How to change your hosting account password

Your hosting account password protects access to your client area and your billing information, along with the tools that manage your server. Changing it regularly reduces the risk of unauthorised access, particularly if you suspect your credentials have been compromised or shared with former team members.

You will update passwords for your client area and your cPanel hosting account, and for the reseller WHM interface. You can also enable two-factor authentication to add an extra layer of security beyond your password alone.

Change your client area password

Your client area password controls access to billing and service management, plus your account settings. You can update it at any time and use the built-in password generator to create a strong replacement.

1. Open your account menu. Log in to your client area and click your name in the top right corner, then select Change Password.
2. Enter your current password. Type it in the Existing Password field. This confirms you have permission to make the change.
3. Set your new password. Type it in New Password and again in Confirm New Password, or click Generate Password.
4. Save your changes. Click Save Changes. Your new password takes effect immediately and you will need it for your next login.

The Generate Password window opens over the form with Password Length set to 12. Click Generate new password for a different one, Copy to copy it, or Copy to clipboard and Insert to copy it and put it in the form. If Confirm New Password is still empty, paste the password there as well, and store it in your password manager before you save.

The account menu in the client area.

The password generator in the client area.

Enable two-factor authentication

Two-factor authentication requires a one-time code from your smartphone in addition to your password. This prevents unauthorised access even if someone obtains your password through phishing or data breaches.

1. Open security settings. Click your name in the top right corner and select Security Settings.
2. Start the setup. Click the green Click here to Enable button in the Two-Factor Authentication section.
3. Choose the method. Select Time Based Tokens and click Get Started.
4. Link your authenticator app. Scan the QR code on the next screen with the app, type the six-digit code it shows and click Submit.

The Two-Factor Authentication section reads currently Disabled until you finish. Time Based Tokens gets its codes from an app such as Google Authenticator or Duo. After you submit the code, the screen shows a backup code. Store it somewhere safe, then click Close.

The two-factor authentication enable button in Security Settings.

Choosing Time Based Tokens in the two-factor authentication window.

Change your cPanel account password

Your cPanel password is separate from your client area password. It controls access to your hosting control panel, where you manage files and databases as well as email accounts.

1. Open your services list. Click Services in the top bar of the client area, then My Services.
2. Open your hosting service. Click Manage next to the service you want to update.
3. Open the password change form. On the Overview tab, click Change Password in the Actions list.
4. Set your new cPanel password. Enter the new password and save the change. Store the password in a secure location before you save.

The Change Password action on a service page.

If you need to reset your WordPress admin password instead, that is separate from your hosting account credentials. Our guide on resetting your WordPress password covers the process.

Change client passwords from WHM

Reseller and agency hosting customers can update passwords for their client accounts directly from WHM without logging into each individual cPanel account.

1. Log in to WHM. On your service page, click Log in to WHM in the Actions list.
2. Open Password Modification. Type Password Modification into Search Tools at the top of the left menu. The tool is listed under Account Functions.
3. Choose the account. Select the client account you want to update from the list.
4. Set the password. Enter a New Password, or click Generate, then enter it again in Confirm Password. Click Change Password to save it.

The access guide also covers logging in to WHM with the details in your welcome email.

The Password Modification tool in WHM.

Check the change and your other details

Log out and back in to confirm the new password works. Your contact details and payment methods sit in the same account menu, so you can update your contact details and manage payment methods while you are there.

If something does not work, get in touch and tell us which password you were changing.