{"id":26622,"date":"2025-08-19T14:46:45","date_gmt":"2025-08-19T12:46:45","guid":{"rendered":"https:\/\/contabo.com\/blog\/?p=26622"},"modified":"2026-01-16T13:02:56","modified_gmt":"2026-01-16T12:02:56","slug":"how-to-enhance-cpanel-account-security-with-recommended-settings","status":"publish","type":"post","link":"https:\/\/contabo.com\/blog\/how-to-enhance-cpanel-account-security-with-recommended-settings\/","title":{"rendered":"How to Enhance cPanel Account Security with Recommended Settings\u00a0"},"content":{"rendered":"\n

Keeping your cPanel<\/a> hosting secure protects your websites, data, and customers. With the right cPanel security settings, you reduce attacks and prevent unauthorized access. In this guide, you learn how to harden both cPanel and WebHost Manager using built-in tools and smart server-side measures. <\/p>\n\n\n\n

Secure Your cPanel and WebHost Manager Access\u00a0<\/h2>\n\n\n\n

First, secure how you log in to your hosting environment. <\/p>\n\n\n\n

Always access cPanel<\/strong> and WebHost Manager<\/strong> over HTTPS<\/strong>. This encrypts your credentials and protects them from interception. <\/p>\n\n\n\n

Next, enable Two-Factor Authentication (2FA)<\/strong> for all admin-level users. You find this in WHM under \u201cSecurity Center > Two-Factor Auth.\u201d<\/strong> 2FA adds a second login step and stops many unauthorized access attempts. <\/p>\n\n\n\n

Then, improve your SSH access. Avoid default ports whenever possible. Change your SSH port to a custom one. Disable password logins and switch to SSH key authentication<\/strong> instead. This makes brute-force attacks much harder. <\/p>\n\n\n\n

Strengthen Passwords and User Policies\u00a0<\/h2>\n\n\n\n

Strong passwords still matter for cPanel account security. Therefore, enforce them using WebHost Manager.  <\/p>\n\n\n\n

In WebHost Manager<\/strong>, open Password Strength Configuration<\/strong>. Set the minimum password score to at least 80<\/strong>. This forces every user to choose complex and unique passwords. Also, never reuse passwords across different services. Use a password manager to generate and store logins securely. This simple habit reduces the damage from any single breach. <\/p>\n\n\n\n

Secure Server Settings for cPanel Hosting\u00a0<\/h2>\n\n\n\n

When you run cPanel on a VPS<\/a> or dedicated server, you control the full system. Meaning, you also own the security responsibilities. <\/p>\n\n\n\n

Follow these best practices for a safer cPanel hosting environment: <\/p>\n\n\n\n