cP
cPanel articles
The industry-standard control panel for Linux web hosting. WHM, cPanel and Webmail accounts under one license.
53 articlescPanel licensing & pricing →
Tutorials & how-tos
All tutorials & how-tos →8 min
cPanel update tiers: EDGE, CURRENT, RELEASE, STABLE, LTS
Your update tier decides when a major cPanel version lands on your fleet. Here is what each tier points at today, how to set it, and how to stagger upgrades across servers.
2026-08-25
6 min
How to move a cPanel license to a new server or IP address
cPanel licenses are bound to a primary IP, not a server. Here's how to repoint one to a new IP after a migration, IP change, or provider swap without downtime.
2026-07-22
7 min
Tune Apache SpamAssassin on cPanel without losing mail
The WHM and cPanel settings that actually move the needle on inbound spam — threshold scoring, Spam Box vs auto-delete, SMTP-time rejection, and per-test scoring — without silently eating legitimate mail.
2026-07-18
6 min
Set up a jailed SSH shell (jailshell) on cPanel & WHM
Give shared-hosting clients SSH without exposing the box — enable cPanel's jailed shell, understand VirtFS, and learn why CageFS should replace it on CloudLinux.
2026-07-17
6 min
Deploy client sites with cPanel Git Version Control
Wire up push-to-deploy on cPanel with Git Version Control and a .cpanel.yml file — plus the dirty-tree, CageFS, and denyCurrentBranch gotchas that break real deploys.
2026-07-13
7 min
Set up a remote MySQL server for cPanel with WHM profiles
Offload MySQL to a dedicated database host using WHM's Manage MySQL Profiles — the setup steps, the grants it needs, data migration, and the CloudLinux Governor tradeoff.
2026-07-12
7 min
Enable and control Sitejet Builder in cPanel and WHM
Sitejet Builder ships free with cPanel 116+. Turn it on per package, hide it where you don't want it, understand the premium upsell, and avoid the document-root overwrite that eats live sites.
2026-07-03
8 min
cPanel greylisting: enable, tune, and stop mail delays
Turn on cPGreyList to cut inbound spam without sending legitimate mail to limbo — initial deferral, trusted hosts, SPF bypass, and a decision tree for the "email deferred" complaints.
2026-06-22
7 min
Enable Nginx reverse-proxy caching on cPanel with EA-Nginx
Put cPanel's built-in EA-Nginx in front of Apache as a caching reverse proxy — install it from WHM, control per-user caching, and clear the cache without breaking logged-in WordPress users.
2026-06-16
6 min
Upgrade MariaDB or MySQL on cPanel/WHM without breaking it
A version bump in WHM is a one-way door — no downgrade, no revert to MySQL. The exact path through major versions, plus the CloudLinux Governor route.
2026-06-13
10 min
cPanel account suspension: WHM workflow, automation, and unsuspension
How cPanel suspension actually works under the hood, the WHM and API workflows, custom reasons and pages, and the gotchas that bite when you unsuspend an account.
2026-05-25
8 min
WHM packages and feature lists: structure tiered hosting plans
How to build cPanel packages and feature lists that map cleanly to tiered hosting plans — quotas, LVE, defaults, and the failure modes when wiring into Blesta or WHMCS.
2026-05-24
7 min
CSF country blocking with CC_DENY and CC_ALLOW on cPanel
CC_DENY drops entire countries at the firewall — done right with ipset it costs almost nothing per packet, done wrong it bloats iptables and adds 20ms to every connection.
2026-05-23
8 min
Set up Redis object cache for WordPress on cPanel
Install Redis on a cPanel server, enable phpredis for every selectable PHP version, and wire WordPress accounts to a shared Redis instance with per-account key isolation.
2026-05-18
8 min
Install ConfigServer CSF on cPanel and tune the defaults
Install ConfigServer Security & Firewall on cPanel/WHM in under 10 minutes — including the csf.conf defaults every host should change before leaving TESTING mode.
2026-05-18
8 min
WHM two-factor authentication: enforce TOTP for root and resellers
Turn on WHM two-factor authentication, enrol root and reseller accounts, audit who has it active, and close the gaps cPanel's built-in 2FA leaves behind — API tokens, SSH, and lost devices.
2026-05-17
7 min
WHM Tweak Settings worth changing on a new cPanel server
The 18 Tweak Settings in WHM that matter day one — mail throttling, SMTP restrictions, cookie IP validation, and the cPanel defaults you almost always want to change.
2026-05-17
9 min
WHM Standardized Hooks: automate cPanel events with scripts
WHM Standardized Hooks run a script of yours before or after almost any cPanel event — account creation, password change, SSL install — and let pre-hooks block actions outright.
2026-05-17
8 min
Enable DNSSEC for cPanel-hosted zones without breaking resolution
A working DNSSEC rollout for cPanel — enable per-zone signing, publish the DS record at your registrar, verify with dig, and survive the first key rollover without going dark.
2026-05-17
8 min
Route cPanel outbound mail via SES, SendGrid, or Mailgun
Configure a smart host in Exim so every outbound message from cPanel is relayed through SES, SendGrid, or Mailgun — with per-domain overrides and the gotchas that bite resellers.
2026-05-17
8 min
Change a cPanel WHM hostname without breaking license, mail, or SSL
A clean WHM hostname change takes 15 minutes if you do it in order. The mistakes that cost an afternoon — broken services SSL, license re-checks, mail HELO mismatches, and rDNS — all in one playbook.
2026-05-17
9 min
Tune Apache MPM on cPanel: event, prefork, and worker
Pick the right Apache MPM on cPanel and EasyApache 4 — when event beats prefork, the MaxRequestWorkers math, and the KeepAlive trap that wastes half your worker pool.
2026-05-17
8 min
Set up WHM reseller accounts with the right ACLs
Reseller accounts are how you sublease a cPanel server. Set the wrong ACLs and the reseller can suspend your accounts or restart Apache — here's the safe baseline.
2026-05-16
6 min
Tune WHM cPHulk brute force protection without lockouts
A working cPHulk configuration for shared cPanel servers — whitelist, thresholds, country blocking, notifications, and the CLI commands that get you back in when you lock yourself out.
2026-05-16
8 min
Create and scope WHM API tokens for safe automation
WHM API tokens replace root passwords for billing scripts, monitoring agents, and Blesta or WHMCS integrations — here's how to scope them tightly and rotate them safely.
2026-05-16
8 min
Tune PHP-FPM pools on cPanel — sizing pm.max_children
Size PHP-FPM pools per cPanel account without overcommitting RAM — pm.max_children math, dynamic vs ondemand vs static, and the failures that show up at 1 a.m.
2026-05-16
4 min
Add a new PHP version in EasyApache 4 without breaking sites
Add a PHP build in EasyApache 4, pick extensions, assign per-domain handlers, and recover when the Review stage stalls or rolls back.
2026-05-16
8 min
Set up cPanel Team Manager for delegated account access
Replace shared cPanel passwords with scoped, auditable team users — roles, role limits, 2FA, password expiry, and the WHM toggles you need to flip first.
2026-05-16
8 min
Exim outbound throttling on cPanel: stop spam before blacklisting
Layered Exim limits, per-account caps, and queue triage on cPanel so one compromised WordPress install can't bury your server's IP on Spamhaus by lunchtime.
2026-05-16
6 min
Email deliverability on cPanel: SPF, DKIM, DMARC, MTA-STS
A 2026 deliverability checklist for cPanel operators — reverse DNS, SPF, DKIM, DMARC enforcement, and MTA-STS, with the exact records and where cPanel still expects you to do it by hand.
2026-05-16
8 min
Set up a cPanel DNS cluster with DNSONLY nameservers
Build a redundant cPanel DNS cluster with two free DNSONLY nodes — install, trust setup with API tokens, sync roles, and verification with dig.
2026-05-16
6 min
How to install cPanel on your VPS
A complete walkthrough for installing cPanel & WHM on a fresh VPS — minimum requirements, the install script, post-install hardening, and your first WHM login.
2026-05-15
Migration guides
All migration guides →12 min
Migrate from CentOS Web Panel (CWP) to cPanel: full playbook
A field-tested migration off CentOS Web Panel onto cPanel & WHM — inventory the source, convert Postfix mail layouts, restore databases without prefix conflicts, cut DNS without breaking AutoSSL.
2026-05-21
13 min
Migrate from Virtualmin to cPanel: a practical playbook
A field-tested migration off Virtualmin (GPL or Pro) onto cPanel & WHM — inventory the source, prep the destination, move sites, mail, databases, and DNS without losing customer state.
2026-05-18
11 min
Migrate from HestiaCP to cPanel: a step-by-step playbook
A field-tested migration off HestiaCP onto cPanel & WHM — inventory the source, prep the destination, move sites, mail, and DNS without losing customer state.
2026-05-17
9 min
Migrate from CyberPanel to cPanel: a step-by-step playbook
A field-tested migration off CyberPanel onto cPanel — inventory the source, prep the destination, move sites, mail, and DNS with a 30-minute cutover window per site.
2026-05-17
8 min
WHM Transfer Tool: move cPanel accounts between servers
Use WHM's built-in Transfer Tool to move single accounts or an entire server's worth of users between cPanel boxes — SSH setup, Express Transfer, DNS cutover, and the failures you'll actually hit.
2026-05-16
6 min
Migrating from DirectAdmin to cPanel without an importer
cPanel has no official DirectAdmin importer. Here is a tested sequence using DA admin backups, rsync, and whmapi1 to move accounts, mail, and DNS cleanly.
2026-05-16
7 min
Migrate a cPanel server from CentOS 7 to AlmaLinux 8
CentOS 7 has been past EOL since June 2024. Two paths to move a running cPanel server to AlmaLinux — in-place ELevate or fresh-install plus WHM transfer — with the trade-offs and the gotchas.
2026-05-15
Comparisons
All comparisons →8 min
cPHulk vs CSF/LFD on cPanel — which to run and how they coexist
cPHulk and CSF/LFD overlap on brute-force protection but solve different problems. Here's what each catches, where they fight, and the config to run both cleanly.
2026-05-26
11 min
PHP handlers in cPanel: LSAPI vs PHP-FPM vs suPHP
Which PHP handler should you run on a cPanel server in 2026? A side-by-side look at LSAPI, PHP-FPM, suPHP, and FCGI — memory cost, throughput, and where each one breaks.
2026-05-16
10 min
ModSecurity rule sets on cPanel: OWASP CRS vs Comodo cWAF
A practical look at the four ModSecurity rule sets that ship with WHM — OWASP CRS, Comodo cWAF, Atomicorp Basic, and Imunify360 — and when each one is the right pick.
2026-05-16
Troubleshooting
All troubleshooting →5 min
Rspamd on cPanel: what's actually supported in 2026
cPanel & WHM has no native Rspamd integration — here's what the built-in stack actually is, why community Rspamd-on-Exim setups are risky, and when switching panels is the real answer.
2026-08-01
5 min
Clear a frozen or stuck Exim mail queue on cPanel
A decision tree for a cPanel Exim queue that won't drain — tell frozen from deferred, find the compromised account, and clear messages without nuking real mail.
2026-06-21
5 min
Fix WHM AutoSSL failures — a decision tree
AutoSSL fails in five distinct ways. Identify which one you're hitting from the WHM log line, then apply the fix — DNS, HTTP-01, CAA, rate-limit, or DCV redirect.
2026-05-15
5 min
How to fix cPanel license invalid and verification errors
A 5-minute decision tree for the "License invalid" banner in WHM — covers IP changes, blocked outbound 2089, time drift, and the cpkeyclt refresh that fixes most of them.
2026-05-15
1 min
WHM "Account creation failed: quota exceeded" — fix it
The three places this error actually comes from — the license, the disk, or the package. A 5-minute decision tree.
2026-04-04
Pricing & licensing
All pricing & licensing →7 min
Cracked cPanel licenses — why they're cheap and what they cost you
A frank look at the cracked-cPanel-license market — how the bypass works, why cPanel can't kill it, and the real operational and legal cost of running one in production.
2026-05-16
5 min
cPanel license tiers explained: Admin, Pro, Premier
We sell four cPanel license SKUs across three named tiers, each capped at a different account count. Here is what each one actually includes, plus a worked example for tier transitions.
2026-05-15
News & changelogs
All news & changelogs →7 min
CVE-2026-33278: the cpanel-unbound DNSSEC RCE, and how to check for it
A critical Unbound DNSSEC validator bug shipped as cpanel-unbound puts remote code execution one malicious signed zone away, no login required. Patched builds and how to check exposure.
2026-08-17
5 min
EasyApache 4 25.69: cPanel patches six Tomcat CVEs in ea-tomcat101
EasyApache 4 25.69 ships Apache Tomcat 10.1.56 in ea-tomcat101, closing six CVEs — an auth-bypass on default servlet constraints among them. Here's what's fixed and how to update.
2026-07-31
7 min
CVE-2026-41940: the cPanel & WHM auth bypass, and how to check for it
A CRLF injection in cpsrvd session handling let unauthenticated attackers write user=root into their own session file. Patched versions, IOCs, and how to check if you were hit.
2026-07-23
3 min
cPanel & WHM v136: unified SSL, log retention, removals
cPanel & WHM v136 hits the RELEASE tier — unified SSL/TLS, short-lived ACME certs, web log retention, mass PHP version changes, Dovecot 2.4, and a list of removals to audit first.
2026-05-31