Changing your root password in cPanel or WHM is a simple security measure that helps protect your server. You can update your root password anytime without needing to enter the old password first. This guide walks you through the process step by step and explains how to create a strong, secure password.
Why You Should Use a Strong Root Password
Your root password is the master key to your entire server. A weak password can leave your hosting account vulnerable to unauthorized access, data breaches, and security attacks. We strongly recommend using a password that is not a dictionary word and includes the following elements:
- Uppercase and lowercase letters
- Numbers
- Special symbols (such as !, @, #, $, %)
A strong password significantly reduces the risk of someone guessing or cracking your credentials.
How to Change Your Root Password
To change your root user password in cPanel or WHM, follow these simple steps:
- Log into your WHM control panel and navigate to the Password & Security section
- Enter a new password in the New root Password text box. You can also click Generate to create a strong password automatically
- Enter the same password in the Confirm Password text box to verify it
- Click Change Password to save your new password
Your password will be updated immediately. Make sure to store your new password in a secure location, such as a password manager.
Understanding Password Strength
When you enter a new password, you'll see a password Strength meter that indicates how secure your password is. The meter uses a scale from 0 to 100:
- 0 indicates a very weak password that can be easily compromised
- 100 indicates a very secure password that is extremely difficult to crack
The meter will turn green when your password meets the minimum requirements. If you're a server administrator, you can set the minimum required password strength for the root user through WHM's Password Strength Configuration interface under Security Center.
Best Practices for Root Password Security
Beyond choosing a strong password, follow these security best practices:
- Change your root password regularly (every 60-90 days is recommended)
- Never share your root password with anyone
- Use a unique password that you don't use for any other accounts
- Enable two-factor authentication if available for additional security
- Keep a secure backup of your password in an encrypted password manager
Frequently Asked Questions
Do I need my old password to change the root password?
No, you do not need to enter your old password to change the root password in WHM. This is a security feature that allows you to reset the password even if you've forgotten the old one, as long as you have access to your WHM control panel.
What happens if I forget my root password?
If you forget your root password and cannot access WHM, you'll need to reset it through your server's console or contact your hosting provider for assistance. At OBHost, our support team can help you regain access to your account securely.
How long should my root password be?
We recommend using a password that is at least 12-16 characters long. Longer passwords with a mix of uppercase letters, lowercase letters, numbers, and symbols provide better security. The password generator tool can create strong passwords that meet all security requirements automatically.
Will changing my root password affect my websites or email accounts?
No, changing your root password only affects access to your WHM and root-level server functions. Your individual cPanel accounts, websites, databases, and email accounts will continue to work normally with their existing passwords.
If you need assistance changing your root password or have questions about server security, our support team at OBHost is available 24/7 to help. Visit https://www.obhost.net/contact or email support@obhost.org for expert assistance.
