How to Force a Password Change for a Client Account in WHM

How to Force a Password Change for a Client Account in WHM?

For security purposes — especially after a suspected breach or when onboarding a new client — you can force a cPanel account to require a password change on the next login. This ensures clients set their own secure passwords immediately.

Set a New Password and Notify Client

1. Login to WHM.
2. Go to Account Functions → Password Modification.
3. Select the client's username.
4. Set a new temporary password.
5. Check Send notification to the email address listed with this account.
6. Click Change Password.
7. Separately notify the client to change their password immediately after logging in.

Client Changes Password Inside cPanel

Once the client logs into cPanel with the temporary password, guide them to change it:

1. Click username in top right corner of cPanel.
2. Go to Password & Security.
3. Enter the temporary password and set a new one.
4. Click Change Password Now.

When to Force a Password Change

• After a suspected unauthorized cPanel access.
• When onboarding a new client (set a temporary password, then have them change it).
• After a security incident like malware or account compromise.
• If a client has not changed their password in over 12 months.
• When an employee who knew the password leaves the client's organization.

Proactive password security management reduces the risk of account compromises and builds client trust in your hosting service.

If you continue to face issues, please open a create a request.