You can force cPanel users to change their passwords by using the Force Password Change feature in WHM. When enabled, users must update their passwords before they can access their cPanel interface, ensuring better account security across your server.
What is Force Password Change?
Force Password Change is a WHM security feature that requires cPanel users to create new passwords at their next login. After you enable this setting for specific accounts, those users cannot access the full cPanel interface until they complete the password update. This feature helps maintain security standards when you suspect compromised credentials or need to enforce regular password rotation policies.
How to Force Users to Change Their Passwords
Follow these steps to require password changes for cPanel accounts:
- Log in to your WHM (Web Host Manager) account
- Navigate to the Force Password Change interface
- Select the checkboxes next to the usernames you want to force password changes for
- Click the Submit button to apply your changes
You can select as many cPanel users as needed. Use the buttons at the top of the interface to quickly select or deselect all users at once.
What Happens After You Enable This Feature
When a user with forced password change enabled attempts to log in to cPanel, they see a password change prompt immediately. The system blocks access to all cPanel features until they create a new password that meets your server's password strength requirements. After successfully updating their password, users gain full access to their cPanel account.
When to Use Force Password Change
This security feature proves useful in several situations:
- Security breaches: When you suspect unauthorized access to user accounts
- Policy enforcement: To implement regular password rotation schedules
- New account setup: Requiring users to change default or temporary passwords
- Compliance requirements: Meeting security standards that mandate periodic password updates
Frequently Asked Questions
Can users still receive emails if forced to change their password?
Yes, email delivery continues normally even when password change is forced. The restriction only applies to cPanel interface access, not to email services or website functionality.
How do I remove the forced password change requirement?
Return to the Force Password Change interface in WHM and deselect the checkboxes for any users. However, if users already changed their passwords, they will not be forced to change them again unless you enable the feature once more.
Will forcing a password change affect website uptime?
No, forcing a password change does not affect your websites, databases, or email services. Only cPanel control panel access is restricted until the user updates their password.
What password requirements must users meet when changing passwords?
Users must create passwords that meet your server's configured password strength requirements. These typically include minimum length, complexity rules, and restrictions on common or previously used passwords.
Our support team is available 24/7 to help with password management and security features. Visit our contact page or email support@obhost.org for assistance.
