPanel accounts across linked cPanel & WHM parent/child nodes by aggregating each account's disk usage and adjusting its quota proportionally on each server. Supports --verbose and --help options.
- [The build_maxemails_config Script](https://docs.cpanel.net/whm/scripts/the-build_maxemails_config-script/): The /usr/local/cpanel/scripts/build_maxemails_config script (root only) sets the maximum hourly email rate limit per domain based on the maxemailsperhour value in /var/cpanel/cpanel.config; the upcp maintenance script runs it automatically. Supports a --help option.
- [The build_mysql_conf Script](https://docs.cpanel.net/whm/scripts/the-build_mysql_conf-script/): The /usr/local/cpanel/bin/build_mysql_conf script builds the default MySQL configuration file (my.cnf), with command-line options taking precedence over config file settings. Key options: --daemonize (run as background daemon), --fix-my-cnf (only fix my.cnf, skipping SELinux changes, mysql_upgrade, restarts, and connection checks), --no-upgrade, --no-restart, and --no-selinux.
- [The ccs-check Script](https://docs.cpanel.net/whm/scripts/the-ccs-check-script/): The /usr/local/cpanel/scripts/ccs-check script copies the server's SSL certificate data into the /opt/cpanel-ccs/conf directory so the Calendar and Contacts Server (CCS) plugin can use it. Requires --run and --ssl; also supports --force (skip the CCS-installed check), --norestart (update SSL info without restarting CCS), and --help.
- [The check_plugin_pkgs Script](https://docs.cpanel.net/whm/scripts/the-check_plugin_pkgs-script/): The /usr/local/cpanel/scripts/check_plugin_pkgs script (run as root, part of nightly maintenance) verifies the integrity of installed plugin packages, replacing altered packages and installing missing ones. Requires --pkg=[plugin] (repeatable for multiple packages); also supports --help.
- [The check_security_advice_changes Script](https://docs.cpanel.net/whm/scripts/the-check_security_advice_changes-script/): The /usr/local/cpanel/scripts/check_security_advice_changes script (part of nightly maintenance) monitors WHM's Security Advisor state and notifies the system administrator when it changes. Options: --notify (send admin notification on changes), --quiet (suppress output, set exit code), and --help.
- [The check_users_my_cnf Script](https://docs.cpanel.net/whm/scripts/the-check_users_my_cnf-script/): The /usr/local/cpanel/scripts/check_users_my_cnf script checks cPanel accounts (all by default) for invalid ~/.my.cnf files and renames them, outputting only when it finds an invalid file. Options: --dryrun (detect only, no renaming), --perm-only (check file permissions/ownership only), --user=[username] (repeatable), --verbose, and --help.
- [The checkallsslcerts Script](https://docs.cpanel.net/whm/scripts/the-checkallsslcerts-script/): The /usr/local/cpanel/bin/checkallsslcerts script (version 118 doc; run only on Technical Support advice) runs during the nightly upcp process and when you purchase or add a cPanel & WHM license, requesting an SSL certificate to replace certificates meeting automatic replacement conditions (or installing a self-signed certificate otherwise) and updating SSL for all cPanel & WHM services. Options: --allow-retry (recheck the cPanel Store after an hour) and --verbose. Delta from version 82: this version also triggers on license purchase/add events and references a separate automatic-replacement-conditions doc instead of listing conditions inline.
- [The clean_user_php_sessions Script](https://docs.cpanel.net/whm/scripts/the-clean_user_php_sessions-script/): The /usr/local/cpanel/scripts/clean_user_php_sessions script (requires root) purges expired PHP session files from a secure temp directory based on the global session.gc_maxlifetime and session.save_path php.ini values, using the minimum gc_maxlifetime across PHP versions if they differ; by default only removes files matching sess_*. Accepts an optional PCRE argument to match custom session filenames. The maintenance script adds it to root's crontab.
- [The cleandns Script](https://docs.cpanel.net/whm/scripts/the-cleandns-script/): The /usr/local/cpanel/scripts/cleandns script removes duplicate DNS zone definitions and checks for invalid syntax in /etc/named.conf; it only supports BIND and PowerDNS servers. Supports a --help option.
- [The convert_accesshash_to_token Script](https://docs.cpanel.net/whm/scripts/the-convert_accesshash_to_token-script/): The /usr/local/cpanel/scripts/convert_accesshash_to_token script converts one or more WHM users' access hashes (viewable in WHM's Remote Access Key interface) to API tokens without revoking the original access hash; defaults to the root user if no username is given. Options: --verbose (list generated tokens) and --all-resellers (convert all resellers' access hashes).
- [The convert_maildir_to_mdbox Script](https://docs.cpanel.net/whm/scripts/the-convert_maildir_to_mdbox-script/): The /usr/local/cpanel/scripts/convert_maildir_to_mdbox script converts mailboxes from maildir to mdbox format and reconfigures Dovecot accordingly. Options: --user=[username] (convert a cPanel account and all its email accounts), --email=[address] (convert a single email account), --delete-old-format (remove maildir files after conversion), and --help.
- [The convert_mdbox_to_maildir Script](https://docs.cpanel.net/whm/scripts/the-convert_mdbox_to_maildir-script/): The /usr/local/cpanel/scripts/convert_mdbox_to_maildir script converts mailboxes from mdbox to maildir format and reconfigures Dovecot accordingly. Options: --user=[username] (convert a cPanel account and all its email accounts), --email=[address] (convert a single email account), --delete-old-format (remove mdbox files after conversion), and --help.
- [The copy_user_mail_as_root Script](https://docs.cpanel.net/whm/scripts/the-copy_user_mail_as_root-script/): The /usr/local/cpanel/scripts/copy_user_mail_as_root script copies a cPanel account's mail to or from a remote server as the root user, prompting for a root API token on the remote server. Requires --mode=[tolocal|toremote], a hostname, and a username; also supports --help.
- [The copy_user_mail_as_user Script](https://docs.cpanel.net/whm/scripts/the-copy_user_mail_as_user-script/): The /usr/local/cpanel/scripts/copy_user_mail_as_user script copies a cPanel account's mail to or from a remote server as the account itself, prompting for an API token for that account on the remote server. Requires --mode=[tolocal|toremote], a hostname, and a username; also supports --help.
- [The cpanel_dovecot_solr_rebuild_index Script](https://docs.cpanel.net/whm/scripts/the-cpanel-dovecot-solr-rebuild-index-script/): The /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_rebuild_index script (root only) rebuilds corrupt Apache Solr index files by backing up existing index files, restarting Solr, and reindexing all cPanel users' mailboxes; commonly needed after resource issues like low disk space or inodes corrupt the index. Requires Apache Solr to be installed via WHM's Manage Plugins interface; accepts no options (--help is not supported).
- [The cpanel-onboot System Script](https://docs.cpanel.net/whm/scripts/the-cpanel-onboot-system-script/): The cpanel-onboot script runs as a systemd service at system boot and executes all scripts placed in the /var/cpanel/on_boot directory, letting administrators run custom scripts after startup. It is not run directly by users; create /var/cpanel/on_boot if it doesn't exist and place startup scripts there.
- [The cpconftool Script](https://docs.cpanel.net/whm/scripts/the-cpconftool-script/): The /usr/local/cpanel/bin/cpconftool script backs up, restores, and transfers configuration modules (Apache, AutoSSL, Backups, cPanel themes, cPHulk, Exim, GreyListing, ModSecurity, MySQL, WHM/whmconf) as tar.gz files. Key options: --modules (required, comma-separated module list), --backup, --restore=[file], --list-modules, --query-module-info, --verbose, and --prerestore_backup (auto-backup before restore, always active for Apache).
- [The cpuser_port_authority Script](https://docs.cpanel.net/whm/scripts/the-cpuser_port_authority-script/): The /usr/local/cpanel/scripts/cpuser_port_authority script (root only) assigns 5-digit ports (10000-65535, excluding ephemeral/passive ports) for a user's exclusive use, enforced via iptables (not firewalld); assignments are stored in /etc/cpanel/cpuser_port_authority.json. Subcommands: give, take, fw, list, user remove, user change, hint, help.
- [The dbmaptool Script](https://docs.cpanel.net/whm/scripts/the-dbmaptool-script/): The /usr/local/cpanel/bin/dbmaptool script grants ownership of databases and database users to a cPanel account (cannot map a virtual user to a database or map a user to itself). Requires a username argument; options: --dbs (comma-separated database names), --dbusers (comma-separated database users), --type (mysql or pg), and --help.
- [The dbstoregrants Script](https://docs.cpanel.net/whm/scripts/the-dbstoregrants-script/): The /usr/local/cpanel/bin/dbstoregrants script synchronizes manual command-line changes made to a MySQL user's grants in the YAML/JSON files under /var/cpanel/databases/ back into cPanel & WHM. Run as `dbstoregrants username` for a single user, or loop over /var/cpanel/users to sync all cPanel users.
- [The dnssec-cluster-keys Script](https://docs.cpanel.net/whm/scripts/the-dnssec-cluster-keys-script/): The /usr/local/cpanel/scripts/dnssec-cluster-keys script (root only, PowerDNS with DNS clustering enabled) syncs or revokes active DNSSEC keys across a DNS cluster. Requires exactly one of --sync or --revoke plus --zone=[domain]; --tag=[key] specifies keys (repeatable, required with --revoke); --nolocal skips the local DNS server.
- [The enable_spf_dkim_globally Script](https://docs.cpanel.net/whm/scripts/the-enable_spf_dkim_globally-script/): The /usr/local/cpanel/scripts/enable_spf_dkim_globally script (root only) enables SPF and DKIM system-wide and creates the corresponding DNS records for users' domains, updating existing SPF records but leaving existing DKIM records untouched. Requires -x to execute; --user=[username] targets specific accounts (repeatable); --help is not supported.
- [The export_horde_calendars_to_ics Script](https://docs.cpanel.net/whm/scripts/the-export_horde_calendars_to_ics-script/): The /usr/local/cpanel/scripts/export_horde_calendars_to_ics script (root only) exports Horde calendars, including all email accounts under a cPanel user, to .ics files importable into Roundcube. Removed in cPanel & WHM version 120 (existed only in 118 and earlier, part of the Horde deprecation). Requires --user=[cpuser] (repeatable); --out=[directory] writes files to disk, otherwise output goes to the screen.
- [The export_horde_contacts_to_vcf Script](https://docs.cpanel.net/whm/scripts/the-export_horde_contacts_to_vcf-script/): The /usr/local/cpanel/scripts/export_horde_contacts_to_vcf script (root only) exports Horde contacts, including all email accounts under a cPanel user, to .vcf files importable into Roundcube. Removed in cPanel & WHM version 120 (existed only in 118 and earlier, part of the Horde deprecation). Requires --user=[cpuser] (repeatable); --out=[directory, no trailing slash] writes files to disk, otherwise output goes to the screen.
- [The find_and_fix_rpm_issues Script](https://docs.cpanel.net/whm/scripts/the-find_and_fix_rpm_issues-script/): The /usr/local/cpanel/scripts/find_and_fix_rpm_issues script (root only, not supported on Ubuntu) detects and rebuilds a corrupt RPM database and removes/reinstalls duplicate cPanel RPMs; useful when RPM installations fail. Accepts exactly one option: --findonly (report only, no changes) or --rebuildonly (unconditionally rebuild).
- [The find_outdated_services Script](https://docs.cpanel.net/whm/scripts/the-find_outdated_services-script/): The /usr/local/cpanel/scripts/find_outdated_services script runs after system updates to identify services that depend on libraries no longer present and need restarting; it ignores auditd, dbus, exim-altport, imap, network, NetworkManager, pop, syslogd, and tomcat (imap/pop handled by Dovecot lmtp). Options: --always-restart, --never-restart, --auto (used by the maintenance script; honors the /var/cpanel/disabled/auto-restart-services touchfile). Exclude additional services via /etc/cpanel/local/ignore_outdated_services (not applied to chkservd/restartsrv).
- [The fix_dns_zone_ttls Script](https://docs.cpanel.net/whm/scripts/the-fix_dns_zone_ttls-script/): The /usr/local/cpanel/scripts/fix_dns_zone_ttls script detects TTL (time-to-live) problems in DNS zone files, reporting them by default. Use --fix to repair the problems; --help displays help documentation.
- [The fix-web-vhost-configuration Script](https://docs.cpanel.net/whm/scripts/the-fix-web-vhost-configuration-script/): The /usr/local/cpanel/scripts/fix-web-vhost-configuration script (root only; runs automatically on major cPanel & WHM upgrades) iterates each user's web virtual host configuration files, removing unrecognized alias domains (e.g., active service subdomains, their www variants, and www subdomains of expected aliases) and adding missing alias domains. Requires either --user=[username] or --all-users; also supports --dry-run (identify only) and --help.
- [The gather_update_log_stats Script](https://docs.cpanel.net/whm/scripts/the-gather_update_log_stats-script/): The /usr/local/cpanel/scripts/gather_update_log_stats script packages update logs from /var/cpanel/updatelogs into a tarball (stored in /usr/local/cpanel/logs/update_analysis) and sends them to WebPros International, LLC for cPanel Analytics; if run while upcp is active it queues until upcp finishes, and sends only system data if log gathering is disabled. Options: --upload (send the tarball), --logfile [path] (analyze a specific upcp log instead of the current date), --help. Related settings live in WHM's Tweak Settings (Support and Stats and Logs sections), disabled by default.
- [The gather_update_logs_setupcrontab Script](https://docs.cpanel.net/whm/scripts/the-gather_update_logs_setupcrontab-script/): The /usr/local/cpanel/scripts/gather_update_logs_setupcrontab script schedules (or, with the `off` argument, removes) a cron job that runs the gather_update_log_stats script, which sends the server's update logs to WebPros International, LLC for analysis.
- [The hook Script](https://docs.cpanel.net/whm/scripts/the-hook-script/): The /usr/local/cpanel/scripts/hook script executes cPanel & WHM's standardized hooks, normally invoked only by the system itself; it requires --category, --event, and --stage options to identify which hook to run.
- [The install_dovecot_fts Script](https://docs.cpanel.net/whm/scripts/the-install_dovecot_fts-script/): The /usr/local/cpanel/scripts/install_dovecot_fts script enables IMAP Full-Text Search (FTS) Indexing (powered by Apache Solr) for faster mailbox search in iOS Mail, Microsoft Outlook, Roundcube, and Mozilla Thunderbird. It takes no options (--help does not display help), and can be reversed with the companion uninstall_dovecot_fts script.
- [The install_plugin Script](https://docs.cpanel.net/whm/scripts/the-install_plugin-script/): The /usr/local/cpanel/scripts/install_plugin script (root only) installs a cPanel plugin archive (.tar.gz, .bzip2, .zip, or an uncompressed directory) into a cPanel theme's dynamicui.conf file using the archive's install.json; it takes a required filepath argument and an optional --theme option (default jupiter). The companion uninstall_plugin script removes a plugin.
- [The install_tuxcare_els_php Script](https://docs.cpanel.net/whm/scripts/the-install_tuxcare_els_php-script/): The /usr/local/cpanel/scripts/install_tuxcare_els_php script (root only) installs the TuxCare Extended Lifecycle Support (ELS) for PHP service, which patches unsupported legacy PHP versions against known vulnerabilities; it requires a purchased TuxCare ELS for PHP license and accepts --delete, --validate, --force, and --help options.
- [The is_script_stuck Script](https://docs.cpanel.net/whm/scripts/the-is_script_stuck-script/): The /usr/local/cpanel/bin/is_script_stuck script checks how long a given script's PID has been running and, if it exceeds a specified time threshold, can notify a WHM user (--notify) or terminate the process (--kill). It requires --script (the target script's path) and a time value (with optional d/h/m/s unit suffix).
- [The log_retention Script](https://docs.cpanel.net/whm/scripts/the-log_retention-script/): The /usr/local/cpanel/scripts/log_retention script manages retention and cleanup of rotated cPanel & WHM log files, including web server logs (Apache, NGINX, domlogs) and custom log types. Key options: --run, --type web|custom (repeatable), --verbose/-v, --help/-h; it uses the WHM Tweak Settings retention period unless overridden per-user in cPanel's Raw Access interface.
- [The manage_mysql_profiles Script](https://docs.cpanel.net/whm/scripts/the-manage_mysql_profiles-script/): The /usr/local/cpanel/scripts/manage_mysql_profiles script imports and exports MySQL profiles. Key options: --import [file] (with optional --force to overwrite), --export [profile name] (repeatable, with --export_to), --activate [profile name], and --recreate_active_profile (rebuilds a profile from /root/.my.cnf).
- [The manage_greylisting Script](https://docs.cpanel.net/whm/scripts/the-manage-greylisting-script/): The /usr/local/cpanel/scripts/manage_greylisting script manages the cPanel Greylisting service's SQLite database (/var/cpanel/greylist/greylist.sqlite). Key options: --init, --reset, --trust <service> (repeatable, for common mail providers), --import/--export of the Trusted Hosts list, and --update_common_mail_providers (with optional --force).
- [The mass_change_php_setting Script](https://docs.cpanel.net/whm/scripts/the-mass-change-php-setting-script/): The /usr/local/cpanel/scripts/mass_change_php_setting script migrates every domain using one ea-php package version to another already-installed ea-php version. Usage: mass_change_php_setting ea-phpXX ea-phpXY [--dryrun] [--verbose] [--help]; --dryrun previews changes and implies --verbose.
- [The migrate_legacy_wordpress_to_modern_wordpress Script](https://docs.cpanel.net/whm/scripts/the-migrate_legacy_wordpress_to_modern_wordpress-script/): The /usr/local/cpanel/scripts/migrate_legacy_wordpress_to_modern_wordpress script (root only, removed in cPanel & WHM 126) converts legacy cPAddon WordPress installations (WordPress version greater than 3.7) to the RPM-based WordPress cPAddon. Key options: --all or --user (repeatable, mutually exclusive) with optional --instance (repeatable), plus --dryrun, --no-color, --verbose, and --help.
- [The modify_accounts Script](https://docs.cpanel.net/whm/scripts/the-modify_accounts-script/): The /usr/local/cpanel/scripts/modify_accounts script (run as root) sets existing cPanel accounts to use a new cPanel theme. Requires --theme, combined with --users (comma-separated list), --all-users, or --all-users-from-reseller (single reseller only).
- [The modify_packages Script](https://docs.cpanel.net/whm/scripts/the-modify_packages-script/): The /usr/local/cpanel/scripts/modify_packages script (run as root) sets existing hosting packages to use a new cPanel theme. Requires --theme, combined with --packages (comma-separated list) or --all-packages; to retheme existing accounts instead of packages, use the companion modify_accounts script.
- [The modsec_vendor Script](https://docs.cpanel.net/whm/scripts/the-modsec_vendor-script/): The /usr/local/cpanel/scripts/modsec_vendor script manages ModSecurity vendors on the server (equivalent to WHM's ModSecurity Vendors interface). Subcommands: list, add <metadata YAML URL>, remove <vendor_id>, update <vendor_id|URL|--auto>, enable/disable <vendor_id>, enable-updates/disable-updates <vendor_id>, and enable-configs/disable-configs <vendor_id>.
- [The onboot_handler Script](https://docs.cpanel.net/whm/scripts/the-onboot_handler-script/): The /usr/local/cpanel/bin/onboot_handler script runs all scripts in the /var/cpanel/on_boot (admin-managed) and /usr/local/cpanel/libexec/on_boot (internal, do not use) directories at system boot, via an @reboot crontab entry. Removed in cPanel & WHM version 122 and later, replaced by the cpanel-onboot system script.
- [The php_fpm_config Script](https://docs.cpanel.net/whm/scripts/the-php_fpm_config-script/): The /usr/local/cpanel/scripts/php_fpm_config script (root only) rebuilds PHP-FPM configuration files and Apache vhost entries from user php-fpm.yaml files and helps troubleshoot PHP-FPM issues. Key options: --rebuild [--domain=domain], --check [--json] (scans configs/.yaml files for inconsistencies), and --convert_all (enables PHP-FPM for all accounts).
- [The pkgacct Script](https://docs.cpanel.net/whm/scripts/the-pkgacct-script/): The /usr/local/cpanel/scripts/pkgacct script (root only, this is the current latest version, 132) creates a compressed cpmove account-transfer archive. Usage: pkgacct [options] USERNAME DIRECTORY, with many --skipX flags to exclude data (mail, mysql, pgsql, cron, DNS zones, quotas, etc.), plus --dbbackup/--dbbackup_mysql, --incremental, --split, --nocompress, --userbackup/--backup, and --allow-override for a custom pkgacct script. This version adds --skipdomainkeys and --skipcustomdmarc, both absent in v102, with --skipcustomdmarc also present in v124.
- [The post_snapshot Script](https://docs.cpanel.net/whm/scripts/the-post_snapshot-script/): The /usr/local/cpanel/scripts/post_snapshot script updates configuration on a system created from a server image; it runs automatically on first boot for images created with the snapshot_prep script, or must be run manually if snapshot_prep used --no-post-service. Its only option is --help.
- [The process_site_templates Script](https://docs.cpanel.net/whm/scripts/the-process_site_templates-script/): The /scripts/process_site_templates script (cannot run as root, removed in cPanel & WHM version 134) processes Site Publisher template files and user-supplied variables to generate and publish a Site Publisher website, backing up the target directory first. Key options: --source (template path), --target (destination directory), --define (repeatable, sets a template variable), and --help.
- [The process_ssl_reissue Script](https://docs.cpanel.net/whm/scripts/the-process_ssl_reissue-script/): Documents the /usr/local/cpanel/bin/process_ssl_reissue WHM script, which scans cPanel accounts for short-term SSL certificates purchased through the cPanel Store that will expire within 10 days and submits reissue requests to the cPanel Store; it runs automatically via cron daily between 2:00 and 5:00 AM local time, or can be run manually with the --user, --dry-run, and --help options.
- [The rebuild_dbmap Script](https://docs.cpanel.net/whm/scripts/the-rebuild_dbmap-script/): The /usr/local/cpanel/scripts/rebuild_dbmap script (root only) rebuilds a cPanel user's corrupted MySQL/PostgreSQL database map file in /var/cpanel/databases/. Usage: rebuild_dbmap dbuser [--noop] [--help]; --noop previews changes without applying them.
- [The rebuild_phpconf Script](https://docs.cpanel.net/whm/scripts/the-rebuild_phpconf-script/): The /usr/local/cpanel/bin/rebuild_phpconf script manages the server's default PHP version and per-version PHP handlers in EasyApache 4, writing to /etc/cpanel/ea4/php.conf (backed up on each change). Key options: --default=version, --<ea-phpVER>=handler, --current, --available, --dryrun, --no-restart, --errors, --no-users, --help.
- [The rebuildhttpdconf Script](https://docs.cpanel.net/whm/scripts/the-rebuildhttpdconf-script/): The /usr/local/cpanel/scripts/rebuildhttpdconf script rebuilds Apache's main httpd.conf configuration file but does not restart Apache (use the restartsrv_httpd script for that). Options: --preview (writes httpd-preview.conf instead of httpd.conf) and --nolock (disables the configuration file lock).
- [The remote_log_transfer Script](https://docs.cpanel.net/whm/scripts/the-remote_log_transfer-script/): Reference for /usr/local/cpanel/scripts/remote_log_transfer, which transfers system and user logs (from /var/log, /usr/local/cpanel/logs, /var/cpanel/logs, /var/cpanel/updatelogs, and user home directories) to a remote backup destination configured in WHM; covers the --action=list|transfer, --destid, --local_dir, --remote_dir, --keep, and --debug options.
- [The remove_dovecot_index_files Script](https://docs.cpanel.net/whm/scripts/the-remove_dovecot_index_files-script/): Reference for /usr/local/cpanel/scripts/remove_dovecot_index_files, which deletes Dovecot index logs and cache files for cPanel mail accounts using --user, --reseller, --all, and --verbose options; useful for clearing corrupted or out-of-sync mailbox index data.
- [The removeacct Script](https://docs.cpanel.net/whm/scripts/the-removeacct-script/): Reference for /usr/local/cpanel/scripts/removeacct, which terminates a cPanel account from the command line; covers the required account argument and the --force, --child-ok, --keep-remote-databases, and --keepdns options.
- [The rescan_user_dovecot_fts Script](https://docs.cpanel.net/whm/scripts/the-rescan_user_dovecot_fts-script/): Reference for /usr/local/cpanel/scripts/rescan_user_dovecot_fts, which triggers a Dovecot full text search (FTS) rescan of a specified user's mailboxes via the required --user option; requires the cpanel-dovecot-solr package to be installed.
- [The restartsrv Script](https://docs.cpanel.net/whm/scripts/the-restartsrv-script/): Reference for /usr/local/cpanel/scripts/restartsrv_<service>, which restarts, stops, starts, reloads, or checks the status of a named service (e.g., apache, exim, dovecot, mysql, cpsrvd) using the check, graceful, hard, notconfigured-ok, reload, restart, start, and stop options; lists all supported service names.
- [The restorepkg Script](https://docs.cpanel.net/whm/scripts/the-restorepkg-script/): Reference for /usr/local/cpanel/scripts/restorepkg (version 130, current), which restores a cPanel account from a backup file; covers --force, --allow_reseller, --ip, --newuser, --skipaccount, --restricted/--unrestricted, --shared_mysql_server, --disable, --mail_location, --keep_local_cpuser_values, and the version-130-only --update_dns_zone option for controlling zonefile restoration during Live Transfers.
- [The secureit Script](https://docs.cpanel.net/whm/scripts/the-secureit-script/): Reference for /usr/local/cpanel/scripts/secureit, which secures file permissions on a cPanel & WHM server; covers the --dryrun, --fast, and --help options.
- [The securemysql Script](https://docs.cpanel.net/whm/scripts/the-securemysql-script/): Reference for /usr/local/cpanel/scripts/securemysql, which secures a server's MySQL configuration by confirming the root password, fixing data directory ownership, and removing anonymous users, remote root access, the test database, and LOCK/TMP TABLES privileges; covers the -a (action), -F, -h, and -q arguments and the chowndatadir, removeanon, removehordeallhosts, removehordeblankpass, removelockntmp, removepublicgrants, removeremoteroot, and removetestdb actions.
- [The securetmp Script](https://docs.cpanel.net/whm/scripts/the-securetmp-script/): Reference for /usr/local/cpanel/scripts/securetmp (version 130, current), which mounts the server's /tmp partition to a secured temporary file, defaulting to 5% of /usr disk space (500MB-4GB) but configurable via the Tweak Settings interface's 'Size, in MB, for the /tmp partition secured by securetmp' setting; covers --auto, --daemonize, --install, --uninstall, and --help options.
- [The servers_queue Script](https://docs.cpanel.net/whm/scripts/the-servers-queue-script/): Reference for /usr/local/cpanel/bin/servers_queue, which manages cPanel & WHM's background task queue system; covers the queue, unqueue, schedule, unschedule, run, and help arguments for adding, removing, delaying, and flushing queued tasks.
- [The servicedomains Script](https://docs.cpanel.net/whm/scripts/the-servicedomains-script/): Reference for /usr/local/cpanel/scripts/servicedomains, which creates or removes DNS records for service subdomains (e.g., cpanel, webmail, autoconfig, autodiscover) via the required add or remove action; covers --user, --domain, --subdomain, --no_replace, --old_autodiscover_host, --force_autodiscover_support, and --ifenabled options.
- [The set_hostname Utility](https://docs.cpanel.net/whm/scripts/the-set_hostname-utility/): Reference for /usr/local/cpanel/bin/set_hostname, which changes the server's hostname and propagates the change across Apache, MySQL, cPHulk, licensing, and the FTP/Exim/Dovecot/cPanel SSL certificates; accepts a fully-qualified hostname argument and the --help option.
- [The set-tls-settings Script](https://docs.cpanel.net/whm/scripts/the-set-tls-settings-script/): Reference for /usr/local/cpanel/bin/set-tls-settings, which configures SSL/TLS cipher suites and protocols for cpdavd, cpsrvd, dovecot, and exim; covers --if-missing, --cipher-suites, --protocols, the service argument (including --all), and --restart/--verbose options.
- [The setup_greylist_db Script](https://docs.cpanel.net/whm/scripts/the-setup_greylist_db-script/): Reference for /usr/local/cpanel/scripts/setup_greylist_db, which initializes or resets the SQLite database used by cPanel's Greylisting service; covers --init, --reset, and --trust (for adding trusted IP ranges for services like aol, google, microsoft, and yahoo) options.
- [The setupftpserver script](https://docs.cpanel.net/whm/scripts/the-setupftpserver-script/): Reference for /usr/local/cpanel/scripts/setupftpserver, which selects the server's FTP server (pure-ftpd or proftpd), disables FTP, or enables anonymous FTP; covers --force, --current, and --enable-anonymous options.
- [The setupmailserver Script](https://docs.cpanel.net/whm/scripts/the-setupmailserver-script/): Reference for /usr/local/cpanel/scripts/setupmailserver, which selects or disables the server's mail server (dovecot or disabled); covers --force, --current, and --help options.
- [The show_php_settings Script](https://docs.cpanel.net/whm/scripts/the-show-php-settings-script/): Reference for /usr/local/cpanel/scripts/show_php_settings, which displays PHP settings for all domains on the server; supports the --help option.
- [The slurp_exim_mainlog Script](https://docs.cpanel.net/whm/scripts/the-slurp_exim_mainlog-script/): Reference for /usr/local/cpanel/scripts/slurp_exim_mainlog, which imports unarchived Exim exim_mainlog .gz files (once every seven days by default) into the eximstats database, subject to Exim's log retention setting; covers --reimport and --force options to bypass the wait period.
- [The snapshot_prep Script](https://docs.cpanel.net/whm/scripts/the-snapshot_prep-script/): Documents the /usr/local/cpanel/scripts/snapshot_prep script (version 120, the latest) that prepares a server for creating a deployment image; covers the same options as earlier versions (--no-post-service, --list-tasks, --skip, --only, --instance-packages, --delete-saved-copies) plus the deps and before keys for customizing third-party plugin dependencies in /var/cpanel/snapshot_prep.d .json files.
- [The spf_installer Script](https://docs.cpanel.net/whm/scripts/the-spf_installer-script/): Documents the /usr/local/cpanel/bin/spf_installer script, which adds an SPF record to all of a user's domains' zone files from the command line using positional arguments username, policy, is_complete, overwrite, and preserve.
- [The suspendacct Script](https://docs.cpanel.net/whm/scripts/the-suspendacct-script/): Documents the /usr/local/cpanel/scripts/suspendacct script, which suspends one cPanel account at a time from the command line; supports a suspension reason, the disallow option to restrict unsuspension to root, and flags --child-ok, --force, and --leave-ftp-accts-enabled.
- [The swapip Script](https://docs.cpanel.net/whm/scripts/the-swapip-script/): Documents the /usr/local/cpanel/bin/swapip script, which updates a domain's IP address (A record) in its DNS zone file during cPanel account transfers, using the required sourceip, destip, ftpip, and domains arguments.
- [The sync_child_accounts Script](https://docs.cpanel.net/whm/scripts/the-sync_child_accounts-script/): Documents the /usr/local/cpanel/scripts/sync_child_accounts script, which synchronizes a distributed cPanel account's user configuration between a parent node and its child nodes, using the --user option for a single account or --all for every distributed account.
- [The transfer_account_as_user Script](https://docs.cpanel.net/whm/scripts/the-transfer_account_as_user-script/): Documents the /usr/local/cpanel/scripts/transfer_account_as_user script, which transfers a cPanel account from a remote server to the local server using password-based authentication as that cPanel account; key options include --host, --user, --enqueue, and --session.
- [The transfer_accounts_as_root Script](https://docs.cpanel.net/whm/scripts/the-transfer_accounts_as_root-script/): Documents the /usr/local/cpanel/scripts/transfer_accounts_as_root script, which transfers one or more cPanel accounts from a remote server to the local server as the root user via SSH key or password; key options include --host, --user, --sshkey, --enqueue (e.g., live_transfer=1), and --session.
- [The try-later Script](https://docs.cpanel.net/whm/scripts/the-try-later-script/): Documents the /usr/local/cpanel/scripts/try-later script, which runs a user-defined --check command at intervals and, on success, runs a user-defined --action command (or an --act-finally command after exhausting --max-retries); other options include --at, --delay, --has-jobs, and --skip-first.
- [The uninstall_plugin Script](https://docs.cpanel.net/whm/scripts/the-uninstall_plugin-script/): Documents the /usr/local/cpanel/scripts/uninstall_plugin script, which uninstalls a cPanel plugin by removing its entries from dynamicui.conf using the plugin archive's install.json file; takes a required filepath (.tar.gz, .bzip2, .zip, or directory) and an optional --theme option (defaults to jupiter).
- [The unsuspendacct Script](https://docs.cpanel.net/whm/scripts/the-unsuspendacct-script/): Documents the /usr/local/cpanel/scripts/unsuspendacct script, which unsuspends a cPanel account from the command line; options include --child-ok to unsuspend a distributed account via a child node and --retain-service-proxies to keep current service proxy settings instead of the default of disabling them.
- [The upcp-running Script](https://docs.cpanel.net/whm/scripts/the-upcp-running-script/): Documents the /usr/local/cpanel/scripts/upcp-running script, which reports whether the upcp script is currently running, returning "upcp is running." or "upcp is not running."; the --invert-exit option returns a non-zero exit code when upcp is running.
- [The upcp Script](https://docs.cpanel.net/whm/scripts/the-upcp-script/): Documents the /usr/local/cpanel/scripts/upcp script, which updates cPanel & WHM from the command line; options include --bg (background run with logs in /var/cpanel/updatelogs), --cron (use /etc/cpupdate.conf settings), --force (reinstall all files), --sync (repair current version without upgrading), and --log to set a custom log path.
- [The update_existing_mail_quotas_for_account Script](https://docs.cpanel.net/whm/scripts/the-update_existing_mail_quotas_for_account-script/): Documents the /usr/local/cpanel/scripts/update_existing_mail_quotas_for_account script, which updates the email account quota for a given user or for all users on the system; options include --all, --user <username>, and --quota <quota_in_megabytes> (0 for unlimited/maximum allowed).
- [The view_transfer Script](https://docs.cpanel.net/whm/scripts/the-view_transfer-script/): Documents the /usr/local/cpanel/bin/view_transfer script, which displays the logs for a WHM Transfer Tool transfer or restore session given a required sessionID, an optional logfile name (or master.log/master.error_log), and an --overview flag for a progress summary only; must be run as root.
- [The wwwacct Script](https://docs.cpanel.net/whm/scripts/the-wwwacct-script/): Documents the /usr/local/cpanel/scripts/wwwacct script, which creates a new cPanel account from the command line using positional arguments domain, user, and pass followed by optional settings for quota, cpmod, ip, cgi, maxftp, maxsql, maxpop, maxlst, maxsub, bwlimit, hasshell, owner, plan, maxpark, maxaddon, featurelist, contactemail, nameservers, language, spamassassin, max_emailacct_quota, and spambox.
- [WHM Scripts](https://docs.cpanel.net/whm/scripts/whm-scripts/): Reference index of built-in cPanel & WHM version 138 (latest version) command-line scripts installed to /usr/local/cpanel/scripts and /usr/local/cpanel/bin, listing each script's purpose with links to detailed documentation. Covers account lifecycle scripts (wwwacct, removeacct, suspendacct, unsuspendacct, restorepkg, pkgacct, transfer_accounts_as_root), backup and restore scripts (backup, backups_create_metadata, backup_restore_manager), DNS and mail scripts (cleandns, dnssec-cluster-keys, spf_installer, enable_spf_dkim_globally, setupmailserver), security and SSL/TLS scripts (secureit, securemysql, modsec_vendor, checkallsslcerts, set-tls-settings), and PHP/EasyApache management scripts (rebuild_phpconf, php_fpm_config, mass_change_php_setting, show_php_settings).
- [Apache mod_userdir Tweak](https://docs.cpanel.net/whm/security-center/apache-mod_userdir-tweak/): The Apache mod_userdir Tweak interface (WHM >> Home >> Security Center >> Apache mod_userdir Tweak) lets administrators disable the Apache mod_userdir module, which otherwise lets visitors access a user's website via a URL containing that user's username (for example, https://host.example.com/~username). Disabling it is recommended for most users for security, but it must stay enabled to support shared SSL certificates.
- [Compiler Access](https://docs.cpanel.net/whm/security-center/compiler-access/): The Compiler Access interface (WHM >> Home >> Security Center >> Compiler Access) lets administrators enable or disable server-wide user access to the C and C++ compilers (for example, /usr/bin/gcc) to help protect against attacks that exploit compiler vulnerabilities. Disabling access restricts the compiler to the root user and the compiler group, and administrators can grant specific users compiler access via the Manage Compiler Group interface.
- [Configure Security Policies](https://docs.cpanel.net/whm/security-center/configure-security-policies/): The Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies) lets administrators set server-wide security policies for cPanel, WHM, and Webmail accounts, including requiring security questions for logins from unverified IP addresses, enabling Google Authenticator two-factor authentication, enforcing minimum password strength, and setting a maximum password age. It also controls whether these policies extend to WHM API requests and DNS cluster requests.
- [cPHulk Brute Force Protection](https://docs.cpanel.net/whm/security-center/cphulk-brute-force-protection/): The cPHulk Brute Force Protection interface (WHM >> Home >> Security Center >> cPHulk Brute Force Protection) configures cPHulk, a service that detects and blocks brute force login attempts against cPanel, WHM, mail (Dovecot/Exim), Pure-FTPd, and SSH services. Settings include username- and IP-based protection thresholds, brute force protection periods, one-day IP blocks, whitelist management, and notification options.
- [Host Access Control](https://docs.cpanel.net/whm/security-center/host-access-control/): The Host Access Control interface (WHM >> Home >> Security Center >> Host Access Control) lets administrators allow, reject, or drop access to cPanel, WHM, Webmail, Web Disk, FTP, SSH, SMTP, POP3, and IMAP services for specific IP addresses or CIDR subnets. On CloudLinux, AlmaLinux OS, and Rocky Linux servers, access is instead controlled by port number via nftables rules; this version 112 (the latest version) generalizes this port-based control to CloudLinux broadly, rather than naming CloudLinux 8 specifically as in version 110.
- [Manage External Authentications](https://docs.cpanel.net/whm/security-center/manage-external-authentications/): The Manage External Authentications interface (WHM >> Home >> Security Center >> Manage External Authentications) lets administrators configure and manage OpenID Connect-compliant identity providers (such as cPanelID via Google) so users can log in to cPanel, WHM, or Webmail with third-party credentials over SSL. It covers configuring provider settings (Client ID, Client Secret, Redirect URI), enabling/disabling providers per service, and managing or unlinking linked user credentials.
- [Manage root's SSH Keys](https://docs.cpanel.net/whm/security-center/manage-root-ssh-keys/): The Manage root's SSH Keys interface (WHM >> Home >> Security Center >> Manage root's SSH Keys) lets administrators generate new SSH key pairs, import existing public/private keys (including PPK files), and manage authorization, viewing, downloading, and deletion of the root SSH keys stored on the server. Keys must be authorized before they can be used to log in.
- [Manage Sudo Group Users](https://docs.cpanel.net/whm/security-center/manage-sudo-group-users/): The Manage Sudo Group Users interface (WHM >> Home >> Security Center >> Manage Sudo Group Users) lets administrators add or remove users from the sudo group, whose members can execute the su command to gain root or superuser access; it does not by itself grant permission to run the sudo command, which requires manually editing /etc/sudoers. This interface appears on servers running Ubuntu as the operating system; other operating systems use the equivalent Manage Wheel Group Users interface.
- [Manage Wheel Group Users](https://docs.cpanel.net/whm/security-center/manage-wheel-group-users/): The Manage Wheel Group Users interface (WHM >> Home >> Security Center >> Manage Wheel Group Users) lets administrators add or remove users from the wheel group, whose members can execute the su command to gain root or superuser access; it does not by itself grant permission to run the sudo command, which requires manually editing /etc/sudoers. This interface appears on servers not running Ubuntu as the operating system; Ubuntu servers use the equivalent Manage Sudo Group Users interface.
- [ModSecurity® Configuration](https://docs.cpanel.net/whm/security-center/modsecurity-configuration/): The ModSecurity Configuration interface (WHM >> Home >> Security Center >> ModSecurity Configuration) lets administrators configure ModSecurity's global Apache directives, including audit log level (SecAuditEngine), connections and rules engine modes, backend compression, geolocation and Google Safe Browsing database paths, guardian log piping, Project Honey Pot API key, and PCRE match limits.
- [ModSecurity® Tools](https://docs.cpanel.net/whm/security-center/modsecurity-tools/): The ModSecurity Tools interface (WHM >> Home >> Security Center >> ModSecurity Tools) requires the ModSecurity Apache module and lets administrators view the Hits List of triggered rule events, report problematic vendor rules, and manage the Rules List by adding, editing, copying, enabling/disabling, and deleting ModSecurity rules (vendor rules cannot be edited or deleted here). It also documents the setup_modsec_db script for manually creating the ModSecurity database.
- [ModSecurity® Vendors](https://docs.cpanel.net/whm/security-center/modsecurity-vendors/): The ModSecurity Vendors interface (WHM >> Home >> Security Center >> ModSecurity Vendors) requires the ModSecurity Apache module and lets administrators install third-party ModSecurity rule vendors via URL or package manager, install cPanel-provided vendors such as the OWASP ModSecurity Core Rule Set, and enable/disable vendors, their automatic updates, or individual configuration files, or delete a vendor entirely.
- [Password Strength Configuration](https://docs.cpanel.net/whm/security-center/password-strength-configuration/): The Password Strength Configuration interface (WHM >> Home >> Security Center >> Password Strength Configuration) lets administrators set minimum required password strength (rated 0-100, rounded up to the nearest 5) for individual cPanel & WHM features that require password authentication, plus a default minimum for features left at their default. For distributed cPanel accounts, the parent node controls the main account password strength while child nodes control other passwords such as email and mailing list passwords; enforcement for existing accounts also requires enabling the Password Strength setting in Configure Security Policies.
- [Security Advisor](https://docs.cpanel.net/whm/security-center/security-advisor/): The Security Advisor interface (WHM >> Home >> Security Center >> Security Advisor) automatically scans the server for security issues on load and displays findings as Red (warning), Yellow (possible issue), Blue (informational), or Green (resolved) alerts, most with links to the relevant WHM interface (for example, cPHulk Brute Force Protection) to resolve the issue. Administrators can click Scan Again to re-verify that issues are resolved; some options may be unavailable on VPS environments like QEMU/KVM or Virtuozzo.
- [Security Questions](https://docs.cpanel.net/whm/security-center/security-questions/): The Security Questions interface (WHM >> Home >> Security Center >> Security Questions) lets a WHM user edit their own security questions and answers, and add, view, or remove IP addresses (including wildcard subnets) recognized as verified so logins from those addresses skip the security question prompt. Changes here apply only to the individual WHM account, not to other WHM, cPanel, or Webmail accounts; requiring security questions at login is controlled separately via Configure Security Policies.
- [Shell Fork Bomb Protection](https://docs.cpanel.net/whm/security-center/shell-fork-bomb-protection/): WHM's Shell Fork Bomb Protection interface (Security Center) enables or disables ulimit-based restrictions on SSH/Telnet users to prevent fork bombs, limiting core file size, data segment size, resident set size, open file descriptors, stack size, and process count (default 35 per user).
- [SMTP Restrictions](https://docs.cpanel.net/whm/security-center/smtp-restrictions/): WHM's SMTP Restrictions interface (Security Center) restricts direct outbound SMTP connections so only the mail transport agent (MTA), Mailman, and root can connect to remote SMTP servers, preventing users and services from bypassing the mail server to send spam; the maximum simultaneous incoming SMTP call limit is configured separately in Exim Configuration Manager.
- [SSH Password Authorization Tweak](https://docs.cpanel.net/whm/security-center/ssh-password-authorization-tweak/): WHM's SSH Password Authorization Tweak interface (Security Center) enables or disables password-based SSH authentication; disabling it forces all users, including root, to authenticate with SSH keys, and the status is stored via the PasswordAuthentication and ChallengeResponseAuthentication directives in /etc/ssh/sshd_config.
- [Traceroute Enable/Disable](https://docs.cpanel.net/whm/security-center/traceroute-enable-disable/): WHM's Traceroute Enable/Disable interface (Security Center) toggles the server's traceroute network diagnostic tool by changing permissions on /bin/traceroute (755 enabled, 700 disabled); disabled by default and unrelated to cPanel's Track Delivery feature.
- [Two-Factor Authentication for WHM](https://docs.cpanel.net/whm/security-center/two-factor-authentication-for-whm/): WHM's Two-Factor Authentication interface (Security Center) lets the root user enable a 2FA security policy requiring a TOTP app code (e.g., Google Authenticator, Duo Mobile) at cPanel & WHM login, with tabs to set the Issuer name (Settings), disable 2FA on accounts (Manage Users), and configure 2FA for root or privileged resellers (Manage My Account); it also supports 2FA for API authentication. Unlike version 82, this version also extends 2FA to Webmail logins.
- [Basic WebHost Manager Setup](https://docs.cpanel.net/whm/server-configuration/basic-webhost-manager-setup/): WHM's Basic WebHost Manager Setup interface (Server Configuration) configures core server settings: contact addresses and alert channels (email, SMS/pager, Pushbullet, ICQ, webhook POST, Slack) for problem notifications; basic config such as shared IPv4/IPv6 addresses, Ethernet device, home directory paths, Webmail default theme, cgi-bin script aliasing, DNS TTL values, and Apache log format; and primary/secondary/tertiary/quaternary nameservers with A/AAAA record management.
- [Change Root Password](https://docs.cpanel.net/whm/server-configuration/change-root-password/): WHM's Change Root Password interface (Server Configuration) lets the root user, or a reseller with root privileges, set a new root password without providing the old one; it shows a password strength meter, and minimum strength requirements are set via WHM's Password Strength Configuration interface.
- [CloudLinux Manager](https://docs.cpanel.net/whm/server-configuration/cloudlinux-manager/): WHM's CloudLinux Manager interface (Server Configuration) displays LVE Manager (Lightweight Virtual Environment) resource usage information for accounts; available only to root-level users on CloudLinux servers.
- [Configure cPanel Analytics](https://docs.cpanel.net/whm/server-configuration/configure-cpanel-analytics/): WHM's Configure cPanel Analytics interface (Server Configuration) toggles Interface Analytics, which collects anonymized user-behavior data across cPanel, WHM, and Webmail interfaces at the server level; account-level collection must also be separately enabled by each user, and mandatory Configuration Analytics cannot be disabled here.
- [Configure cPanel Cron Jobs](https://docs.cpanel.net/whm/server-configuration/configure-cpanel-cron-jobs/): WHM's Configure cPanel Cron Jobs interface (Server Configuration) sets the minute/hour/day/month/weekday schedule for the upcp update script (default: random between 9 PM-6 AM), the backup script (default: 2 AM), and the legacy cpbackup script (default: 1 AM).
- [Enable Quotas on a Virtuozzo VPS](https://docs.cpanel.net/whm/server-configuration/enable-quotas-on-a-virtuozzo-vps/): Documents the extra steps needed to re-enable both first-level (per-container, via vzquota) and second-level (per-user/group, via the QUOTAUGIDLIMIT parameter) disk quotas on a Virtuozzo VPS after they have been disabled; applies only to cPanel & WHM servers running on Virtuozzo.
- [Initial Quota Setup](https://docs.cpanel.net/whm/server-configuration/initial-quota-setup/): WHM's Initial Quota Setup interface (Server Configuration) runs the /scripts/initquotas script to scan and enable cPanel disk-space and inode quotas on directories where cPanel users store files (ignoring /home mounts using no, noauto, or loop options); requires kernel quota support, and after disabling/re-enabling quotas on XFS filesystems you must rerun fixquotas and remount.
- [Link Server Nodes](https://docs.cpanel.net/whm/server-configuration/link-server-nodes/): WHM's Link Server Nodes interface (Server Configuration, Standard profile only) creates and manages linkages to child servers (e.g., Mail-profile nodes) to offload account services, covering the Create a New Connection workflow (hostname, friendly name, root password), the Manage Settings view for distributed accounts and hostname sync, and force-dedistribution of accounts from an unreachable child node.
- [Server Profile](https://docs.cpanel.net/whm/server-configuration/server-profile/): WHM's Server Profile interface (Server Configuration, root-only) selects a server's role — Standard, DNS, Mail, or Database — to enable or disable relevant services and optionally toggle roles such as MySQL/MariaDB, PostgreSQL, or Spam Filter, then walks through Select Options, Review Changes, and Activating Profile steps to apply the new profile.
- [Server Time](https://docs.cpanel.net/whm/server-configuration/server-time/): WHM's Server Time interface (Server Configuration) sets the server's time zone (UTC recommended) and synchronizes the clock with the network time server via the timedatectl command; a reboot is needed to fully apply time zone changes, and accurate server time is required for cPanel & WHM license validation.
- [Statistics Software Configuration](https://docs.cpanel.net/whm/server-configuration/statistics-software-configuration/): Documents WHM's Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration), covering configuration of the Analog, AWStats, and Webalizer statistics generators, per-user statistics status and processing, user permissions to change stats software, and the Log Processing Frequency and Bandwidth Processing Frequency schedule settings.
- [Terminal in WHM](https://docs.cpanel.net/whm/server-configuration/terminal-in-whm/): Documents WHM's Terminal interface (WHM >> Home >> Server Configuration >> Terminal), an in-browser terminal for direct command-line access during a cPanel & WHM session, including reseller ACL requirements, session warning acknowledgment, and how to terminate or reconnect a session.
- [Tweak Settings](https://docs.cpanel.net/whm/server-configuration/tweak-settings/): Overview of WHM's Tweak Settings interface (version 130, latest), which configures cPanel & WHM settings stored in /var/cpanel/cpanel.config, organized into tabbed sections including Compression, Development, Display, Domains, Logging, Mail, Notifications, Packages, PHP, Redirection, Security, Software, SQL, Stats and Logs, Stats Programs, Status, Support, and System (no cPAddons Site Software section, which was removed in version 126).
- [Tweak Settings — Compression](https://docs.cpanel.net/whm/server-configuration/tweak-settings/compression/): Documents the Compression section of WHM's Tweak Settings interface (version 124), covering the gzip compression level, number of pigz processes, and kilobyte chunks per compression work unit settings used by the pigz multi-core gzip compression tool; settings are unchanged from version 110.
- [Tweak Settings — cPAddons Site Software](https://docs.cpanel.net/whm/server-configuration/tweak-settings/cpaddons-site-software/): Documents the cPAddons Site Software section of WHM's Tweak Settings interface (version 124; not shown on Ubuntu servers), covering settings for the cPAddons admin email, automatic source updates, moderation request limits, moderation notifications, allowing installs from non-cPanel or modified sources, and reseller/root/user update notifications; this section was removed entirely starting in version 126.
- [Tweak Settings — Development](https://docs.cpanel.net/whm/server-configuration/tweak-settings/development/): Documents the Development section of WHM's Tweak Settings interface (version 124), covering the Standardized Hooks Debug Mode and User Interface Debug Mode settings used to troubleshoot hooks and cPanel interface generation; settings are unchanged from version 110.
- [Tweak Settings — Display](https://docs.cpanel.net/whm/server-configuration/tweak-settings/display/): Documents the Display section of WHM's Tweak Settings interface (version 124), covering the default login theme, displaying inode/File Usage information in the cPanel stats bar, the number of accounts and Upgrade Opportunities column shown in WHM's List Accounts interface, and the added Display announcement banner setting for the cPanel interface.
- [Tweak Settings — Domains](https://docs.cpanel.net/whm/server-configuration/tweak-settings/domains/): Documents the Domains section of WHM's Tweak Settings interface (version 124), covering the same subdomain, remote domain, DKIM/SPF, DNS zone check, service subdomain, and Outlook/Thunderbird autodiscover settings as version 110, plus the added Enable DMARC on domains for newly created accounts and Share the document root by default when creating a domain settings; SSL certificate replacement now uses Let's Encrypt certificates.
- [Tweak Settings — Logging](https://docs.cpanel.net/whm/server-configuration/tweak-settings/logging/): Documents the Logging section of WHM's Tweak Settings interface (version 124), covering the dnsadmin logging level, verbose DNS zone sync logging, logging of successful logins, and the cPanel API Log setting; settings are unchanged from version 110.
- [Tweak Settings — Mail](https://docs.cpanel.net/whm/server-configuration/tweak-settings/mail/): Documents WHM's Tweak Settings Mail category, covering settings such as max hourly emails per domain, mailbox storage format, default catch-all forwarder destination, email delivery retry time, spam/deferred-message limiting, Pop-before-SMTP relay, BoxTrapper, email archiving, Mailman, Roundcube, and Apache SpamAssassin.
- [Tweak Settings — Notifications](https://docs.cpanel.net/whm/server-configuration/tweak-settings/notifications/): Documents WHM's Tweak Settings Notifications category, covering settings such as system disk space usage warnings, disk quota "warn"/"critical"/"full" percentage thresholds, out of memory warnings, mailbox usage warnings, bandwidth limit checks, bandwidth usage warning percentages, and SSL certificate expiry notifications.
- [Tweak Settings — Packages](https://docs.cpanel.net/whm/server-configuration/tweak-settings/packages/): Documents WHM's Tweak Settings Packages category, which configures default resource limits (default maximum email quota, default disk usage quota, and default bandwidth limit) applied to new packages for resellers who lack unlimited-quota ACL privileges.
- [Tweak Settings — PHP](https://docs.cpanel.net/whm/server-configuration/tweak-settings/php/): Documents WHM's Tweak Settings PHP category, which configures cPanel & WHM's internal PHP (not the web server's PHP): cPanel PHP max execution time, memory limit, max POST size, max upload size, and cPanel PHP loader (ioncube or sourceguardian).
- [Tweak Settings — Redirection](https://docs.cpanel.net/whm/server-configuration/tweak-settings/redirection/): Documents WHM's Tweak Settings Redirection category, which configures SSL and non-SSL redirects for cPanel, WHM, and Webmail: automatic SSL/TLS redirection based on certificate matching, non-SSL redirect destination, SSL redirect destination, and post-logout redirection URL.
- [Tweak Settings — Security](https://docs.cpanel.net/whm/server-configuration/tweak-settings/security/): Documents the Security category of WHM's Tweak Settings interface (cPanel & WHM version 136, the latest version), covering settings such as cookie IP validation, blank/referrer safety checks, SSL/TLS key type selection, core dump generation, and CalDAV/CardDAV DoS protection. Adds the "Enforce SSL peer verification for account transfers" setting and removes the "Enforce SSL peer verification for DNS cluster peers" setting found in earlier versions.
- [Tweak Settings — Software](https://docs.cpanel.net/whm/server-configuration/tweak-settings/software/): Documents the Software category of WHM's Tweak Settings interface (cPanel & WHM version 124, the latest version), covering dormant-service settings for the cpdavd (WebDAV and CalDAV/CardDAV), cphulkd, cpsrvd, dnsadmin, and spamd daemons, nightly maintenance cPanel RPM checks (including RPM digest verification), and phpMyAdmin information schema searches.
- [Tweak Settings — SQL](https://docs.cpanel.net/whm/server-configuration/tweak-settings/sql/): Documents the SQL category of WHM's Tweak Settings interface (cPanel & WHM version 124, the latest version), covering settings for including databases in disk usage calculations via INFORMATION_SCHEMA, auto-tuning the configured database service's open_files_limit, max_allowed_packet, and innodb_buffer_pool_size, and requiring database/username prefixes for MySQL, MariaDB, and PostgreSQL.
- [Tweak Settings — Stats and Logs](https://docs.cpanel.net/whm/server-configuration/tweak-settings/stats-and-logs/): Documents the WHM Tweak Settings "Stats and Logs" category (version 126, current), covering settings such as AWStats update permission for cPanel users, deleting or archiving domain access logs after statistics runs, FTP and Apache log file retention, log rotation size threshold, stats log verbosity level, Exim stats retention period, ModSecurity hit record retention, upcp log purge interval, and a web server log retention setting not present in version 110.
- [Tweak Settings — Stats Programs](https://docs.cpanel.net/whm/server-configuration/tweak-settings/stats-programs/): Documents the WHM Tweak Settings "Stats Programs" category (version 124, current), covering enabling or disabling the Analog, AWStats, and Webalizer statistical analysis programs and configuring AWStats reverse DNS resolution for site visitor tracking. Settings are identical to version 110.
- [Tweak Settings — Status](https://docs.cpanel.net/whm/server-configuration/tweak-settings/status/): Documents the WHM Tweak Settings "Status" category (version 124, current), which contains a single setting, Critical load threshold, that sets the minimum CPU load at which WHM's Service Status interface and cPanel's Server Information interface display a server load warning. Identical to version 110.
- [Tweak Settings — Support](https://docs.cpanel.net/whm/server-configuration/tweak-settings/support/): Documents the WHM Tweak Settings "Support" category (version 124, current), covering whether cPanel interfaces display documentation help links, whether anonymized error reports are sent to WebPros International, LLC for analysis, and the retention interval for update analysis log files. Identical to version 110.
- [Tweak Settings — System](https://docs.cpanel.net/whm/server-configuration/tweak-settings/system/): Documents the WHM Tweak Settings "System" category, which configures core cPanel & WHM server behavior such as cPanel user account access, Apache SSL/non-SSL ports, DNS server reload deferral, ChkServd check intervals, the CalDAV/CardDAV max upload size, I/O priority levels, jailshell /proc and suid mount options (for AlmaLinux, Rocky Linux, and CloudLinux), the securetmp /tmp partition size, and firewall changes during account modification.
- [Update Preferences](https://docs.cpanel.net/whm/server-configuration/update-preferences/): WHM's Update Preferences interface (version 118) for configuring how the server performs cPanel & WHM software updates and upgrades: select a release tier (LTS, STABLE, RELEASE, CURRENT, or EDGE), set the update staging directory, and optionally sync these settings to configuration cluster servers. In this version, automatic upgrade delays apply only to servers on the RELEASE tier (EDGE, CURRENT, STABLE, and LTS are not delayed).
- [The WHM Marketplace](https://docs.cpanel.net/whm/server-configuration/whm-marketplace/): WHM's WHM Marketplace interface for managing third-party software licenses and products on the server: view license status (active or inactive) and expiration dates, install or uninstall products with active licenses, manage licenses via the Manage2 interface, and add free or paid extensions through the Add Extensions interface.
- [Contact Manager](https://docs.cpanel.net/whm/server-contacts/contact-manager/): WHM's Contact Manager interface (WHM >> Home >> Server Contacts >> Contact Manager) configures root's notification preferences by communication type (email, Post to URL, Pushbullet, Slack) and alert priority (High, Medium, Low). It also lists alert types, their triggering events, and the notification template files the server uses to generate each alert.
- [Edit System Mail Preferences](https://docs.cpanel.net/whm/server-contacts/edit-system-mail-preferences/): The WHM Edit System Mail Preferences interface lets administrators set up email forwarders for system email accounts (root, nobody, cpanel) to another email account, redirecting notifications about server status, CGI bounces, and cPanel account alerts.
- [Apache Status](https://docs.cpanel.net/whm/server-status/apache-status/): The WHM Apache Status interface displays real-time Apache (httpd) server statistics, including server version, uptime, CPU usage, total traffic and requests, and a scoreboard showing the status of each Apache worker process.
- [Daily Process Log](https://docs.cpanel.net/whm/server-status/daily-process-log/): The WHM Daily Process Log interface shows per-user and per-process CPU and memory consumption for a selected day, including a Usage by User table and a Top Processes table, based on data collected every five minutes by the dcpumon cron job.
- [Server Information](https://docs.cpanel.net/whm/server-status/server-information/): The WHM Server Information interface displays hardware and system details, including processor information, memory information, system information (OS, hostname, chipset), physical disks, and current memory and disk usage.
- [Service Status](https://docs.cpanel.net/whm/server-status/service-status/): The WHM Service Status interface lists the status (up, down, or pending) of server-monitored services such as Apache, Exim, MySQL, and cPanel daemons, along with system load, memory, swap, and disk usage information.
- [Task Queue Monitor](https://docs.cpanel.net/whm/server-status/task-queue-monitor/): The WHM Task Queue Monitor interface displays cPanel & WHM's task queue in real time, showing task status (processing, pending, scheduled, deferred) and optional details such as command, enqueue time, process ID, remaining retries, timeout, and task ID.
- [Apache Configuration](https://docs.cpanel.net/whm/service-configuration/apache-configuration/): The WHM Apache Configuration page is a collection of features for configuring the Apache web server, linking to Global Configuration, DirectoryIndex Priority, Include Editor, Reserved IP Address Editor, Memory Usage Restrictions, Log Rotation, and Piped Log Configuration interfaces.
- [cPanel Log Rotation Configuration](https://docs.cpanel.net/whm/service-configuration/cpanel-log-rotation-configuration/): The WHM cPanel Log Rotation Configuration interface lets administrators select which cPanel & WHM log files the cpanellogd daemon compresses and archives monthly into /usr/local/cpanel/logs/archive/.
- [cPanel Web Disk Configuration](https://docs.cpanel.net/whm/service-configuration/cpanel-web-disk-configuration/): The WHM cPanel Web Disk Configuration interface allows administrators to edit the TLS/SSL cipher suite and protocol lists used to negotiate secure Web Disk network connections.
- [cPanel Web Services Configuration](https://docs.cpanel.net/whm/service-configuration/cpanel-web-services-configuration/): The WHM cPanel Web Services Configuration interface allows administrators to edit the TLS/SSL Cipher List and Protocol list used for secure connections to cPanel, WHM, and Webmail.
- [DirectoryIndex Priority](https://docs.cpanel.net/whm/service-configuration/directoryindex-priority/): The WHM DirectoryIndex Priority interface lets administrators specify which filenames Apache recognizes and displays as directory index pages, and set the priority order Apache uses when multiple index files exist in a directory.
- [Exim Configuration Manager Basic Editor](https://docs.cpanel.net/whm/service-configuration/exim-configuration-manager-basic-editor/): The WHM Exim Configuration Manager Basic Editor interface (WHM >> Home >> Service Configuration >> Exim Configuration Manager) configures Exim mail server settings across the ACL Options, Access Lists, Domains and IPs, Filters, Mail, RBLs, Security, and Apache SpamAssassin™ Options tabs, including spam score thresholds, HELO requirements, smarthost and SRS configuration, RBL blocklists, and SSL/TLS cipher settings.
- [Exim Configuration Manager](https://docs.cpanel.net/whm/service-configuration/exim-configuration-manager/): The WHM Exim Configuration Manager interface provides Basic and Advanced editors for modifying the Exim mail transfer agent's configuration, including SMTP settings, custom ACLs, RBL skipping, smarthost authentication, plus tools to backup, restore, and reset the Exim configuration.
- [FTP Server Configuration](https://docs.cpanel.net/whm/service-configuration/ftp-server-configuration/): Configures behavior for the FTP server (ProFTPD or Pure-FTPd) selected in WHM's FTP Server Selection interface, including TLS/SSL encryption requirements and cipher suites, anonymous login and upload permissions, idle timeout, maximum connections or processes, and symlink display settings.
- [FTP Server Selection](https://docs.cpanel.net/whm/service-configuration/ftp-server-selection/): Lets administrators select which FTP server daemon (ProFTPD or Pure-FTPd) WHM uses, or disable FTP services entirely; also compares the two daemons' features (transfer speed, statistics, virtual user quotas, bandwidth reporting) and links to troubleshooting for unmanaged FTP setups.
- [Global Configuration](https://docs.cpanel.net/whm/service-configuration/global-configuration/): Configures advanced Apache HTTP Server directives in WHM, including SSL/TLS cipher suites and protocols, OCSP stapling, logging (LogLevel, LogFormat), server signature/tokens, MPM worker limits (Start Servers, Max Request Workers, Max Connections Per Child), Keep-Alive settings, timeouts, and symlink race condition protection.
- [Include Editor](https://docs.cpanel.net/whm/service-configuration/include-editor/): WHM's Include Editor interface lets administrators inject custom configuration content into Apache's httpd.conf file via the Include directive, choosing whether to insert it before the main config section, before VirtualHost entries, or after VirtualHost entries, and whether it applies to all Apache versions or only a specific one.
- [Log Rotation](https://docs.cpanel.net/whm/service-configuration/log-rotation/): WHM's Apache Log Rotation interface (Service Configuration >> Apache Configuration >> Log Rotation) lets administrators choose which Apache log files (error_log, access_log, modsec_debug_log, suexec_log) the cpanellogd daemon compresses and archives; distinct from the separate cPanel Log Rotation Configuration interface used for WHM and cPanel logs.
- [Mailserver Configuration](https://docs.cpanel.net/whm/service-configuration/mailserver-configuration/): Configures the Dovecot mail server's POP3, IMAP, and LMTP settings in WHM, including protocol enablement, SSL/TLS cipher suite and minimum protocol, plaintext authentication policy, process and memory limits, per-IP connection limits, quota and trash/spam auto-expunge policies, message compression, and mdbox rotation; also documents customizing the dovecot.conf, sni.conf, and ssl.conf templates. Adds (vs. version 104) options to allow weak authentication hashing schemes and to include service subdomains in SNI configuration.
- [Manage Service SSL Certificates](https://docs.cpanel.net/whm/service-configuration/manage-service-ssl-certificates/): The Manage Service SSL Certificates interface in WHM lets administrators view, reset, and install SSL certificates for server services such as Exim, POP3/IMAP, cPanel/WHM, and FTP. It supports free Let's Encrypt certificates (replacing the free cPanel-signed hostname certificate offered in version 92), CA-issued certificates, and self-signed certificates, and provides actions to reset a certificate, view certificate details, or apply one certificate to multiple services; this version no longer includes the iOS Mail Push Notifications (APNs) section present in version 92.
- [Memory Usage Restrictions](https://docs.cpanel.net/whm/service-configuration/memory-usage-restrictions/): The Memory Usage Restrictions interface in WHM sets an RLimitMEM value that caps the memory each individual Apache process can use, improving server stability at a possible cost to process performance. Changes require rebuilding and restarting Apache to take effect.
- [Nameserver Selection](https://docs.cpanel.net/whm/service-configuration/nameserver-selection/): The Nameserver Selection interface in WHM lets administrators choose which nameserver software (BIND or PowerDNS) the server uses, or disable DNS services entirely. PowerDNS is the default; BIND is unavailable on Ubuntu, and PowerDNS does not work with a recursive nameserver.
- [Piped Log Configuration](https://docs.cpanel.net/whm/service-configuration/piped-log-configuration/): The Piped Log Configuration interface in WHM configures Apache to pipe all virtual host access and bandwidth logs through the `splitlogs` binary to a single combined log target instead of separate per-domain log files, reducing the number of log files Apache manages and the system resources required. The feature is enabled by default and recommended for servers with many domains.
- [Reserved IP Address Editor](https://docs.cpanel.net/whm/service-configuration/reserved-ip-address-editor/): The Reserved IP Address Editor interface in WHM lets administrators mark specific IP addresses already on the server as reserved, so Apache ignores HTTP requests to them and the system will not assign them to new accounts. Applying changes requires rebuilding and restarting Apache.
- [Service Manager](https://docs.cpanel.net/whm/service-configuration/service-manager/): The Service Manager interface in WHM lists the server's available services/daemons (varying by installed server profile) and lets administrators enable them and enable ChkServd monitoring for them; a service must be enabled before it can be monitored. It matches version 126's daemon list (Database Server as `mysql`/`mariadbd`, NGINX® Server included, no APNSPush driver) and additionally notes that on Debian-based systems the SSH daemon's daemon name is `sshd` but its service name is `ssh`.
- [EasyApache 4 Interface](https://docs.cpanel.net/whm/software/easyapache-4-interface/): The EasyApache 4 interface in WHM lets root or root-level resellers install and update Apache, PHP, and other web server components by provisioning a profile (a template of packages) or customizing one, including selecting Apache MPM/modules, PHP versions/extensions, Ruby packages, and additional packages. It also supports converting the current configuration or a customization session into a saved profile, and uploading custom JSON profiles from a local file or URL.
- [Install a Perl Module](https://docs.cpanel.net/whm/software/install-a-perl-module/): The Install a Perl Module interface in WHM lets administrators search the CPAN repository for Perl modules and download/install them onto the system's Perl installation, or install a module directly by name. It also lists already-installed modules with options to update, reinstall, uninstall, or view CPAN documentation for each.
- [Install Distro Packages](https://docs.cpanel.net/whm/software/install-distro-packages/): The Install Distro Packages interface in WHM lets administrators search for and install operating-system distribution packages (RPMs or equivalents) from the system's configured repositories, as opposed to cPanel-provided packages; it cannot install packages from third-party repositories.
- [Module Installers](https://docs.cpanel.net/whm/software/module-installers/): The Module Installers feature in WHM provides a landing page linking to four separate interfaces for finding and installing programming language modules used in custom scripts: PHP PECL, Ruby Gem Installer, PHP Extensions and Applications Package (PEAR), and Install a Perl Module (CPAN).
- [MultiPHP INI Editor for WHM](https://docs.cpanel.net/whm/software/multiphp-ini-editor/): WHM's MultiPHP INI Editor interface lets root-level administrators configure php.ini directives for a specific installed PHP version, using either a Basic Mode with predefined settings (such as memory_limit, upload_max_filesize, error_log, and log_errors) or an Editor Mode for adding custom directives directly to the php.ini file. This version 136 build adds the error_log and log_errors directives to Basic Mode, which were not present in version 82.
- [MultiPHP Manager for WHM — System Settings](https://docs.cpanel.net/whm/software/multiphp-manager-for-whm-system-settings/): The System Settings tab of WHM's MultiPHP Manager interface configures system-wide PHP version and PHP-FPM defaults, including PHP-FPM pool options (max requests, max children, process idle timeout) and PHP-FPM INI settings (allow_url_fopen, log_errors, short_open_tag, disable_functions, error_reporting), plus per-PHP-version handler assignment. Changes apply only to new accounts unless existing accounts are set to inherit global settings.
- [MultiPHP Manager for WHM — User Domain Settings](https://docs.cpanel.net/whm/software/multiphp-manager-for-whm-user-domain-settings/): The User Domain Settings tab of WHM's MultiPHP Manager interface lets administrators set or inherit each domain's PHP version, enable or disable PHP-FPM per domain, and configure domain-level PHP-FPM pool options (max requests, max children, process idle timeout) and php.ini directives (allow_url_fopen, log_errors, short_open_tag, error_log, disable_functions, error_reporting).
- [MultiPHP Manager for WHM](https://docs.cpanel.net/whm/software/multiphp-manager-for-whm/): WHM's MultiPHP Manager interface manages PHP and PHP-FPM configurations across the system and cPanel accounts, providing a System Settings tab for global PHP/PHP-FPM defaults and a User Domain Settings tab for per-domain PHP version and PHP-FPM overrides. If LiteSpeed Web Server is active, these settings cannot be edited and lsphp is used instead.
- [NGINX® Manager](https://docs.cpanel.net/whm/software/nginx-manager/): WHM's NGINX Manager interface installs, uninstalls, and manages NGINX configured as a reverse proxy and caching server in front of Apache, including system-wide caching defaults and per-user caching status and cache clearing. Requires EasyApache 4 and root access; this version 112 build installs/uninstalls the ea-nginx package via the packageinstall/packageuninstall shortcodes rather than raw yum commands, unlike version 102.
- [PHP Extensions and Applications Package](https://docs.cpanel.net/whm/software/php-extensions-and-applications-package/): The PHP Extensions and Applications Package interface in WHM's Module Installers lets root-level users select a PHP version and then search, install, update, reinstall, or uninstall PEAR (PHP Extensions and Applications Repository) packages for that PHP version, and view currently installed PEAR packages.
- [PHP PECL](https://docs.cpanel.net/whm/software/php-pecl/): The PHP PECL section of WHM's Module Installers interface lets root-level users select a PHP version and then search, install, update, reinstall, or uninstall PECL (PHP Extension Community Library) libraries for that version, and view currently installed PECL libraries. Note: as of PHP 8.0, adding 'exec' to disable_functions breaks PECL functionality.
- [Rebuild RPM Database](https://docs.cpanel.net/whm/software/rebuild-rpm-database/): WHM's Rebuild RPM Database interface rebuilds a corrupted RPM package manager database via a single Proceed action; not available on Ubuntu-based cPanel & WHM servers.
- [Ruby Gem Installer](https://docs.cpanel.net/whm/software/ruby-gem-installer/): WHM's Ruby Gem Installer, part of the Module Installers interface, lets administrators search, install, update, reinstall, and uninstall Ruby gems from RubyGems.org, and toggle the Ruby Gems Magic User Loader for user-installed gems. This interface was deprecated in cPanel & WHM version 66 in favor of creating Ruby applications via EasyApache 4 and cPanel's Application Manager.
- [System Update](https://docs.cpanel.net/whm/software/system-update/): WHM's System Update interface updates all of a server's RPM packages in one action, with an option to include kernel packages (which may require a reboot). Single packages can instead be updated via the package_manager_submit_actions WHM API 1 function.
- [Update Server Software](https://docs.cpanel.net/whm/software/update-server-software/): WHM's Update Server Software interface manually updates non-cPanel software dependencies that the operating system installed and that cPanel & WHM requires to run, via a single Proceed action. It does not update cPanel & WHM itself (use Upgrade to Latest Version) or the OS kernel (use yum update); the command-line equivalent is the sysup script.
- [Additional MySQL Access Hosts](https://docs.cpanel.net/whm/sql-services/additional-mysql-access-hosts/): WHM's Additional MySQL Access Hosts interface lets administrators define a server-wide list of remote hostnames or IPs permitted to access MySQL databases on the server, or a remote MySQL server configured via Manage MySQL Profiles, applying the list to all cPanel and MySQL users. In cPanel & WHM 120 and later, this interface was renamed to Manage Database Access Hosts under Database Services.
- [Change MySQL User Password](https://docs.cpanel.net/whm/sql-services/change-mysql-user-password/): WHM's Change MySQL User Password interface lets administrators reset a database user's password without knowing the current password, useful when a user forgets it or the account is compromised; it includes a password strength meter and generator. In cPanel & WHM 120 and later, this interface was renamed to Change Database User Password under Database Services.
- [Configure PostgreSQL](https://docs.cpanel.net/whm/sql-services/configure-postgresql/): WHM's Configure PostgreSQL interface completes the PostgreSQL installation process (which overwrites pg_hba.conf), creates PostgreSQL users for cPanel accounts that existed before PostgreSQL was installed, and updates the PostgreSQL password; intended for advanced users and only appears after PostgreSQL is installed. In cPanel & WHM 120 and later, its WHM section was renamed to Database Services.
- [Database Map Tool](https://docs.cpanel.net/whm/sql-services/database-map-tool/): WHM's Database Map Tool lets server administrators grant ownership of unowned MySQL or PostgreSQL database objects (databases and database users) to a cPanel user by selecting the account and specifying comma-separated database users and database names; it cannot transfer ownership between existing owners. In cPanel & WHM 120 and later, its WHM section was renamed to Database Services.
- [Edit SQL Configuration](https://docs.cpanel.net/whm/sql-services/edit-sql-configuration/): WHM's Edit SQL Configuration interface (version 114, latest) lets administrators tune MySQL and MariaDB server settings such as InnoDB buffer pool size, log buffer size, query cache, connection timeouts, and slow query logging, and apply suggested database optimizations; saving changes restarts the MySQL/MariaDB service. In cPanel & WHM version 120 and later, this interface is renamed Edit Database Configuration under Database Services, and the Slow Query Log setting is labeled Log Slow Queries on MariaDB 10.11 and later.
- [Manage Database Users](https://docs.cpanel.net/whm/sql-services/manage-database-users/): WHM's Manage Database Users interface lists database users, their associated database, and the cPanel account that owns each user, and lets administrators rename a database user and optionally reset its password. In cPanel & WHM version 120 and later, this interface moved under the Database Services section.
- [Manage Databases](https://docs.cpanel.net/whm/sql-services/manage-databases/): WHM's Manage Databases interface lists cPanel-managed MySQL databases, their engine, and the account that owns each one, and lets administrators rename a database (which recreates it under the new name, migrates data and grants, and terminates active connections). In cPanel & WHM version 120 and later, this interface moved under the Database Services section.
- [Manage MySQL® Profiles](https://docs.cpanel.net/whm/sql-services/manage-mysql-profiles/): WHM's Manage MySQL Profiles interface lets administrators create, edit, validate, activate, and delete connection profiles for local or remote MySQL/MariaDB servers (including Amazon RDS), determining which server new MySQL users and databases are created on. In cPanel & WHM version 120 and later, this interface is renamed Manage Database Profiles under Database Services.
- [MySQL/MariaDB Upgrade](https://docs.cpanel.net/whm/sql-services/mysql-or-mariadb-upgrade/): WHM's MySQL/MariaDB Upgrade interface (version 118, latest) lets root or root-privileged resellers upgrade or reinstall the server's MySQL or MariaDB version (available: MySQL 8.0, MariaDB 10.5/10.6/10.11), run an unattended or interactive upgrade, and use the MySQL Upgrade Checker Utility to detect compatibility issues before upgrading. In cPanel & WHM version 120 and later, this interface is renamed Upgrade Database Version under Database Services.
- [MySQL Root Password](https://docs.cpanel.net/whm/sql-services/mysql-root-password/): WHM's MySQL Root Password interface lets administrators set or change the MySQL root user's password (for the local server or, if configured, a remote MySQL profile server) and includes a password strength meter and generator. In cPanel & WHM version 120 and later, this interface is renamed Change Database Root Password under Database Services.
- [Repair a MySQL Database](https://docs.cpanel.net/whm/sql-services/repair-a-mysql-database/): WHM's Repair a MySQL Database interface lets administrators select a database and attempt to repair corrupted tables; it does not support InnoDB tables for Roundcube databases. In cPanel & WHM version 120 and later, this interface is renamed Repair Databases under Database Services.
- [Show MySQL Processes](https://docs.cpanel.net/whm/sql-services/show-mysql-processes/): WHM's Show MySQL Processes interface lists currently running database processes on the server, showing process ID, user, host, database, command type, elapsed time, state, and the executing statement. In cPanel & WHM version 120 and later, this interface is renamed Show Database Processes under Database Services.
- [Generate an SSL Certificate and Signing Request](https://docs.cpanel.net/whm/ssl-tls/generate-an-ssl-certificate-and-signing-request/): WHM's Generate an SSL Certificate and Signing Request interface creates a self-signed SSL certificate, a certificate signing request (CSR), and a private key for one or more domains (including wildcard domains) in a single step, supporting RSA and ECDSA key types; the CSR can be submitted to a certificate authority to purchase a trusted certificate.
- [Install an SSL Certificate on a Domain](https://docs.cpanel.net/whm/ssl-tls/install-an-ssl-certificate-on-a-domain/): WHM's Install an SSL Certificate on a Domain interface installs an existing SSL certificate (self-signed or CA-issued) onto a domain, subdomain, addon domain, or the server's ServerName, either by browsing certificates already on the server or by entering/autofilling certificate details for a domain; it supports SNI for multiple certificates per IP and multi-domain/wildcard certificates.
- [Manage AutoSSL](https://docs.cpanel.net/whm/ssl-tls/manage-autossl/): The Manage AutoSSL interface in WHM configures the AutoSSL feature, which automatically issues and installs domain-validated SSL certificates for Apache, Dovecot, Exim, Web Disk, and cPanel Server services across users' domains. In this version, Let's Encrypt is the default and only built-in provider (replacing the earlier cPanel powered by Sectigo default) and supports wildcard domains. It also covers provider selection, notification options, logs, per-user AutoSSL enablement, and the pending certificate queue.
- [Manage SSL Hosts](https://docs.cpanel.net/whm/ssl-tls/manage-ssl-hosts/): The Manage SSL Hosts interface in WHM lists installed SSL certificates for virtual hosts, showing expiration date, key type/algorithm, secured domains, IP address and type, primary website and SNI status, document root, owner, and issuer. It allows deleting a certificate or making a website the primary site on its shared IP address.
- [Purchase and Install an SSL Certificate](https://docs.cpanel.net/whm/ssl-tls/purchase-and-install-an-ssl-certificate/): The Purchase and Install an SSL Certificate interface in WHM lets administrators log in to a cPanel user's account to buy and install an SSL certificate via cPanel's SSL/TLS Wizard, listing accounts and their primary domains. It automatically enables the required cPanel Market, SSL Host Installer, and SSL/TLS Wizard features, and covers Certificate Authority Authorization (CAA) record considerations.
- [SSL Storage Manager](https://docs.cpanel.net/whm/ssl-tls/ssl-storage-manager/): The SSL Storage Manager interface in WHM lets system administrators view and delete SSL keys, certificates, and certificate signing requests, both those installed as Apache virtual hosts and those available under individual user accounts, and inspect their raw and detailed resource information.
- [SSL/TLS Configuration](https://docs.cpanel.net/whm/ssl-tls/ssl-tls-configuration/): The SSL/TLS Configuration interface in WHM sets the server-wide default SSL/TLS key type (RSA or ECDSA) used when provisioning users' certificates, signing requests, and root's SSL/TLS keys; changing this setting triggers an AutoSSL run to reissue AutoSSL-issued certificates with the new key type.
- [Create Support Ticket](https://docs.cpanel.net/whm/support/create-support-ticket/): The Create Support Ticket interface in WHM streamlines opening a technical support or feature request ticket with cPanel Technical Support via the cPanel Customer Portal, automating SSH authorization details and IP whitelisting for firewalls, cPHulk, Host Access Control, and CSF.
- [Grant cPanel Support Access](https://docs.cpanel.net/whm/support/grant-cpanel-support-access/): The Grant cPanel Support Access interface in WHM uses server authentication details from an open cPanel support ticket to grant or revoke cPanel Technical Support's temporary SSH access to the server, run SSH connection tests, and whitelist Technical Support's IP addresses for the server's firewall and security services.
- [Support Center](https://docs.cpanel.net/whm/support/support-center/): The Support Center interface in WHM provides links to cPanel & WHM support resources, including the Support Forums, WHM and cPanel documentation, release notifications, cPanel News, and cPanel University, as well as links to WHM's Create Support Ticket and Grant cPanel Support Access interfaces.
- [Background Process Killer](https://docs.cpanel.net/whm/system-health/background-process-killer/): The Background Process Killer interface in WHM lets administrators select known malicious processes (such as IRC bots, bouncers, and sniffers used in DoS/DDoS attacks) for automatic termination when the nightly upcp maintenance script runs, and designate trusted users exempt from the kill list.
- [Process Manager](https://docs.cpanel.net/whm/system-health/process-manager/): The Process Manager interface in WHM lists the server's active processes with PID, owner, priority, CPU and memory usage, and command, and lets administrators kill an individual process, kill all processes owned by a specific user, or trace a running process.
- [Show Current Disk Usage](https://docs.cpanel.net/whm/system-health/show-current-disk-usage/): The Show Current Disk Usage interface in WHM displays a server's partition and hard disk usage, including size, used and available space, and percent used, plus I/O statistics (transactions and blocks read/written per second) since the last server restart, for capacity monitoring and disk space alert configuration.
- [Show Current Running Processes](https://docs.cpanel.net/whm/system-health/show-current-running-processes/): The Show Current Running Processes interface in WHM displays a table of all active processes on the server, showing each process's PID, name, executable file path, current working directory, and command line.
- [System Reboot](https://docs.cpanel.net/whm/system-reboot/system-reboot/): The System Reboot documentation covers WHM's Forceful Server Reboot and Graceful Server Reboot interfaces, which restart the server either immediately regardless of errors or after safely closing user-level processes, and recommends the graceful method to avoid data loss; it also notes the reboot command-line option.
- [Getting Started in WHM](https://docs.cpanel.net/whm/the-whm-interface/getting-started/): The Getting Started in WHM documentation describes the first-login setup flow on a new cPanel & WHM server: accepting the legal agreements (in this version, the End User License Agreement, Technical Support Agreement, Pricing and Term Agreement, and Privacy Policy via a single checkbox, rather than the EULA alone), activating a trial or full license, replacing the default self-signed SSL certificate, and configuring the initial contact email address and nameservers.
- [The WHM Interface](https://docs.cpanel.net/whm/the-whm-interface/the-whm-interface/): The WHM interface (WHM >> Home) is the main administrative dashboard giving root users and resellers root-level access to all WHM server administration features, including the top navigation bar (search, notifications, hostname, OS, cPanel version, load averages), collapsible side navigation menu, Important next steps, customizable Favorites, a simplified Statistics panel showing only Server Monitoring and User Analytics ID, a dedicated Server Monitoring section showing CPU usage, load average, and top processes (Powered by 360 Monitoring), grouped Tools, and a footer navigation bar with documentation and support links.
- [Theme Manager](https://docs.cpanel.net/whm/themes/theme-manager/): The Theme Manager interface (WHM >> Home >> Themes >> Theme Manager) lets root users install, preview, clone, download, and delete custom themes for the cPanel, Login, and Webmail interfaces; it does not support creating themes or customizing WHM's own theme (use the Customization interface for that).
- [Account Restore](https://docs.cpanel.net/whm/transfers/account-restore/): The Account Restore interface (WHM >> Home >> Transfers) displays real-time status, progress, and warnings for an in-progress or completed cPanel account restoration initiated from the Transfer or Restore a cPanel Account interface, including per-item restoration status (Success, Altered, Failed, Dangerous, Skipped, Warning), restoration logs, and a Summary of severe warnings such as renamed databases or skipped grant tables.
- [Account Transfer](https://docs.cpanel.net/whm/transfers/account-transfer/): The Account Transfer interface (also called Remote User Account Transfer or Remote Root Account Transfer, depending on how it's launched from WHM >> Home >> Transfers) shows real-time status, progress, and warnings for a cPanel account transfer, including per-item status (Success, Altered, Failed, Dangerous, Skipped, Warning), transfer and restoration logs, and a Summary of severe warnings such as renamed databases or skipped grant tables.
- [Convert Addon Domain to Account](https://docs.cpanel.net/whm/transfers/convert-addon-domain-to-account/): The Convert Addon Domain to Account interface (WHM >> Home >> Transfers) converts an existing addon domain into a standalone cPanel account, letting root or reseller users with the rearrange-accts ACL selectively copy or move website files, custom DNS records, email accounts, MySQL/MariaDB databases, and FTP/Web Disk subaccounts, then tracks conversions in a Conversion History table.
- [Review Transfers and Restores](https://docs.cpanel.net/whm/transfers/review-transfers-and-restores/): The Review Transfers and Restores interface (WHM >> Home >> Transfers) lists a server's transfer and restore session logs, both completed and pending, showing session ID, initiator, source host, and start/end times, with Review, View, and Cancel actions available for each session.
- [Transfer or Restore a cPanel Account](https://docs.cpanel.net/whm/transfers/transfer-or-restore-a-cpanel-account/): The Transfer or Restore a cPanel Account interface (WHM >> Home >> Transfers) lets root users transfer a cPanel account from a remote server or restore one from a local or uploaded cpmove/backup archive file, with an optional experimental Restricted Restore security-check feature and, on servers with linked nodes, options to restore to a specific linked cPanel & WHM server node.
- [Transfer Tool](https://docs.cpanel.net/whm/transfers/transfer-tool/): WHM's Transfer Tool interface (WHM >> Home >> Transfers >> Transfer Tool) copies cPanel accounts, packages, and configurations from a source server to a destination cPanel & WHM server, requiring root access; covers Live Transfer for reduced-downtime account moves, DNS zone/AAAA record handling, MySQL and database rename behavior on name collisions, CloudLinux PHP Selector preservation, and Plesk account migration caveats. This is the latest version, which adds an Update DNS Zone toggle; disabling it prevents the Transfer Tool from creating a DNS zone or configuring mail routing for transferred domains on the destination server.
- [Transfer Tool — After The Transfer](https://docs.cpanel.net/whm/transfers/transfer-tool/after-the-transfer/): WHM's Transfer Tool 'After the Transfer' page lists manual configuration steps required after using the Transfer Tool, specifically restoring MultiPHP users' PHP-FPM .yaml configuration file (renamed to filename.php-fpm.yaml.transferred during transfer) by renaming it back and running the php_fpm_config --rebuild script.
- [Transfer Tool — Only Transfer IP Address](https://docs.cpanel.net/whm/transfers/transfer-tool/only-transfer-ip-address/): WHM's Transfer Tool 'Only Transfer IP Address' page directs users who want to move only a cPanel license's IP address (not full accounts) to use WHM's IP Migration Wizard interface, and explains how to update the cPanel license's IP address via the cPanel Store or Manage2 after the server's main IP changes.
- [Transfer Tool — Prepare The Source Server](https://docs.cpanel.net/whm/transfers/transfer-tool/prepare-a-source-server/): WHM's Transfer Tool 'Prepare the Source Server' page walks through configuring the source server connection before a transfer: entering the remote server address and SSH port, choosing root or user-based authentication (password or SSH key, with optional root escalation and TLS bypass), enabling the experimental Restricted Restore security feature, and setting advanced options (remote server type, compression, low priority, incremental backup speed-up, custom packaging modules, thread counts, and session timeout) before scanning the remote server to reach the Account List interface.
- [Transfer Tool — Select What to Transfer](https://docs.cpanel.net/whm/transfers/transfer-tool/select-what-to-transfer/): WHM's Transfer Tool 'Select What to Transfer' page (the Account List interface, WHM >> Home >> Transfers >> Transfer Tool) lets users choose which cPanel accounts, packages, and service configurations (AutoSSL, Backups, cPanel & WHM whmconf, Database Server, EasyApache, Exim, GreyList, Hulk, ModSecurity, User Interface Themes) to copy from a source server, including per-account settings for username, dedicated IP assignment, home directory/reseller privileges/databases/bandwidth/integration links transfer, Live Transfer, linked node options, and overwrite behavior. This is the latest version, which reorganizes these settings under an 'Account Information' section and adds an Update DNS Zone toggle that, when disabled, prevents the Transfer Tool from creating a DNS zone or configuring mail routing for transferred domains on the destination server.
- [Transfer Tool — The Transfer Process](https://docs.cpanel.net/whm/transfers/transfer-tool/the-transfer-process/): WHM's Transfer Tool 'The Transfer Process' page describes the automated DNS and account creation steps that run after clicking Copy in the Transfer Tool: account creation, comparing and merging the source DNS zone file with destination templates (SOA, NS, FTP, MX, CalDAV/CardDAV, DNSSEC records), deduplicating and commenting out conflicting or outdated records, and updating IP address references. This is the latest version, noting that setting the Update DNS Zone option to Disabled prevents the Transfer Tool from creating a DNS zone or configuring mail routing for transferred domains on the destination server, which requires manual remediation afterward.

## EasyApache 4

- [About Apache](https://docs.cpanel.net/ea4/apache/about-apache/): Overview of EasyApache 4's management of Apache 2.4, including default configuration components (core/common modules, MPM, PHP, Cloudflare routing), common Apache file paths (httpd.conf, conf.d, logs, document root), the default and optional Apache modules available via WHM's EasyApache 4 interface, and ModSecurity-based security.
- [Advanced Apache Configuration - The paths.conf File](https://docs.cpanel.net/ea4/apache/advanced-apache-configuration-the-paths-conf-file/): Documents the /etc/cpanel/ea4/paths.conf file, which EasyApache 4's ea-apache24-config-runtime package uses to define alias-to-path mappings (e.g. dir_domlogs, bin_httpd, dir_docroot, file_conf, dir_conf_userdata) instead of hardcoded Apache file and directory paths.
- [Advanced Apache Configuration](https://docs.cpanel.net/ea4/apache/advanced-apache-configuration/): Describes supported methods for customizing EasyApache 4's Apache configuration: .htaccess files, the ProxyErrorOverride directive for PHP-FPM ErrorDocument handling, Cloudflare/mod_remoteip integration, and global configuration changes via WHM's Global Configuration or Include Editor interfaces, command-line .conf files in /etc/apache2/conf.d/, or virtual host include files.
- [Apache Module — Brotli](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-brotli/): Covers the mod_brotli Apache module, which compresses content (applies to all virtual hosts) to improve page load speed; requires HTTPS and Apache 2.4. Documents default AddOutputFilterByType/SetOutputFilter directives and the /etc/apache2/conf.d/brotli.conf configuration file.
- [Apache Module — cPanel](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-cpanel/): Covers the End-of-Life mod_cpanel Apache module, which replaced the removed Optimize .htaccess (AllowOverride) feature by caching lookups for nonexistent .htaccess files and redirecting requests for suspended users' files; not available on Ubuntu.
- [Apache Module — Evasive](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-evasive/): Covers the mod_evasive Apache module, which blocks IP addresses making excessive same-page or concurrent requests (403 response, temporary blacklist) to mitigate DoS/DDoS/brute-force attacks. Documents configuration directives (DOSWhiteList, DOSHashTableSize, DOSPageCount, DOSSiteCount, DOSPageInterval, DOSSiteInterval, DOSBlockingPeriod, DOSEmailNotify, DOSSystemCommand, DOSLogDir) and notes incompatibility with mod_ruid2 logging.
- [Apache Module — FCGId](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-fcgid/): Covers the mod_fcgid Apache module, an alternative to mod_cgi for serving PHP applications on systems without PHP-FPM by launching multiple program instances to handle concurrent requests; incompatible with mod_ruid2 and mod_mpm_itk, recommended only for advanced administrators.
- [Apache Module — HTTP2](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-http2/): Covers the mod_http2 Apache module, which adds HTTP/2 support (primarily over HTTPS) to improve page load speed; requires Apache 2.4, is resource intensive, and is incompatible with the DSO PHP handler, mod_mpm_itk, mod_mpm_prefork, and mod_ruid2. Notes that NGINX requires the separate ea-nginx-http2 package instead.
- [Apache Module — Lua](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-lua/): Covers the mod_lua Apache module, which provides Lua scripting hooks for httpd request processing but is disabled by default and not recommended due to security risks; includes install/uninstall via the ea-apache24-mod_lua package.
- [Apache Module — ModSecurity® SDBM Utility](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-modsecurity-sdbm-utility/): Covers the ModSecurity SDBM utility (ea-modsec-sdbm-util package, /usr/sbin/modsec-sdbm-util binary), which purges expired entries from the /var/cpanel/secdatadir/ip.pag cache file, normally invoked automatically by /scripts/maintenance or manually via /scripts/shrink_modsec_ip_database -x, followed by an Apache restart.
- [Apache Module — ModSecurity®](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-modsecurity/): Covers the mod_security2 Apache module (ModSecurity web application firewall), enabled by default for all virtual hosts except the default one. Explains configuration via WHM's ModSecurity Configuration interface, log file locations (/etc/apache2/logs/modsec_audit.log or per-user logs with mod_ruid2/mod_mpm_itk), the modsec2.conf/modsec2.user.conf/modsec2.cpanel.conf files, the ModSecurity SDBM utility, and the mlogc audit log collector.
- [Apache Module — MPM ITK](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-mpm-itk/): Covers the mod_mpm_itk Apache module, which switches the Apache process to the domain owner's UID/GID before handling requests, isolating user files via file permissions; requires the prefork MPM, Apache 2.4, and the CGI PHP handler. Documents incompatibilities (mod_http2, mod_ruid2, mod_fcgid, mod_userdir, mod_suPHP, CloudLinux PHP Selector, Leech Protection), setuid()/setgid() restrictions, and the LimitUIDRange/LimitGIDRange workaround.
- [Apache Module — Ruid2](https://docs.cpanel.net/ea4/apache/apache-modules/apache-module-ruid2/): Covers the mod_ruid2 Apache module, which runs a domain's HTTP requests as that domain's owner (similar to suEXEC/suPHP but for all requests). Lists the modules it disables (mod_cache, mod_fcgid, mod_mpm_itk, mod_suphp, mod_userdir, etc.), its PHP handler compatibility caveats (incompatible with mod_fcgid, disables the POSIX PHP extension), and installation via WHM's EasyApache 4 interface.
- [Apache Modules](https://docs.cpanel.net/ea4/apache/apache-modules/apache-modules/): Index page linking to documentation for individual EasyApache 4 Apache modules, including mod_brotli, mod_cpanel, mod_evasive, mod_fcgid, mod_http2, mod_lua, mod_security2, the ModSecurity SDBM utility, mod_mpm_itk, and mod_ruid2.
- [Custom Templates](https://docs.cpanel.net/ea4/apache/custom-templates/): Explains how to create custom Apache virtual host templates by copying vhost.default, ssl_vhost.default, or ea4_main.default files to .local versions (applies to all virtual hosts) or by using a YAML-based custom_vhost_template_ap2 entry in /var/cpanel/userdata/ for a single virtual host.
- [Modify Apache Virtual Hosts with Include Files](https://docs.cpanel.net/ea4/apache/modify-apache-virtual-hosts-with-include-files/): Details the directory structure for Apache virtual host include files under /etc/apache2/conf.d/userdata/ (ssl/std, per-domain, per-user, or system-wide), and the required rebuildhttpdconf and restartsrv_httpd scripts to apply changes.
- [Multi-Processing Modules: MPMs](https://docs.cpanel.net/ea4/apache/multi-processing-modules-mpm/): Describes the three Apache Multi-Processing Modules (MPMs) available in EasyApache 4—worker, event, and prefork (the default)—how each handles request threading/forking, guidelines for choosing an MPM based on thread and thread-polling support, and notes that mod_mpm_itk requires the prefork MPM.
- [Symlink Race Condition Protection](https://docs.cpanel.net/ea4/apache/symlink-race-condition-protection/): Explains the FollowSymlinks and SymLinksIfOwnerMatch vulnerabilities in WHM's Global Configuration and describes mitigation options: KernelCare patch sets, CageFS, CloudLinux SecureLinks, and the Bluehost patch with cPanel modifications (enabled via the Symlink Protection option or the SymlinkProtect/SymlinkProtectRoot directives).
- [The EasyApache 4 FileProtect Option](https://docs.cpanel.net/ea4/apache/the-easyapache-4-fileprotect-option/): Explains the EasyApache 4 FileProtect option, enabled by default, which restricts public_html and addon domain document root access to Apache and the owning user via permission changes (e.g. 0711 on home directories, 0750 with GroupID nobody or the owning user for mod_ruid2/mod_mpm_itk). Covers toggling it via WHM's Tweak Settings or the enablefileprotect/disablefileprotect scripts.
- [About EasyApache 4](https://docs.cpanel.net/ea4/basics/about-easyapache-4/): Explains what EasyApache 4 is, how to run it via WHM's EasyApache 4 interface (WHM >> Home >> Software >> EasyApache 4), its benefits (PHP/Apache updates, MultiPHP support), supported OS/Apache 2.4/PHP requirements, and which packages (e.g., Memcache, OpenSSL 1.1, Suhosin) are unavailable on AlmaLinux OS and Rocky Linux.
- [EasyApache 4 Create a Profile](https://docs.cpanel.net/ea4/basics/easyapache-4-create-a-profile/): Explains how to create, save, and upload EasyApache 4 profiles (JSON templates controlling which ea- packages are installed), including the required JSON keys (version, name, tags, desc, pkgs), saving via WHM's EasyApache 4 interface's Save as profile/Convert to profile options, creating profiles directly on the server in /etc/cpanel/ea4/profiles/custom/, validating JSON with json_pp, and presetting a profile via /etc/cpanel_initial_install_ea4_profile.json before installation.
- [EasyApache 4 File System Layout](https://docs.cpanel.net/ea4/basics/easyapache-4-file-system-layout/): Lists key EasyApache 4, Apache, and PHP file and directory locations, including /etc/cpanel/ea4/, /etc/apache2/, /etc/cpanel/ea4/php.conf, and per-version PHP binaries/symlinks (ea-php##), with links to detailed configuration docs.
- [EasyApache 4 Recommendations](https://docs.cpanel.net/ea4/basics/easyapache-4-recommendations/): Documents the EasyApache 4 recommendations system that displays security advice and configuration notes in WHM's EasyApache 4 interface, stored as JSON files in /etc/cpanel/ea4/recommendations/ via the ea-cpanel-tools package; details each JSON field (on, desc, url, name, options, items, recommended, text, level, filter).
- [Package Manager Basics](https://docs.cpanel.net/ea4/basics/package-manager-basics/): Covers package manager basics for cPanel & WHM systems (yum on CentOS, dnf on AlmaLinux OS/Rocky Linux, apt on Ubuntu), including install/update/remove commands per OS, EasyApache 4's ea- package naming and RPM/.deb formats, and how EA4 uses Software Collections (SCL) for multi-version PHP packages.
- [The ea-cpanel-tools Package's Scripts](https://docs.cpanel.net/ea4/basics/the-ea-cpanel-tools-package-scripts/): Documents the command-line scripts in the ea-cpanel-tools package: ea_current_to_profile (create an EA4 profile from current config), ea_install_profile (provision a profile), ea_sync_user_phpini_settings (sync a user's php.ini with .user.ini/.htaccess), plus the ea4-metainfo.json file and the ea_convert_php_ini migration script, with their options and usage examples.
- [EasyApache 4 Containers](https://docs.cpanel.net/ea4/containers/easyapache-4-containers/): Explains EasyApache 4's Podman-based container system for running applications (Memcached, Redis, Tomcat, Valkey) isolated from the server, covering supported operating systems (AlmaLinux OS, Rocky Linux, Ubuntu), setup via the ea-podman-repo and ea-podman packages, installing cPanel-provided or third-party (Dockerhub) images, and fixing the Ubuntu overlayfs/storage.conf UID/GID error.
- [Memcached via Containers](https://docs.cpanel.net/ea4/containers/memcached-via-containers/): Explains how to install and configure Memcached 1.6 inside an EasyApache 4 Podman container using the ea-memcached16 package and the ea-podman script, including shell access requirements and connecting applications via the memcache.sock socket.
- [Redis via Containers](https://docs.cpanel.net/ea4/containers/redis-via-containers/): Explains how to install and configure Redis 6.2 inside an EasyApache 4 Podman container using the ea-redis62 package and the ea-podman script, including shell access requirements and connecting applications via the redis.sock socket.
- [The ea-podman Script](https://docs.cpanel.net/ea4/containers/the-ea-podman-script/): Full command reference for the /usr/local/cpanel/scripts/ea-podman script used to manage EasyApache 4 containers, covering avail, registered, running, install (cPanel and third-party images), uninstall, backup/restore, bash, start/stop/restart, status, subids, and upgrade/upgrade_containers commands with options like -v, --cpuser-port, and -e.
- [Tomcat via Containers](https://docs.cpanel.net/ea4/containers/tomcat-via-containers/): Explains how to install and configure Apache Tomcat (10.0 EOL and 10.1) inside an EasyApache 4 Podman container using the ea-tomcat101 package and the ea-podman script, including default server.xml configuration changes and application deployment options.
- [Valkey via Containers](https://docs.cpanel.net/ea4/containers/valkey-via-containers/): Explains how to install and configure Valkey 7.2 (a Redis-fork distributed memory cache) inside an EasyApache 4 Podman container using the ea-valkey72 package and the ea-podman script, including shell access requirements and connecting applications via the valkey.sock socket.
- [The Delayed Repository](https://docs.cpanel.net/ea4/git-repositories/the-delayed-repository/): Describes the EasyApache 4 Delayed repository, which applies package updates 7 days after the Production repository to reduce unscheduled changes, with install/uninstall commands (ea4-delayed) for AlmaLinux OS/Rocky Linux, CentOS, and Ubuntu, and a link to its change log.
- [The EasyApache 4 Git Repository and Build Updates](https://docs.cpanel.net/ea4/git-repositories/the-easyapache-4-git-repository-and-build-updates/): Explains EasyApache 4's Git repository structure (main vs. production branches), the automated build/push process to GitHub, how to subscribe to build notification mailing lists, guidance on building custom RPMs/Software Collections (SCL naming rules), and requirements for running third-party EA4 repositories alongside cPanel's (ea-profiles-cpanel, ea-profiles-vendor naming).
- [The Experimental Repository](https://docs.cpanel.net/ea4/git-repositories/the-experimental-repository/): Describes the EasyApache 4 Experimental repository (CentOS 7, AlmaLinux OS 8, or Rocky Linux 8 only), an unsupported early-development area for advanced users, including installation via ea4-experimental, listing available packages with yum/dnf, and associated risks and change log.
- [EasyApache 4 Change Logs](https://docs.cpanel.net/ea4/information/easyapache-4-change-log/): Index page linking to EasyApache 4's authoritative change logs by version/year (e.g., version 25, 2024), describing the format for each entry (package changed, case number, description) and the shift from date-based to versioned changelog organization starting in 2025.
- [EasyApache 4 Module Updates](https://docs.cpanel.net/ea4/information/easyapache-4-module-updates/): Reference table of the latest version numbers for EasyApache 4 modules and components (Apache, PHP 5.6-8.5, NGINX, NodeJS, Tomcat, Redis, Valkey, ionCube, ModSecurity, Passenger, etc.), including EOL status for deprecated versions.
- [About PHP](https://docs.cpanel.net/ea4/php/about-php/): Overview of how EasyApache 4 installs, configures, and manages multiple PHP versions in cPanel & WHM: default CGI handler, PHP support timeline, MultiPHP Manager for setting per-domain/default PHP versions, vendor-provided (non ea- prefixed) PHP packages, PHP CLI/CGI/PECL/PEAR symlinks, per-version php.ini file locations, and keeping PHP packages updated for security.
- [Advanced PHP Configuration](https://docs.cpanel.net/ea4/php/advanced-php-configuration/): Details how php.ini files are located and loaded (search order, per-SAPI php-sapi.ini overrides, /opt/cpanel/ea-php##/root/etc/php.d/ scanning) and how each PHP handler (CGI, DSO, FPM, FCGId, LSAPI, suPHP) determines which INI/config files and load order it uses.
- [EasyApache 4 and the ea-php-cli Package](https://docs.cpanel.net/ea4/php/easyapache4-and-the-ea-php-cli-package/): Documents the ea-php-cli package's /usr/bin/php (CGI), /usr/local/bin/php (CLI), and /usr/bin/lsphp (Litespeed) binaries that auto-select the correct PHP version per request; covers the /etc/cpanel/ea4/php.conf default-version config, the .ea-php-cli.cache symlink, and overriding the PHP version with /usr/bin/ea-php## or --ea-reference-dir.
- [How to Locate and Install a PHP Version or Extension](https://docs.cpanel.net/ea4/php/how-to-locate-and-install-a-php-version-or-extension/): How-to for finding a domain's current PHP version (WHM/cPanel MultiPHP Manager, `grep phpversion /var/cpanel/userdata/USERNAME/DOMAIN`, or the php_get_vhost_versions API) and for installing PHP versions or extensions via WHM's EasyApache 4 interface, a package manager, or the ea-php##-php-module naming convention (e.g. `ea-php82-php-gd`).
- [PHP 8](https://docs.cpanel.net/ea4/php/php-8/): Summarizes PHP 8 in EasyApache 4: new features (union types, JIT compiler, named arguments, attributes); extensions/modules unavailable in PHP 8 (PHP-PSR, Snuffleupagus, Phalcon 4, ionCube 10/11, Memcache); and incompatibilities (DSO handler unsupported on PHP 8.0+, XMLRPC moved to PECL, JSON now built in).
- [PHP Handlers](https://docs.cpanel.net/ea4/php/php-handlers/): Describes cPanel & WHM's six PHP handlers (CGI, DSO, FPM, FCGId, LSAPI, suPHP), their execution models, user permissions, and Apache module compatibility, plus how to change the handler via WHM's MultiPHP Manager or the rebuild_phpconf script, and details suPHP's mod_suphp security checks (docroot, UID/GID checks, umask, etc.) configurable in /etc/suphp.conf.
- [PHP Inheritance](https://docs.cpanel.net/ea4/php/php-inheritance/): Explains the 'Inherit' PHP version option in WHM's MultiPHP Manager: Apache walks up the document root directory tree to find an .htaccess file specifying a PHP version, falling back to the system default if none is found; includes worked examples for subdomains and addon domains, and notes Inherit cannot be used with PHP-FPM enabled.
- [PHP Module: IMAP](https://docs.cpanel.net/ea4/php/php-module-imap/): Covers the PHP `imap` extension for SMTP/POP3/IMAP mail access, which is deprecated and, as of PHP 8.4, only installable via PECL (ea-php##-pecl install imap) or WHM's PHP PECL interface rather than as a built-in module.
- [PHP Module: Mcrypt](https://docs.cpanel.net/ea4/php/php-module-mcrypt/): Covers the PHP `mcrypt` extension for encryption, which as of PHP 7.2 is only available via PECL; installation requires copying files from /opt/cpanel/libmcrypt/lib64/ to /opt/cpanel/libmcrypt/lib/, then running `ea-php81-pecl install mcrypt-1.0.2` and supplying /opt/cpanel/libmcrypt as the libmcrypt prefix.
- [PHP Module: PSpell](https://docs.cpanel.net/ea4/php/php-module-pspell/): Covers the PHP `pspell` extension for spell-checking, which is deprecated and, as of PHP 8.4, only installable via PECL (ea-php##-pecl install pspell) or WHM's PHP PECL interface rather than as a built-in module.
- [PHP Options: PHP Loader: ionCube 5](https://docs.cpanel.net/ea4/php/php-options-php-loader-ioncube5/): Covers ionCube 5, a PHP loader for encoded PHP files usable only on CentOS 7 servers running PHP 6.0 or earlier; install/uninstall via WHM's EasyApache 4 interface or `yum install`/`yum remove ea-php##-php-ioncube5` on the command line.
- [PHP Options: PHP Loader: ionCube 6](https://docs.cpanel.net/ea4/php/php-options-php-loader-ioncube6/): Covers ionCube 6, a PHP loader for encoded PHP files usable only on CentOS 7 servers running PHP 7.0 or earlier; install/uninstall via WHM's EasyApache 4 interface or `yum install`/`yum remove ea-php##-php-ioncube6` on the command line.
- [PHP Options](https://docs.cpanel.net/ea4/php/php-options/): Reference list of EasyApache 4 PHP options for current PHP versions (8.1-8.5) and legacy versions (5.4-8.0): the OPCache opcode cacher, PHP loaders/encoders (SourceGuardian, ionCube), and tables of built-in PHP extensions (e.g. bcmath, curl, gd, imap, mcrypt, mysqli, pdo, pspell, sodium) with version availability and compatibility notes.
- [The cPanel PHPRC PHP Patch for EasyApache 4](https://docs.cpanel.net/ea4/php/the-cpanel-phprc-php-patch-for-easyapache4/): Explains the cPanel PHPRC patch that makes EasyApache 4 read php.ini files in EasyApache 3 order: for CGI/DSO handlers the system uses only /opt/cpanel/ea-php##/root/etc/php.ini and php.d/*.ini; for suPHP it defines a five-step load order (.user.ini, directory php.ini, php.d/*.ini, global php.ini, PHP defaults) and covers migrating deprecated local.ini files via migrate_local_ini_to_php_ini.

## Webmail

- [Webmail — Calendars and Contacts](https://docs.cpanel.net/webmail/calendars-and-contacts-in-webmail/): Overview of the Webmail Calendars and Contacts section (version 120), linking to Calendars and Contacts Management (create/delete/rename calendars and address books), Configuration (device/desktop setup), and Sharing (sharing calendars and address books with other domain email users).
- [Webmail — Edit Your Settings](https://docs.cpanel.net/webmail/edit-your-settings-in-webmail/): Covers the Webmail interface's account settings pages: changing your password and using the Password Generator, linking or unlinking External Authentication (OpenID Connect) credentials, managing Contact Information and login notification preferences, configuring Two-Factor Authentication, and Account Preferences for Plus Addressing (including automatic folder creation for plus-addressed mail). Unlike version 84, this version adds Two-Factor Authentication and omits the separate Calendars and Contacts Client configuration section.
- [Webmail — Fight Spam](https://docs.cpanel.net/webmail/fight-spam-in-webmail/): Covers Webmail's spam-fighting features: the Spam Filters interface's Spam Auto-Delete Threshold (based on Apache SpamAssassin score), and BoxTrapper challenge-response spam filtering, including enabling BoxTrapper, configuring settings, editing confirmation message templates, managing whitelist/blacklist/ignore lists, forward lists, and reviewing BoxTrapper logs and the message queue.
- [Webmail — Manage Your Inbox](https://docs.cpanel.net/webmail/manage-your-inbox-in-webmail/): Covers Webmail's inbox management features: creating and managing Autoresponders (automated vacation/away replies using tag variables like %subject%, %from%, and %email%), creating and managing Email Filters that act on incoming messages, and setting up email Forwarders to redirect incoming mail to other addresses.
- [Webmail — Other Features](https://docs.cpanel.net/webmail/other-webmail-features/): Covers miscellaneous Webmail interface features: Configure Mail Client (automatic or manual setup of desktop/mobile mail clients via IMAP/POP3), Manage Disk Usage (view and delete mailbox messages to free space), Mailing Lists (Mailman-based lists, access levels, spam filters), Search Index (reindex mail for faster full-text search), and Track Delivery (view delivery reports, filter by status, and trace an email address's delivery route).
- [The Webmail Interface](https://docs.cpanel.net/webmail/the-webmail-interface/): Describes the main Webmail interface: logging in via port 2096 or cPanel's Email Accounts interface, the cPanel Analytics consent prompt, the navigation bar (disk usage, user preferences, logout), core Webmail sections (Open your inbox, Change your webmail client/Roundcube, Set up email on your device, General Information), and links to the Manage Your Inbox, Calendars and Contacts, Edit Your Settings, Fight Spam, and Other Webmail Features sub-sections.
- [Webmail Clients](https://docs.cpanel.net/webmail/webmail-clients/): Describes Webmail client options: the built-in Roundcube client (three-pane interface, light/dark mode, spam marking, calendar, address book, drag-and-drop organization) and how to configure third-party mail clients (iOS, macOS Mail, Windows Live Mail) using automatic configuration scripts or manual SSL/TLS settings via the Configure Mail Client interface.

## Installation Guide

- [cPanel DNSOnly® Installation](https://docs.cpanel.net/installation-guide/cpanel-dnsonly-installation/): Explains how to install cPanel DNSOnly, a DNS-only cPanel product, including port requirements (53, 953, 2087, and optionally 25), downloading the installer via curl from securedownloads.cpanel.net/latest-dnsonly, running the sh latest-dnsonly command, and accessing the resulting WHM interface at https://IP:2087. Also covers DNSSEC support in DNS clusters, which requires all cluster servers to run PowerDNS.
- [Customize Your Installation](https://docs.cpanel.net/installation-guide/customize-your-installation/): Describes how to customize a cPanel & WHM installation, including command-line installer options (--confirm, --force, --keep, --nochown, --noexec, --nox11, --skip-cloudlinux, --skip-wptoolkit, --skip-imunifyav, --target, --tar), preconfiguring basic server setup via /etc/wwwacct.conf, setting install-time options in /root/cpanel_profile/cpanel.config (including the mysql-version key), restoring accounts during installation with /etc/cpanelacctrestore, setting the release tier via /etc/cpupdate.conf, and preconfiguring EasyApache 4 profiles, yum/apt package exclusions, and update sources (/etc/cpsources.conf).
- [Experimental Installation on Unsupported Operating Systems](https://docs.cpanel.net/installation-guide/experimental-installation-on-unsupported-operating-systems/): Explains the experimental --experimental-os installer flag (added in cPanel & WHM version 102) that disables most OS detection and forces the installer to assume a specified Linux distribution and version, for example sh latest --experimental-os=almalinux-8.4. This is unsupported and may cause unexpected behavior; it explicitly fails on CloudLinux.
- [Installation](https://docs.cpanel.net/installation-guide/install/): Gives the core cPanel & WHM installation command (cd /home && curl -o latest -L https://securedownloads.cpanel.net/latest && sh latest), run as root on a freshly-installed OS with a public static IP. Notes that no uninstaller exists (removal requires reformatting), that installing other services before or during setup causes conflicts, and that fast installation mode is enabled by default (see Customize Your Installation to disable it).
- [System Requirements for AlmaLinux OS](https://docs.cpanel.net/installation-guide/system-requirements-almalinux/): Lists minimum system requirements for installing cPanel & WHM on AlmaLinux OS: supported version-to-cPanel-version mapping (AlmaLinux 8 needs cPanel 110+, 9 needs 114+, 10 needs 132+), hardware minimums (1.1 GHz CPU, 2 GB RAM/4 GB recommended, 20-40 GB disk, 64-bit only, no ARM), networking and hostname requirements, disabling SELinux, XFS/ext4 filesystem and partition guidance, root access requirement, automatic CloudLinux conversion when a CloudLinux license is active (avoidable with --skip-cloudlinux), and supported browsers.
- [System Requirements for CloudLinux](https://docs.cpanel.net/installation-guide/system-requirements-cloudlinux/): Lists minimum system requirements for installing cPanel & WHM on CloudLinux versions 7, 8, 9, and 10, including version restrictions (cPanel 110+ required for CloudLinux 7, cPanel 134+ required for CloudLinux 10), hardware minimums (1.1 GHz CPU, 2 GB RAM/4 GB recommended, 20-40 GB disk, 64-bit only), licensing (IP-address-based CloudLinux license required), converting existing AlmaLinux/Rocky Linux/CentOS servers to CloudLinux via cldeploy, disabling SELinux, networking/hostname requirements, and supported browsers.
- [System Requirements for Rocky Linux](https://docs.cpanel.net/installation-guide/system-requirements-rockylinux/): Documents system requirements for cPanel & WHM on Rocky Linux, but notes that Rocky Linux is no longer supported for new installations and support for existing installations has been removed (see the cPanel Deprecation Plan). Covers legacy details such as supported versions (Rocky Linux 8 with cPanel 110+, Rocky Linux 9 with cPanel 114+), hardware minimums, licensing, disabling SELinux and firewalld, and automatic conversion to CloudLinux when a CloudLinux license is active.
- [System Requirements for Ubuntu](https://docs.cpanel.net/installation-guide/system-requirements-ubuntu/): Lists minimum system requirements for installing cPanel & WHM on Ubuntu, currently supporting only Ubuntu 24.04 LTS (Noble Numbat); support shifts to new LTS releases as new cPanel & WHM LTS versions ship. Covers hardware minimums (1.1 GHz CPU, 2 GB RAM/4 GB recommended, 20-40 GB disk, 64-bit only), the requirement to use the server install image, that SELinux is unsupported (AppArmor is fine), disabling ufw, licensing, MariaDB 10.11 as the default database, and PowerDNS as the only supported nameserver.
- [System Requirements](https://docs.cpanel.net/installation-guide/system-requirements/): Landing page pointing to per-operating-system minimum installation requirements for cPanel & WHM and cPanel DNSOnly, linking to the AlmaLinux OS, CloudLinux, Rocky Linux, and Ubuntu system requirements pages; requirements vary by OS.
- [Troubleshoot Your Installation](https://docs.cpanel.net/installation-guide/troubleshoot-your-installation/): Troubleshooting guide for problems encountered during or after cPanel & WHM installation, covering self-signed SSL/security certificate warnings, license file errors, Perl installation failures, high CPU load on Hyper-V, RPM/.deb package installation failures, DNS resolver errors after hostname changes, cloud-hosted hostname retention issues, and ESET antivirus installation conflicts, with links to each issue's dedicated fix documentation.
- [WHM](https://docs.cpanel.net/installation-guide/whm/): Post-installation getting-started hub for WHM, linking to documentation on logging in to your server or account, the WHM interface and Getting Started guide, moving from WHM to a live website, the full WHM feature documentation, configuring your firewall, and updating your system, plus cPanelTV YouTube tutorial playlists for WHM and cPanel basics.

## Manage2

- [API Authorization Keys](https://docs.cpanel.net/manage2/admin/api-authorization-keys/): Describes Manage2's API Authorization Keys interface for assigning or removing per-IP-address privileges used for licensing API access, such as adding, expiring, modifying/transferring, and reactivating licenses, viewing active licenses, and managing authorization keys.
- [API Pickup Passphrases](https://docs.cpanel.net/manage2/admin/api-pickup-passphrases/): Describes Manage2's API Pickup Passphrases interface for creating, modifying, and deleting pickup passphrases used to authenticate Manage2 API calls, including assigning specific privileges to each passphrase.
- [Manage2 FAQ](https://docs.cpanel.net/manage2/admin/manage2-faq/): FAQ covering common Manage2 billing-portal admin tasks: logging in and resetting credentials, creating additional accounts, security questions, adding access IPs, using the Manage2 API, managing user privileges, license transfer/renewal/expiration, purchasing cPanel, CloudLinux, and KernelCare licenses, viewing and paying bills via PayPal/credit card/ACH and setting up recurring payments, and updating company profile and branding information.
- [The Manage2 Dashboard](https://docs.cpanel.net/manage2/admin/the-manage2-dashboard/): Describes the Manage2 Dashboard interface for managing cPanel & WHM licenses, covering its application toolbar, module toolbar, feature groups (which vary by administrator level), and server information section; notes administrator level determines available features and defaults to 0 for primary accounts and -10 for additional accounts.
- [Manage2 API Function - Add a Pickup Phrase](https://docs.cpanel.net/manage2/api/manage2-api-add-a-pickup-phrase/): Manage2 API function XMLaddPickupPass.cgi creates a pickup phrase used to authenticate with the Manage2 API. Accepts a single `pickup` parameter containing the phrase text.
- [Manage2 API Function - Add Group](https://docs.cpanel.net/manage2/api/manage2-api-add-group/): Manage2 API function XMLgroupAdd.cgi adds a new group to a Manage2 account. Accepts a `group` parameter that specifies the new group's name.
- [Manage2 API Function - Add Licenses](https://docs.cpanel.net/manage2/api/manage2-api-add-licenses/): Manage2 API function XMLlicenseAdd.cgi adds a new license to a Manage2 account. Accepts parameters including `ip`, `packageid`, `groupid`, `force`, `dryrun`, `maxusers`, and `external_notes`.
- [Manage2 API Function - Cancel a License Transfer](https://docs.cpanel.net/manage2/api/manage2-api-cancel-a-license-transfer/): Manage2 API function XMLtransferRequest.cgi cancels an existing license transfer request. Accepts `cancel`, `groupid`, `packageid`, and `ip` parameters to identify the transfer to cancel.
- [Manage2 API Function - Change a License IP Address](https://docs.cpanel.net/manage2/api/manage2-api-change-a-license-ip-address/): Manage2 API function XMLtransfer.cgi changes the IP address of an existing license by transferring it from an old IP to a new one. Accepts `oldip`, `newip`, `packageid`, `force`, and `dryrun` parameters.
- [Manage2 API Function - Change a License Package](https://docs.cpanel.net/manage2/api/manage2-api-change-a-license-package/): Manage2 API function XMLpackageUpdate.cgi updates the package assigned to an existing license. Accepts `ip`, `oldpackageid`, `newpackageid`, and `maxusers` parameters.
- [Manage2 API Function - Create a Nova Cloud SSO link](https://docs.cpanel.net/manage2/api/manage2-api-create-a-nova-cloud-sso-link/): Manage2 API function XMLsso.cgi generates a Single Sign-On (SSO) link that logs a user into the Nova Cloud application without a username or password. Accepts a `liscid` (license ID) parameter and returns a `ssoUrl`; applies only to Nova Cloud licenses.
- [Manage2 API Function - Display Groups](https://docs.cpanel.net/manage2/api/manage2-api-display-groups/): Manage2 API function XMLgroupInfo.cgi returns the list of groups configured on a Manage2 account. Supports an optional `expand` parameter for expanded output.
- [Manage2 API Function - Edit Group](https://docs.cpanel.net/manage2/api/manage2-api-edit-group/): Manage2 API function XMLgroupEdit.cgi edits the name and/or taxable status of an existing Manage2 group. Accepts `group` (existing group name) and `newgroup` (new group name) parameters.
- [Manage2 API Function - Expire Licenses](https://docs.cpanel.net/manage2/api/manage2-api-expire-licenses/): Manage2 API function XMLlicenseExpire.cgi expires an existing license. Accepts `liscid` (license ID), `reason`, and `expcode` parameters.
- [Manage2 API Function - Extend One Time Licenses](https://docs.cpanel.net/manage2/api/manage2-api-extend-one-time-licenses/): Manage2 API function XMLonetimeext.cgi extends a one-time license by one year. Accepts an `ip` parameter identifying the license.
- [Manage2 API Function - Fetch Risk Data](https://docs.cpanel.net/manage2/api/manage2-api-fetch-risk-data/): Manage2 API function XMLsecverify.cgi returns a fraud risk score for an IP address, calculated from chargebacks, fraudulent sign-ups, and other risk signals. Accepts an `ip` parameter.
- [Manage2 API Function - Group Update](https://docs.cpanel.net/manage2/api/manage2-api-group-update/): Manage2 API function XMLgroupUpdate.cgi associates a license or collection of licenses with a group. Accepts `ip`, `packageid`, and `group` parameters; cannot be used to associate a Group Limited user. Introduced in cPanel License (CPL) client library version 3.8.
- [Manage2 API Function - List License Information](https://docs.cpanel.net/manage2/api/manage2-api-list-license-information/): Manage2 API function XMLlicenseInfo.cgi returns a list of the Manage2 account's licenses. Accepts `expired`, `groupid`, `maxage`, and `els` parameters to filter results.
- [Manage2 API Function - List Package Information](https://docs.cpanel.net/manage2/api/manage2-api-list-package-information/): Manage2 API XMLpackageInfo.cgi function that lists all packages (and package IDs) available on a Manage2 account; the optional `expand` parameter returns additional fields such as base_price, bulk_charge, host_type, max_accounts, term, term_seconds, trial, and product-specific attributes for cPanel/WHM, WHMCS Cloud, Sitejet, and other license types.
- [Manage2 API Function - Look Up a License ID](https://docs.cpanel.net/manage2/api/manage2-api-look-up-a-license-id/): Manage2 API XMLlookup.cgi function that returns the license ID(s) associated with an IP address; accepts `ip` (required), `packageid`, and `all` (return all licenses for the IP) parameters, and returns `licenseid`, `reason`, `status`, and `version`.
- [Manage2 API Function - Raw Lookup](https://docs.cpanel.net/manage2/api/manage2-api-raw-lookup/): Manage2 API XMLRawlookup.cgi function that returns detailed license information for an IP address or packageid, including licenseid, hostname, os, packageid, producttype, expiredon, valid/status flags, and product-specific fields (e.g., servers/sites for 360 Monitoring, cname/zone for cloud instances); accepts `ip`, `packageid`, and `all` parameters.
- [Manage2 API Function - Reactivate Expired Licenses](https://docs.cpanel.net/manage2/api/manage2-api-reactivate-expired-licenses/): Manage2 API XMLlicenseReActivate.cgi function that reactivates an expired cPanel license given a required `liscid` parameter, with optional `force` and `dryrun` parameters; returns licenseid, monthly_price, price, reason, and status.
- [Manage2 API Function - Register Key-Based Authentication](https://docs.cpanel.net/manage2/api/manage2-api-register-key-based-authentication/): Manage2 API XMLregisterAuth.cgi function that registers a server for key-based authentication given required `user`, `pickup` phrase, and `service` name parameters; returns an authentication `key`, `ip`, `reason`, and `status`.
- [Manage2 API Function - Request a License Transfer](https://docs.cpanel.net/manage2/api/manage2-api-request-a-license-transfer/): Manage2 API XMLtransferRequest.cgi function that requests transfer of a license between companies given required `groupid`, `packageid`, and `ip` parameters; returns `reason` (transfer request result and confirmation number), `status`, and `version`.
- [Manage2 API Function - Update Active License Metadata](https://docs.cpanel.net/manage2/api/manage2-api-update-active-license-metadata/): Manage2 API XMLupdateActiveLicenseMetadata.cgi function that updates an active license's `external_notes` metadata field (up to 64 characters, overwrites any existing value) given required `liscid` and `external_notes` parameters; returns `reason` and `status`.
- [Account History Tracker](https://docs.cpanel.net/manage2/billing/account-history-tracker/): Manage2 Account History Tracker interface: shows an Account History table of monthly billing, license count, and adjusted license count (with a vertical table view option), plus License History and Billing History graphs showing past and projected growth in active licenses and billing amounts.
- [Account History](https://docs.cpanel.net/manage2/billing/account-history/): Manage2 Account History interface: displays Terms Net and Account Number, a Selection Filter to search transactions by type, method, date range, and amount, a balance-over-time chart, and a transaction table (type, post date, invoice PDF/HTML, amount, method, reference, notes, balance). Also covers avoiding license reactivation fees by waiting 48 hours after the monthly invoice generates.
- [Make a PayPal Payment](https://docs.cpanel.net/manage2/billing/make-a-paypal-payment/): Manage2 Make a PayPal Payment interface: pay an account balance via PayPal eCheck by entering (or accepting the pre-filled) payment amount and clicking Submit. Notes that PayPal eChecks post only after clearing, which can cause an account to become past due if payment is made close to the invoice due date.
- [Manage and Pay with Credit Cards](https://docs.cpanel.net/manage2/billing/manage-and-pay-with-credit-cards/): Manage2 Manage and Pay with Credit Cards interface: add a new card (name, cardholder, number, expiration, billing address), update or delete an existing card, make an immediate one-time payment applied to the oldest invoice, and configure automatic recurring payments by timing (days before due), charge type (all/current/past due), trigger condition, percentage, and card priority order.
- [Setup Automatic ACH Payment](https://docs.cpanel.net/manage2/billing/setup-automatic-ach-payment/): Manage2 Setup Automatic ACH Payment interface: generates a printable PDF enrollment form for ACH bank withdrawals using a US checking or savings account's routing number, account number, account type, and depository name/address. Requires uploading the signed form and a voided check via the Upload Forms interface; enrolled invoices are withdrawn around the 28th of each month, and stopping requires contacting Customer Service.
- [Upload Forms](https://docs.cpanel.net/manage2/billing/upload-forms/): Manage2 Upload Forms interface: upload digital copies of authorization forms (such as signed ACH enrollment forms and voided checks) in .pdf, .jpeg, .png, or .gif format via Browse, select file, and Upload, with a confirmation message on completion.
- [Address Book](https://docs.cpanel.net/manage2/company/address-book/): Manage2 Address Book interface: add a new address with nickname, contact name, address fields, and country; update an existing address's details; or delete an address. Addresses linked to any part of the Manage2 account cannot be deleted.
- [Manage Authorized Logo](https://docs.cpanel.net/manage2/company/manage-authorized-logo/): Manage2 Manage Authorized Logo interface: download cPanel Authorized Partner logos (with or without company name, in Large/Medium/Small sizes) for use on a partner's website, and access the Partner Page URL link to the partner's public entry in the cPanel Hosting Partner Directory.
- [Update Company Information](https://docs.cpanel.net/manage2/company/update-company-information/): Manage2 Update Company Information interface: view or update company contact details (Company Name and DBA require Customer Service to change), manage Company Domains eligible for enterprise support, toggle cPanel Store Integration options for paid/free SSL certificates, configure Sales Options purchase banners (Do Not Sell, cPanel Store, or Custom Store URL) for products like CloudLinux, KernelCare, WHMCS, and cPanel License, and submit a company logo for the public partner profile (Partner NOC info is managed separately via the Dashboard).
- [View Contracts and Agreements](https://docs.cpanel.net/manage2/company/view-contracts-and-agreements/): Manage2 View Contracts and Agreements interface: download PDF contracts and agreements tied to an account. Accounts with a single company see the PDFs directly; accounts with two or more companies must select the company from a menu and click Go before the PDFs appear.
- [Extend One Time License Updates](https://docs.cpanel.net/manage2/direct/extend-one-time-license-updates/): Manage2 Extend One Time License Updates interface: order a one-year, non-refundable software-update extension for a one-time license by entering the server's IP address, reviewing the fee, and clicking Extend Updates. New one-time licenses are no longer offered.
- [Search for a Group or Direct Account](https://docs.cpanel.net/manage2/direct/search-for-a-group-or-direct-account/): Manage2 Search for a Group or Direct Account interface: locate an individual group or direct account by selecting a search criterion (Email, Account, or Company), entering a search string, and clicking Find.
- [View Yearly License Renewal Options](https://docs.cpanel.net/manage2/direct/view-yearly-license-renewal-options/): Manage2 View Yearly License Renewal Options: describes renewing an expired license through the Add License interface by verifying the displayed IP addresses in the warning message and clicking Click Here for Forced Add.
- [Groups](https://docs.cpanel.net/manage2/groups/groups/): Manage2 Groups interface: lists groups with ID, name, license count, address, and creation date; supports adding a group (with optional Main Group designation), editing or deleting a group (deletion requires transferring its licenses to another group), searching by group name, exporting the list to CSV, toggling displayed columns, and viewing or transferring licenses between groups.
- [cPanelLicensing Perl Module](https://docs.cpanel.net/manage2/knowledge-base/cpanellicensing-perl-module/): cPanelLicensing Perl module reference: runs Manage2 API functions from the command line or scripts on *nix systems. Lists requirements (Perl 5.6.2+, OpenSSL, and one of XML::Simple/JSON::Syck/YAML::Syck/YAML/JSON/JSON::XS), where to download the SDK from the Manage2 Dashboard, and basic usage instantiating the module with user and pass parameters.
- [cPanelLicensing PHP Class](https://docs.cpanel.net/manage2/knowledge-base/cpanellicensing-php-class/): cPanelLicensing PHP class reference: runs Manage2 API functions to manage customer licenses, requiring PHP 5 with cURL and SimpleXML support. Covers downloading the class from the Manage2 Dashboard, including and instantiating cPanelLicensing with a username/password, calling functions like fetchLicenses with parameter arrays, the set_format method for choosing simplexml/xml/json/yaml output, and the findKey method for retrieving a group or package name.
- [FastUpdate Cache System FAQ](https://docs.cpanel.net/manage2/knowledge-base/fastupdate-cache-system-faq/): FastUpdate Cache system FAQ: on-demand mirror caching cPanel & WHM software updates from httpupdate servers to reduce redundant external transfers. Covers creating a mirror on AlmaLinux 9 (firewalld, disk space, disabling SELinux, install-almalinux9.sh script), listing monitored servers via updateseeds.cpanel.net, and troubleshooting installation and post-installation errors (insufficient disk space, non-root execution, wrong OS version, SELinux enforcing mode, http-varnish daemon not running, port 80 conflicts).
- [Guide to the Manage2 API](https://docs.cpanel.net/manage2/knowledge-base/guide-to-the-manage2-api/): Guide to the Manage2 API: overview of automating cPanel license management (PHP/Perl, GET/POST, XML/JSON/YAML output) by authenticating an allow-listed IP via Manage2's Add an Access IP interface. Shows how to call functions via browser-based session URLs, the cPanelLicensing PHP class, the cPanelLicensing Perl module, and cURL, with example calls to reactivate a license (XMLlicenseReActivate).
- [Manage2 Authentication Methods](https://docs.cpanel.net/manage2/knowledge-base/manage2-authentication-methods/): Manage2 API authentication methods: basic authentication (username/password) via browser HTTP dialog, curl -u, the cPanelLicensing Perl module, or the cPanelLicensing PHP class; and key-based authentication, which registers a 20-character API key tied to a specific IP address (passed as the apikey parameter) and returns CORS headers for cross-origin use.
- [Manage2 Quickstart Development Guide](https://docs.cpanel.net/manage2/knowledge-base/manage2-quickstart-development-guide/): Manage2 Quickstart Development Guide: onboarding steps for building custom Manage2 applications that automate licensing and billing, covering how to obtain a development license, learn the Manage2 API, write backend code (typically PHP or Perl) that authenticates as a Manage2 user, and where to get developer support (forums, Discord, technical support).
- [Manage2 Return Data](https://docs.cpanel.net/manage2/knowledge-base/manage2-return-data/): Manage2 API return data formats: XML is the default output; append ?output=json or ?output=yaml to a function URL to receive JSON or YAML instead. Includes side-by-side JSON, XML, and YAML output examples using the List Package Information function, and notes that the output URL parameter can appear anywhere in the query string.
- [Activation](https://docs.cpanel.net/manage2/licenses/activation/): Describes the Manage2 Activation interfaces used to sign, postpone, or reject each license type's Product Terms of Use agreement (for example CloudLinux Activation), noting that 360 Monitoring, koality, and Sitejet Studio licenses activate separately via emailed activation links rather than this agreement flow.
- [Add License](https://docs.cpanel.net/manage2/licenses/add-license/): Covers the Add License interface in Manage2 used to add new licenses or renew existing ones by selecting group, package, and IP addresses, noting package-specific fields (WP Toolkit accounts, 360 Monitoring monitors, koality projects), billing/invoice timing, and manual activation requirements for 360 Monitoring, koality, and WP Guardian licenses.
- [Download an Active License Spreadsheet](https://docs.cpanel.net/manage2/licenses/download_an_active_license_spreadsheet/): Covers the Download an Active License Spreadsheet interface in Manage2, which lets a user download an auto-generated CSV file listing active licenses.
- [How to Purchase a 360 Monitoring License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-360-monitoring-license/): Explains how cPanel Partners purchase a 360 Monitoring license (server and site monitoring) through the Manage2 Add Licenses interface, including selecting group, package, and monitor counts, and activating the license via the emailed activation link.
- [How to Purchase a Comet Backup License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-comet-backup-license/): Explains how to purchase a Comet Backup license (backup/disaster-recovery software using WebPros Storage powered by Wasabi) either through the Manage2 Add License interface, selecting a storage tier package and IPv4 address, or through the cPanel Store checkout flow.
- [How to Purchase a koality License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-koality-license/): Explains how cPanel Partners purchase a koality license (e-commerce and website monitoring) through the Manage2 Add Licenses interface, including selecting group, package, and additional project counts, then activating via the emailed link.
- [How to Purchase a Nova License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-nova-license/): Explains how cPanel Partners purchase a license for Nova (AI-powered tool for building websites and web apps) through the Manage2 Add License interface by selecting a group, a Nova package, and a server IP address, and also notes the server requirements.
- [How to Purchase a Sitejet Commerce License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-sitejet-commerce-license/): Explains how cPanel Partners purchase a Sitejet Commerce license (web store builder powered by Sitejet) through the Manage2 Add License interface, choosing among Starter, Professional, and Unlimited plans based on product count, then activating via the emailed link.
- [How to Purchase a SocialBee License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-socialbee-license/): Explains how to purchase a SocialBee (AI-powered social media manager) license through the Manage2 Add License interface, including selecting group/package and the number of users, profiles, and workspaces, then activating via the emailed link and code.
- [How to Purchase a SolusVM License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-solusvm-license/): Explains how cPanel Partners purchase a SolusVM license (control panel for creating, managing, and monitoring virtual machines) through the Manage2 Add Licenses interface by selecting a group, package, and compute resource level, then activating via the emailed activation code.
- [How to Purchase a WP Guardian (cPanel Addon) License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-wp-guardian-cpanel-addon-license/): Explains how cPanel Partners purchase a WP Guardian (cPanel Addon) license, which bundles WP Toolkit Deluxe with WP Guardian's security features, through the Manage2 Add Licenses interface by selecting a group, package, and IPv4 address.
- [How to Purchase a WP Guardian License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-wp-guardian-license/): Explains how cPanel Partners purchase a WP Guardian license (WordPress security scanning, virtual patching, and infrastructure analysis) through the Manage2 Add Licenses interface by selecting a group and package, then activating via the emailed link.
- [How to Purchase a WP Squared Cloud License](https://docs.cpanel.net/manage2/licenses/how-to-purchase-a-wp-squared-cloud-license/): Explains how cPanel Partners purchase a WP Squared Cloud license (managed WordPress hosting on the WebPros Cloud platform) through the Manage2 Add License interface, including selecting group, package, domain, geographic zone, and UI language.
- [Licenses Activated in the Past 48 Hours](https://docs.cpanel.net/manage2/licenses/licenses-activated-in-the-past-48-hours/): Covers the Licenses Activated in the Past 48 Hours interface in Manage2, which lists recently added licenses with group, package, monthly charge, hostname, IP, contact, and start date.
- [List Active Licenses](https://docs.cpanel.net/manage2/licenses/list-active-licenses/): Covers the List Active Licenses interface in Manage2, describing the Active Licenses table (IP, hostname, package, accounts, group, version, OS, arch, add date, and product-specific fields like sites/servers/projects) and its Expire, View/Modify, and Transfer actions, plus the Packages summary table of dedicated license counts.
- [List Expired and Suspended Licenses](https://docs.cpanel.net/manage2/licenses/list-expired-and-suspended-licenses/): Covers the List Expired and Suspended Licenses interface in Manage2, which lists licenses that expired or were suspended within a chosen date range (group, package, hostname, IP, expiration date, reason, blame) and describes how to reactivate an eligible expired or suspended license.
- [List Licenses](https://docs.cpanel.net/manage2/licenses/list-licenses/): Covers the List Licenses interface in Manage2, which lets a user filter licenses by group, package, or IP range and view/act on results (ID, IP, package, status, validity, add date), including how to expire, transfer, modify, or submit priority support for a license.
- [Modify a License](https://docs.cpanel.net/manage2/licenses/modify-a-license/): Covers the Modify a License interface in Manage2, accessed from List Licenses or Search, which lets a user with editor permissions click and edit individual license parameters and save changes with Update.
- [Rejected License Requests](https://docs.cpanel.net/manage2/licenses/rejected-license-requests/): Covers the Rejected License Requests interface in Manage2, which lists the last 300 license requests that failed to sync with the cPanel license server, showing IP, hostname, contact, cPanel version, rejection time, reason, and authentication server.
- [Review Pending Transfers](https://docs.cpanel.net/manage2/licenses/review-pending-transfers/): Covers the Review Pending Transfers interface in Manage2, which lists pending license transfer requests (ID, IP, source/destination company, requester, end user email, timestamps, and response status) and lets a user cancel a pending transfer.
- [Search for a License](https://docs.cpanel.net/manage2/licenses/search-for-a-license/): Covers the Search for a License interface in Manage2, which lets a user search account licenses by email, IP, IP regex, hostname, or hostname partial match, and describes the License History results including expiring, viewing/modifying, and editing a license group.
- [Show Duplicate Licenses](https://docs.cpanel.net/manage2/licenses/show-duplicate-licenses/): Covers the Show Duplicate Licenses interface in Manage2, which lists IP addresses with duplicate licenses along with a message describing the duplication and the date it occurred.
- [Transfer a license](https://docs.cpanel.net/manage2/licenses/transfer-a-license/): Covers the Transfer a License interface in Manage2, describing how to move an active license from an Old IP to a New IP address, view the new IP's license status at verify.cpanel.net, and reverse a completed transfer.
- [List Packages](https://docs.cpanel.net/manage2/packages/list-packages/): Covers the List Packages interface in Manage2, which lists an account's billing packages with fields such as ID, name, associated product, host type, external/internal designation, max accounts, billing type, base rate, bulk charge, included accounts, and per-account charge.
- [Add an Access IP](https://docs.cpanel.net/manage2/security/add-an-access-ip/): Covers the Add an Access IP interface in Manage2, which lets a user grant a user account or user group permission to log in from a specified IP address or wildcard IP range.
- [Change Password](https://docs.cpanel.net/manage2/security/change-password/): Covers the Change Password interface in Manage2, describing how to change your account password using current/new/verify password fields, and how to use the Password Generator to create and configure a secure password.
- [Manage Ip Access](https://docs.cpanel.net/manage2/security/manage-ip-access/): Covers the Manage IP Access interface in Manage2, which lets a user find and remove a previously authorized IP address range, revoking its permission to log in to the Manage2 account.
- [Security Setup](https://docs.cpanel.net/manage2/security/security-setup/): Covers the Security Setup interface in Manage2, where a user selects security questions and answers that must be answered correctly when logging in from an IP address outside their normal range.
- [Phone Support Incidents](https://docs.cpanel.net/manage2/support/phone-support-incidents/): Covers the Phone Support Incidents interface in Manage2, listing open incidents (with Call Support option) and closed incidents, each showing incident number, PIN, expiration date, and linked ticket number.
- [Phone Support](https://docs.cpanel.net/manage2/support/phone-support/): Covers the Phone Support interface in Manage2, an admin-level table of all phone support incidents on record, showing incident number, PIN, company, email, and options to add notes, close an incident, or link/delink a support ticket.
- [Submit a New Priority Support Request](https://docs.cpanel.net/manage2/support/submit-a-new-priority-support-request/): Covers the Submit a New Priority Support Request link in Manage2, which forwards a user to the cPanel Customer Portal to open a priority support request, noting that any licensed IP works for non-server-specific requests and that the Manage2 account must be linked to the ticket system first.
- [Support Usage Report](https://docs.cpanel.net/manage2/support/support-usage-report/): Covers the Support Usage Report interface in Manage2, describing the Executive Summary table (monthly tickets, licenses, and tickets-to-licenses ratios per company) and the Detail Report table (per-company ticket counts and averages, filterable by month, group, and output format).
- [View Open and Closed Requests](https://docs.cpanel.net/manage2/support/view-open-and-closed-requests/): Covers the View Open and Closed Requests feature in Manage2, which links to the Help Center's My Requests interface for viewing and searching support tickets you submitted or are CC'd on, including status, expedite, and feedback actions.
- [Add User](https://docs.cpanel.net/manage2/users/add-user/): Covers the Add User interface in Manage2, describing how to create additional user accounts with individual login credentials, set account options (username, admin level, contact info), and assign privileges that control access to features like licenses, billing, and support.
- [Change Preferences](https://docs.cpanel.net/manage2/users/change-preferences/): Covers the Change Preferences interface in Manage2, which lets a user set default group/package for Add License, customize the My Shortcuts menu, and reorder Dashboard interface sections.
- [Edit Users](https://docs.cpanel.net/manage2/users/edit-users/): Covers the Edit Users interface in Manage2, describing account settings (department, API password, admin level, contact info) and how to add/remove privileges and limit a user's access to specific groups and packages.
- [Manage Users](https://docs.cpanel.net/manage2/users/manage-users/): Covers the Manage Users interface in Manage2, a searchable table of account users (ID, name, username, email, company, type, admin level, last login) with Delete, Edit, and Reset Security actions for each user.
- [Update My Information](https://docs.cpanel.net/manage2/users/update-my-information/): Covers the Update My Information interface in Manage2, which lets a user edit their own account's settings (same fields as Edit Users) to hide unused Dashboard features or limit their own groups and packages.