Force a User to Change Their Password in WHM

Why force a password change?

Sometimes a password is old, weak, or may have leaked. You can make the user choose a new one. This helps keep the account safe. It is like asking a guest to swap a key that might have been copied.

You do this in WHM, the Web Host Manager. It is the panel a server owner or reseller uses. You need root or reseller access.

Steps

1. Log in to WHM.
2. In the search box at the top left, type Force Password Change. It may show as Password Modification or Security Center tools on some versions.
3. If the page looks like a list of accounts, tick the box next to each user who must change their password.
4. Click Force Password Change or Save.
5. Read the message that confirms the change.

The next time the user logs in to cPanel, they see a page telling them to set a new password. They cannot use cPanel until they do.

Another way: change it yourself

1. In WHM, open List Accounts.
2. Find the account.

   

3. Click the + sign next to it to open more options.
4. Click Change Password (the key icon), or use Password Modification.
5. Type a strong new password.
6. Click Change Password.

   

7. Send the new password to the user in a safe way. Do not email it in plain text if you can avoid it.

Warning: If you change a password, programs that use the old password stop working. Examples are email apps and website tools. Tell the user first.

Make a strong password

• Use at least 12 characters.
• Mix letters, numbers and symbols.
• Do not use names, birthdays or simple words.
• Use a different password for every account.

Need help? Open a support ticket.

Quick recap

• Forcing a change makes a user choose a new password at next login.

  

• Search WHM for the password tools.
• You can also change the password yourself from List Accounts.
• Warn users, because old saved passwords stop working.