📭

No results found

Try a different keyword.

01

Email Tools

Create accounts, route mail, and block spam.

📧

Email Accounts

Core

Create and manage email addresses for your domains, set passwords, and allocate storage quotas.

📌 Use Case: Creating hello@yourdomain.com for business inquiries.
1Log in to cPanel and click Email Accounts.
2Click the "Create" button.
3Select domain, enter username and a strong password.
4Set storage quota and click Create.
⚠️ Common Mistakes
  • Setting quota too low, causing bounced emails.
  • Using weak passwords prone to compromise.
⏩

Forwarders

Routing

Automatically forward incoming emails from one address to another destination.

📌 Use Case: Forwarding info@ to your personal Gmail account.
1Open Forwarders tool.
2Click Add Forwarder.
3Enter the address you want to forward.
4Enter destination email and click Add.
⚠️ Common Mistakes
  • Creating endless forwarding loops between addresses.
  • Forwarding massive spam to external providers causing blocks.
🔀

Email Routing

DNS

Configure how the server routes incoming mail for a domain — Local or Remote.

📌 Use Case: Pointing emails to Google Workspace or Office 365.
1Open Email Routing.
2Select your domain from the dropdown.
3Choose "Remote Mail Exchanger" for external hosts.
4Click Change to save.
⚠️ Common Mistakes
  • Leaving it on Local when using external MX records.
🤖

Autoresponders

Automation

Send automated pre-written replies to incoming emails immediately.

📌 Use Case: Out of office vacation messages for clients.
1Click Autoresponders.
2Click Add Autoresponder.
3Set interval (hours to wait between responses to same sender).
4Write subject/body and set start/stop time.
⚠️ Common Mistakes
  • Setting interval to 0 can cause infinite spam loops.
📊

Track Delivery

Diagnostic

Trace the delivery route of emails to diagnose sending or receiving issues.

📌 Use Case: Investigating why a client didn't receive your invoice.
1Open Track Delivery.
2Enter recipient email address.
3Click Run Report.
4Check the "Result" column for success or bounce errors.
⚠️ Common Mistakes
  • Ignoring SMTP error codes detailed in the logs.
🗑️

Default Address

Routing

Catch all unrouted emails sent to invalid addresses on your domain.

📌 Use Case: Catching typos like nfo@domain.com instead of info@.
1Open Default Address.
2Select domain.
3Choose "Forward to email address".
4Enter real address and save.
⚠️ Common Mistakes
  • Attracts massive dictionary-attack spam to catch-all address.
📜

Mailing Lists

Bulk

Send emails to a large group of subscribed people via a single address.

📌 Use Case: Managing an internal company newsletter.
1Click Mailing Lists.
2Enter list name and set a password.
3Select domain and click Add.
4Use the "Manage" link to add members.
⚠️ Common Mistakes
  • Using it for cold spam marketing — violates CAN-SPAM law.
🌍

Global Email Filters

Security

Filter emails based on specific criteria for ALL accounts on your cPanel.

📌 Use Case: Blocking a specific spam domain from emailing anyone at your company.
1Open Global Email Filters.
2Click Create a New Filter.
3Set rule: "From" "contains" "badspammer.com".
4Set action to "Discard Message" and Create.
⚠️ Common Mistakes
  • Creating overly broad rules that delete legitimate mail.
🎯

Email Filters

Organization

Filter emails for a single, specific individual email account.

📌 Use Case: Moving messages containing "Invoice" to a specific folder automatically.
1Click Email Filters.
2Select specific account and click Manage Filters.
3Create New Filter rule.
4Select action "Deliver to folder" and choose folder.
⚠️ Common Mistakes
  • Conflicting cPanel rules with local Outlook/Apple Mail rules.
🛡️

Spam Filters

Security

Configure Apache SpamAssassin to identify and block incoming spam automatically.

📌 Use Case: Automatically deleting emails that score high on spam detection.
1Open Spam Filters.
2Enable "Process New Emails and Mark them as Spam".
3Adjust Spam Threshold Score (5 is default, lower is stricter).
4Enable Auto-Delete if desired.
⚠️ Common Mistakes
  • Setting threshold too low (e.g., 2) deletes real client emails.
🔐

Encryption

Privacy

Manage GnuPG keys to encrypt outgoing messages for extreme privacy.

📌 Use Case: Sending highly confidential financial documents securely.
1Open Encryption.
2Generate a New Key pair.
3Enter details, strong passphrase, and expiration date.
4Share public key with recipients so they can decrypt messages.
⚠️ Common Mistakes
  • Losing the private key passphrase makes data unrecoverable.
🪤

BoxTrapper

Security

Forces unauthorized senders to reply to a verification email before delivery is allowed.

📌 Use Case: Extreme spam prevention when standard filters fail.
1Open BoxTrapper.
2Click Manage next to an email account.
3Click Enable.
4Configure whitelist/blacklist to skip verification for known contacts.
⚠️ Common Mistakes
  • Annoying legitimate prospective clients who won't bother verifying.
📅

Calendars & Contacts

Sync

Access CalDAV and CardDAV settings for syncing cPanel data to devices.

📌 Use Case: Syncing your cPanel calendar directly to your iPhone.
1Open Calendars & Contacts.
2Note the server URL, username, and port details.
3Open phone Settings → Accounts → Add Account.
4Add CalDAV/CardDAV account using the provided details.
⚠️ Common Mistakes
  • Using non-SSL ports on public Wi-Fi networks.
💾

Email Disk Usage

Storage

View and safely reclaim server storage space used by oversized mailboxes.

📌 Use Case: Mailbox is full — need to bulk-delete old trash and spam folders.
1Open Email Disk Usage.
2Select specific Account from dropdown.
3Find Trash or Spam folder in the list.
4Click Manage → "Delete messages older than 1 year" → Delete.
⚠️ Common Mistakes
  • Accidentally wiping the primary Inbox without reading the confirmation prompt.
02

Files

Manage website files, backups, and FTP access.

📁

File Manager

Core

Web-based interface to manage, edit, and upload website files without needing FTP software.

📌 Use Case: Uploading a website backup zip and extracting it in public_html.
1Open File Manager.
2Navigate to the public_html folder.
3Click Upload at the top and select your ZIP file.
4Right-click the uploaded ZIP and select Extract.
⚠️ Common Mistakes
  • Extracting files outside of public_html where web visitors can't see them.
🖼️

Images

Media

Batch resize, convert file types, or view images stored directly on your server.

📌 Use Case: Converting heavy PNG folders to compressed JPGs to save space.
1Open Images tool.
2Select Converter option.
3Select the target image folder.
4Choose JPG format and click Convert.
⚠️ Common Mistakes
  • Overwriting originals without taking a backup first.
🔒

Directory Privacy

Security

Set up basic HTTP authentication to password-protect specific website folders.

📌 Use Case: Securing a /staging/ folder from public access.
1Open Directory Privacy.
2Click on the folder you want to protect.
3Check "Password protect this directory" and Save.
4Scroll down to Create User, set username/password, and Save.
⚠️ Common Mistakes
  • Forgetting credentials requires recreating the user to regain access.
💽

Disk Usage

Storage

Visual representation of where your hosting storage is being consumed across folders.

📌 Use Case: Finding large hidden error_log files that are filling the server.
1Open Disk Usage.
2Scroll to the expandable tree view at the bottom.
3Sort by size and expand folders to find the largest items.
4Click a folder name to jump directly to it in File Manager.
⚠️ Common Mistakes
  • Deleting core system folders blindly just because they appear large.
📡

FTP Accounts

Access

Create FTP users to upload files via software like FileZilla or Cyberduck.

📌 Use Case: Giving a freelancer access to only one specific folder.
1Open FTP Accounts.
2Enter login name and a strong password.
3Carefully set the Directory path (e.g., public_html/dev-site).
4Click Create FTP Account.
⚠️ Common Mistakes
  • Leaving path blank gives full root server access unintentionally.
📦

Backup

Safety

Download a full or partial backup of your website files and databases at any time.

📌 Use Case: Saving a local copy before running a major WordPress update.
1Open Backup tool.
2Under Partial Backups, click Home Directory to download files.
3Click your database name under MySQL Databases to download .sql.
4Store both files securely on your local PC.
⚠️ Common Mistakes
  • Leaving the backup ZIP on the server uses double storage space.
🧙

Backup Wizard

Safety

Step-by-step assistant for creating full account backups and guided restorations.

📌 Use Case: Migrating your entire cPanel account to a new web host.
1Open Backup Wizard.
2Select Back Up → Full Backup.
3Choose destination (Home Directory or Remote FTP).
4Enter notification email and click Generate Backup.
⚠️ Common Mistakes
  • Trying to restore a Full Backup as standard user — requires Root/host access.
🐙

Git Version Control

Dev

Host and manage Git repositories directly from the cPanel interface for code deployment.

📌 Use Case: Deploying custom application code via standard Git push commands.
1Open Git Version Control.
2Click Create.
3Toggle "Clone a Repository" or set a local path for a new repo.
4Fill details and Create. Use provided clone URL in terminal.
⚠️ Common Mistakes
  • Incorrect repository file paths causing silent deployment failures.
⚙️

.htaccess Configuration

Advanced

Hidden Apache configuration file used for redirects, security rules, and WordPress permalinks.

📌 Use Case: Fixing broken WordPress links, forcing HTTPS, and adding browser caching.
1. Default WordPress .htaccess
# BEGIN WordPress
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
# END WordPress
2. Force HTTPS Redirect
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
3. Deny Access to Sensitive Files
<FilesMatch "^.*(wp-config\.php|\.env|error_log).*$">
  Require all denied
</FilesMatch>
4. Browser Caching + GZIP Compression
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/css text/javascript application/javascript
</IfModule>
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType image/jpg "access plus 1 year"
  ExpiresByType image/png "access plus 1 year"
  ExpiresByType text/css "access plus 1 month"
  ExpiresByType application/javascript "access plus 1 month"
</IfModule>
⚠️ Common Mistakes
  • Syntax errors cause instant 500 Internal Server Error.
  • Forgetting to enable "Show Hidden Files" in File Manager to see the file.
03

Domains

Addons, subdomains, and DNS zone management.

🌐

Domains

Core

Manage addon domains to host completely separate websites on one cPanel account.

📌 Use Case: Hosting client-site.com alongside your-agency.com on one account.
1Open Domains.
2Click "Create A New Domain".
3Enter domain name.
4UNCHECK "Share document root" to keep sites separate, then Submit.
⚠️ Common Mistakes
  • Forgetting to update nameservers at the domain registrar first.
📂

Subdomains

Structure

Create URL prefixes that are attached to your main domain for separate sections.

📌 Use Case: Creating blog.domain.com or staging.domain.com.
1Open Subdomains (or Domains in newer cPanel themes).
2Enter the subdomain prefix.
3Select parent domain.
4Click Create.
⚠️ Common Mistakes
  • Using subdirectories instead of subdomains for proper app isolation.
🎭

Aliases

Routing

Make secondary domains point exactly to your main site's content and files.

📌 Use Case: Pointing yourdomain.net to show the same site as yourdomain.com.
1Open Aliases.
2Enter the secondary domain.
3Click Add Domain.
⚠️ Common Mistakes
  • SEO penalty for duplicate content if not paired with a 301 redirect.
➡️

Redirects

SEO

Forward incoming traffic from one specific URL to another destination URL.

📌 Use Case: Redirecting an old /about-us page to the new /team page.
1Open Redirects.
2Select Type (301 Permanent for SEO benefit).
3Choose domain and enter old path.
4Enter destination URL and click Add.
⚠️ Common Mistakes
  • Creating infinite redirect loops between two pages.
🗺️

Zone Editor

DNS

Manage core DNS records including A, CNAME, TXT, and MX records for your domains.

📌 Use Case: Adding a Google Search Console verification TXT record.
1Open Zone Editor.
2Click Manage next to your domain.
3Click Add Record.
4Select Type, enter Name, Value, and Save Record.
⚠️ Common Mistakes
  • Deleting default A records causes website to go offline instantly.
04

Databases

MySQL, phpMyAdmin, and user management.

🗄️

MySQL Databases

Core

Manually create databases, create users, and map user privileges for your apps.

📌 Use Case: Creating a raw database for a custom PHP/Laravel application.
1Open MySQL Databases.
2Enter a name in Create New Database.
3Scroll down to Create New User with a strong password.
4Under "Add User To Database", select both, click Add → Grant All Privileges.
⚠️ Common Mistakes
  • Creating a DB and User but forgetting to link them together.
🐘

phpMyAdmin

Admin

Web interface to interact directly with database tables and run SQL queries.

📌 Use Case: Exporting a full database .sql file or manually changing a WP password.
1Open phpMyAdmin.
2Select your database on the left sidebar.
3To import: Click Import tab, choose .sql file, click Go.
4To edit: Browse a table (e.g., wp_users), double-click a field to edit inline.
⚠️ Common Mistakes
  • Dropping tables accidentally with no backups available.
🌍

Remote DB Access

Network

Allow external IP addresses to connect directly to your MySQL server remotely.

📌 Use Case: Connecting a local GUI tool like MySQL Workbench to the live server.
1Open Remote MySQL.
2Find your current local IP (Google "what is my IP").
3Add IP to the Access Host field and click Add.
4Use port 3306 in your local software configuration.
⚠️ Common Mistakes
  • Using % wildcard to allow all IPs — massive security risk.
✨

Database Wizard

Setup

Guided 3-step assistant to create a DB, User, and link them properly every time.

📌 Use Case: Fastest, error-free way to set up database info for a WordPress install.
1Open MySQL Database Wizard.
2Step 1: Name the database → Next.
3Step 2: Create user and generate password → Next.
4Step 3: Select "All Privileges" → Make Changes.
⚠️ Common Mistakes
  • Not saving the generated password before clicking Next.
05

Software

Auto-installers, PHP versions, and Node/Python apps.

🚀

Softaculous

Installer

1-click auto-installer for 400+ scripts including WordPress, Joomla, and Magento.

📌 Use Case: Installing WordPress in seconds without touching zip files or databases.
1Open Softaculous Apps Installer.
2Hover WordPress and click Install.
3Choose domain and protocol (https). Delete "wp" from the In Directory field.
4Set Admin Username/Password and click Install.
⚠️ Common Mistakes
  • Leaving directory field as "wp" causes site to load at domain.com/wp.
⚙️

WordPress Manager

WP Admin

Manage all WP installations, clone sites, and configure auto-updates centrally.

📌 Use Case: Cloning a live site to a staging subdomain for safe development testing.
1Open WP Manager by Softaculous.
2Find your target site in the list.
3Click "Staging" or "Clone" icon.
4Select destination subdomain and click process.
⚠️ Common Mistakes
  • Forgetting to push staging changes back to the live site after testing.
🐘

MultiPHP Manager

Config

Change the active PHP version on a per-domain basis without affecting other sites.

📌 Use Case: Upgrading a domain from deprecated PHP 7.4 to secure PHP 8.2.
1Open MultiPHP Manager.
2Check the box next to your target domain.
3Select desired PHP Version from the right dropdown.
4Click Apply.
⚠️ Common Mistakes
  • Upgrading too fast and breaking legacy theme/plugin code with Fatal Errors.
📝

MultiPHP INI Editor

Config

Edit core PHP configuration limits including memory, execution time, and upload sizes.

📌 Use Case: Increasing max upload size to allow a 50MB premium theme upload.
1Open MultiPHP INI Editor → Basic Mode.
2Select domain from dropdown.
3Change upload_max_filesize to 128M.
4Change memory_limit to 512M and click Apply.
⚠️ Common Mistakes
  • Increasing upload limit but forgetting post_max_size must also be equal or larger.
🧩

Select PHP Version

Modules

CloudLinux utility to enable or disable specific PHP extensions like zip, gd, or imagick.

📌 Use Case: Fixing WordPress Site Health warning saying "missing optional zip module".
1Open Select PHP Version.
2Go to the Extensions tab.
3Check the box for 'zip' or 'imagick'.
4Changes save automatically upon checking the boxes.
⚠️ Common Mistakes
  • Enabling every single module causes high server memory usage.
🐍

Setup Node.js App

Modern

Setup persistent environments and reverse proxies for Node or Python applications.

📌 Use Case: Hosting a custom Express.js backend API on your shared host.
1Open Setup Node.js App.
2Click Create Application.
3Select Node version, app root path, and domain URL.
4Enter startup file (e.g., app.js) → Create and Start.
⚠️ Common Mistakes
  • Wrong startup filename causing 503 Gateway errors on launch.
06

Security

SSL certificates, firewalls, and access control.

🔐

SSL/TLS

Certificates

Manually manage Private Keys, CSRs, and custom SSL certificates for your domains.

📌 Use Case: Installing a purchased Wildcard EV SSL from Comodo or DigiCert.
1Open SSL/TLS → "Install and Manage SSL for your site".
2Select Domain from dropdown.
3Paste CRT, Private Key, and CABUNDLE text blocks.
4Click Install Certificate.
⚠️ Common Mistakes
  • Missing the CA Bundle causes browser "Insecure connection" warnings.
✅

SSL/TLS Status

AutoSSL

AutoSSL interface to issue free Let's Encrypt certificates automatically for your domains.

📌 Use Case: Securing a newly added addon domain with a free padlock certificate.
1Open SSL/TLS Status.
2Select checkboxes next to unsecured domains.
3Click "Run AutoSSL" at the top.
4Wait 5–10 minutes, refresh page to verify green padlock icon.
⚠️ Common Mistakes
  • Running it before Domain DNS has propagated to the server — it will fail.
🛑

IP Blocker

Firewall

Deny website access from specific IP addresses, domain names, or entire subnets.

📌 Use Case: Blocking a specific IP that is spamming your contact form.
1Open IP Blocker.
2Enter IP address, domain, or range in the field.
3Click Add.
⚠️ Common Mistakes
  • Accidentally blocking your own dynamic home IP address.
🔗

Hotlink Protection

Bandwidth

Prevent other websites from directly linking to your images, thereby stealing your bandwidth.

📌 Use Case: Stopping forums from hotlinking your heavy images or GIFs.
1Open Hotlink Protection.
2Click Enable.
3Ensure your own domains are in "URLs to allow access".
4Add file extensions to block: jpg, png, gif, webp.
⚠️ Common Mistakes
  • Accidentally blocking Google Images from crawling and indexing your content.
🧛

Leech Protection

Access

Prevent users from publicly sharing passwords to restricted directories online.

📌 Use Case: Protecting a paid members-only download area from credential sharing.
1Open Leech Protection.
2Select the protected directory.
3Set allowed logins per 2-hour timeframe (e.g., 4).
4Set redirect URL for offenders and click Enable.
⚠️ Common Mistakes
  • Setting limits too strict for users on dynamic mobile IP addresses.
🛡️

ModSecurity

WAF

Web Application Firewall to block known exploits, SQL injection, and brute-force attacks.

📌 Use Case: Protecting a vulnerable WordPress plugin until a security patch is released.
1Open ModSecurity.
2Verify Status is set to ON for all domains.
3If a false-positive 403 error occurs, temporarily disable for that domain.
⚠️ Common Mistakes
  • Leaving ModSecurity permanently OFF after troubleshooting, leaving site exposed.
📱

Two-Factor Authentication

Login

Add a second layer of security (TOTP) to your primary cPanel login screen.

📌 Use Case: Securing server access in case your main password leaks in a breach.
1Open Two-Factor Authentication.
2Scan QR code with Google Authenticator or Authy app.
3Enter the live 6-digit code to verify setup.
4Store backup recovery codes securely offline.
⚠️ Common Mistakes
  • Losing phone and failing to save backup codes requires host intervention to unlock.
07

Metrics

Traffic logs, error reports, and resource monitoring.

👥

Visitors

Logs

View the last 1,000 visitor entries recorded in Apache access logs in real time.

📌 Use Case: Checking current live traffic IPs during a suspicious spike or attack.
1Open Visitors tool.
2Click magnifying glass next to target domain.
3Review IPs, URLs accessed, and User Agents in the log.
⚠️ Common Mistakes
  • Confusing automated web scrapers/bots with real human traffic numbers.
⚠️

Errors

Logs

Displays the last 300 errors generated by your website's server-side activity.

📌 Use Case: Finding the exact PHP syntax error causing a 500 Internal Server Error.
1Open Errors tool.
2Look at timestamps for the most recent events.
3Identify missing files, plugin crashes, or permission denied entries.
⚠️ Common Mistakes
  • Ignoring minor PHP warnings which bloat error_log files over time.
📈

Bandwidth

Usage

Monitor monthly data transfer usage across HTTP, FTP, and Mail protocols.

📌 Use Case: Checking if a sudden traffic spike is nearing your hosting data limits.
1Open Bandwidth.
2Check pie charts for breakdown by protocol type.
3Review total monthly usage on the line graphs.
⚠️ Common Mistakes
  • Not optimizing images, causing bandwidth limits to trigger site suspension.
📄

Raw Access

Logs

Download unparsed, raw server text logs for external analysis or auditing.

📌 Use Case: Exporting logs to Splunk or external log analyzer tools.
1Open Raw Access.
2Click domain name to download the .gz log file.
3Extract archive and open in VS Code or Notepad++ for analysis.
⚠️ Common Mistakes
  • Configuring logs to archive indefinitely, filling up disk quota silently.
📊

Awstats

Stats

Visual statistics showing visitors, operating systems, referrers, and geographic data.

📌 Use Case: Checking monthly traffic volume when Google Analytics isn't installed.
1Open Awstats.
2Click View next to target domain.
3Analyze tables, search keywords, and bot traffic percentages.
⚠️ Common Mistakes
  • Trusting numbers 100% — they include heavy bot traffic unlike JS-based analytics.
💻

Resource Usage

Limits

Monitor CPU, Physical RAM, and Entry Processes hitting CloudLinux resource limits.

📌 Use Case: Diagnosing "503 Service Unavailable" or "Resource Limit Reached" errors.
1Open Resource Usage.
2Click Details to view historical resource charts.
3Look for red spikes indicating 100% cap on CPU or RAM.
⚠️ Common Mistakes
  • Upgrading hosting plans immediately before attempting script optimization.
08

Advanced

Cron jobs, Apache handlers, and DNS tracking.

⏱️

Cron Jobs

Automation

Schedule scripts or commands to run automatically at specific time intervals.

📌 Use Case: Triggering a database cleanup PHP script every night at midnight.
1Open Cron Jobs.
2Set notification email for script output and errors.
3Select frequency preset (e.g., Once a day).
4Enter absolute command path (e.g., php /home/user/script.php) and Add.
⚠️ Common Mistakes
  • Running heavy processing scripts every minute, causing server crash.
🚫

Error Pages

Config

Customize default Apache error pages for 404, 403, 500 and other HTTP errors.

📌 Use Case: Adding brand colors and a "Return Home" button to 404 error pages.
1Open Error Pages.
2Select domain and click 404.
3Insert custom HTML/CSS code.
4Click Save.
⚠️ Common Mistakes
  • Using heavy external assets in error pages causes slow failure page loading.
⚙️

Apache Handlers

Server

Control how the Apache web server processes and handles certain file extensions.

📌 Use Case: Forcing the server to execute PHP code written inside an .html file.
1Open Apache Handlers.
2Enter handler: application/x-httpd-ea-php82 (adjust version).
3Enter extension: .html
4Click Add.
⚠️ Common Mistakes
  • Mishandling core extensions causes browsers to download files instead of executing.
🗂️

MIME Types

Media

Tell browsers how to handle and process specific custom file extensions for your site.

📌 Use Case: Allowing browsers to properly stream embedded .webp or .mp4 files.
1Open MIME Types.
2Enter MIME type: video/mp4
3Enter extension: mp4
4Click Add.
⚠️ Common Mistakes
  • Creating conflicting MIME types that break standard browser rendering.
🔍

Track DNS

Network

Look up network routes and DNS record resolution from the server's own perspective.

📌 Use Case: Verifying if your domain has successfully propagated to the server IP.
1Open Track DNS.
2Enter your Domain in the Domain Lookup field.
3Click Look Up.
4Check Zone Info text box to verify IP match.
⚠️ Common Mistakes
  • Confusing local PC DNS cache with actual server-side resolution results.
09

Preferences

Passwords, contact alerts, and user management.

🔑

Password & Security

Account

Change your main cPanel account root password securely at any time.

📌 Use Case: Routine security update or handoff to a new administrator.
1Open Password & Security.
2Enter your Old Password.
3Use the Password Generator for a secure New Password.
4Save changes and re-login with new credentials.
⚠️ Common Mistakes
  • Changing main password breaks linked standalone FTP scripts using the old password.
🌐

Change Language

UI

Switch the entire cPanel dashboard interface to a different language.

📌 Use Case: Switching the dashboard interface entirely to Spanish or French.
1Open Change Language.
2Select desired language from the dropdown.
3Click Change to apply immediately.
⚠️ Common Mistakes
  • Selecting an unknown language accidentally makes navigation very difficult to reverse.
📬

Contact Info

Alerts

Set your email for critical server notifications including quota limits and SSL expirations.

📌 Use Case: Getting alerted immediately when disk usage hits 90% capacity.
1Open Contact Info.
2Enter primary contact email address.
3Check all desired alert notification boxes (Disk, Bandwidth).
4Click Save to apply.
⚠️ Common Mistakes
  • Leaving this blank means missing critical suspension warning emails.
👤

User Manager

Admin

Manage sub-accounts for Email, FTP, and Web Disk from one unified control screen.

📌 Use Case: Quickly revoking an ex-employee's combined Email and FTP access.
1Open User Manager.
2Find User in the list.
3Click Edit or Delete.
4Toggle service sliders to modify specific access (Mail/FTP).
⚠️ Common Mistakes
  • Giving full system paths via Subaccount FTP instead of isolating specific folders.
10

Problems & Fixes

Real server errors with step-by-step solutions.

🔴 PROBLEM

.htaccess File Not Found

Root Cause: File Manager hides dot-files by default — you need to enable hidden file visibility.
1File Manager → Settings (top right gear) → Check "Show Hidden Files" → Save.
2Look for .htaccess in public_html folder.
3If missing: Click "+ File", name it .htaccess (include the dot).
4Paste this default WordPress code and save:
# BEGIN WordPress
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
# END WordPress
✅ Verify Fix: Refresh site and check if sub-pages and permalinks redirect properly.
🔴 PROBLEM

Website Not Loading (502 / 504 Gateway Error)

Root Cause: DNS propagation incomplete or PHP-FPM/Apache process crashed on the server.
1Check DNS propagation via whatsmydns.net to see if IP matches.
2Flush local DNS cache (Windows: ipconfig /flushdns in CMD).
3Check cPanel "Errors" logs for recent PHP execution timeout entries.
4Restart PHP-FPM by toggling version in MultiPHP Manager, or contact host support.
✅ Verify Fix: Use an online ping tool to confirm server responds with 200 OK.
🔴 PROBLEM

500 Internal Server Error

Root Cause: Corrupted .htaccess syntax or incorrect file permissions on the server.
1File Manager → Rename .htaccess to .htaccess_bak. Reload your site.
2If fixed: Regenerate .htaccess in WordPress → Settings → Permalinks → Save.
3If not fixed: Check file permissions. Folders must be 755, files must be 644.
4Fix via SSH (if available):
# Fix folder permissions to 755 and file permissions to 644
find public_html -type d -exec chmod 755 {} \;
find public_html -type f -exec chmod 644 {} \;
✅ Verify Fix: Error log shows no new fatal errors and site renders correctly.
🔴 PROBLEM

404 Not Found Error

Root Cause: WordPress permalink mismatch or the file physically does not exist.
1Verify the file actually exists in public_html via File Manager.
2For WordPress: Go to Admin → Settings → Permalinks.
3Click "Save Changes" (this flushes rewrite rules automatically).
4If still broken, manually add WP rewrite block to .htaccess:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
✅ Verify Fix: All sub-pages load correctly without the 404 error screen.
🔴 PROBLEM

SSL Certificate Not Working

Root Cause: SSL not installed, expired, or HTTP assets causing mixed content warnings.
1cPanel → SSL/TLS Status → Select unsecured domain → Run AutoSSL.
2Force HTTPS via Domains tool toggle OR add rules to .htaccess.
3Fix mixed content issues (HTTP images) using a WP plugin like Really Simple SSL.
4Add HTTPS force redirect to .htaccess:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
✅ Verify Fix: Browser shows green padlock, zero "Not Secure" warnings.
🔴 PROBLEM

Email Not Sending / Receiving

Root Cause: Wrong MX records, IP blacklist, or incorrect email routing configuration.
1cPanel → Email Accounts → Verify the account exists and quota is not full.
2Zone Editor → Check MX record points to correct mail server IP.
3Email Routing → Set to "Local Mail Exchanger" if hosting emails here.
4Use "Track Delivery" tool to send a test and see the exact bounce reason.
✅ Verify Fix: Send a test email to Gmail and check it arrives within minutes.
🔴 PROBLEM

Database Connection Error

Root Cause: Wrong DB credentials in wp-config.php or database user lacks privileges.
1cPanel → MySQL Databases → Confirm both DB and User exist in the lists.
2Confirm User is assigned to DB with ALL PRIVILEGES granted.
3Open wp-config.php in File Manager → Verify credentials match exactly.
4Example correct wp-config.php section:
define( 'DB_NAME',     'cpanel_database1' );
define( 'DB_USER',     'cpanel_dbuser'    );
define( 'DB_PASSWORD', 'SecurePass123!'   );
define( 'DB_HOST',     'localhost'        );
✅ Verify Fix: WordPress dashboard loads without any error message.
🔴 PROBLEM

403 Forbidden / Permission Denied

Root Cause: Files have overly restrictive Unix permissions or deny rules in .htaccess.
1File Manager → Navigate to public_html folder.
2Select all → Change Permission → Set folders to 755, files to 644.
3Check .htaccess for any "deny from all" or "Require all denied" rules.
4Remove any incorrect deny rules:
# Remove these lines from .htaccess if found incorrectly:
# deny from all
# deny from 192.168.1.1
# Require all denied
✅ Verify Fix: Files are accessible in browser — no more 403 screen shown.
🔴 PROBLEM

Slow Website / High Load Time

Root Cause: No caching, unoptimized images, or running an outdated PHP version.
1MultiPHP Manager → Upgrade domain to PHP 8.2 or higher.
2Compress and resize images using cPanel Images tool or WP plugin.
3Enable PHP OPcache in MultiPHP INI Editor → opcache.enable = 1.
4Add GZIP compression to .htaccess:
<IfModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/plain
  AddOutputFilterByType DEFLATE text/html
  AddOutputFilterByType DEFLATE text/xml
  AddOutputFilterByType DEFLATE text/css
  AddOutputFilterByType DEFLATE text/javascript
  AddOutputFilterByType DEFLATE application/javascript
  AddOutputFilterByType DEFLATE application/xhtml+xml
</IfModule>
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType image/jpg "access plus 1 year"
  ExpiresByType image/png "access plus 1 year"
  ExpiresByType text/css "access plus 1 month"
</IfModule>
✅ Verify Fix: Test with Google PageSpeed Insights before/after to confirm improvement.
🔴 PROBLEM

File Upload Size Exceeded (413 Error)

Root Cause: PHP upload_max_filesize config is too low (default is only 2MB).
1cPanel → MultiPHP INI Editor → Basic Mode.
2Set upload_max_filesize = 128M.
3Set post_max_size = 128M (must be equal to or greater than upload limit).
4Alternative: Add to .htaccess if server allows php_value:
php_value upload_max_filesize 128M
php_value post_max_size 128M
php_value memory_limit 256M
php_value max_execution_time 300
✅ Verify Fix: Try uploading a large theme ZIP file in WordPress Media or WP Admin.
11

Beginner Roadmap

From zero to a live, secured WordPress website.

1

Login to cPanel

Navigate to yourdomain.com/cpanel. Enter credentials provided by your web host. Bookmark this URL. Explore the main sections: Email, Files, Domains, and Databases. Tip: Enable 2FA immediately after first login.

2

Upload Your Website Files

Open File Manager → Navigate to public_html. Click Upload, select your ZIP file, right-click it and select Extract. Delete the ZIP after extracting to save space. Tip: Never put website files outside of public_html.

3

Connect Your Domain

Go to Zone Editor → Verify the A Record points to your server IP address. DNS propagation takes up to 48 hours globally. Check status using whatsmydns.net. Tip: Nameserver propagation is separate from A record changes.

4

Install Free SSL Certificate

Go to SSL/TLS Status → Select your domain → Click Run AutoSSL. Wait 5–10 minutes for the padlock to appear. Force HTTPS by adding the redirect rule to .htaccess. Tip: Let's Encrypt SSL renews automatically every 90 days.

5

Install WordPress

Open Softaculous → Click WordPress → Install Now. Fill in domain, admin username, strong password, and email. Clear the "In Directory" field (leave it blank for root install). Click Install and visit domain.com/wp-admin.

12

Tips & Best Practices

Professional advice for a healthy, fast, and secure server.

🔒

SECURITY

  • ✦ Enable 2FA on cPanel login immediately after setup.
  • ✦ Block suspicious IPs scanning your site via IP Blocker tool.
  • ✦ Set strict file permissions: folders 755, files 644 always.
  • ✦ Enable ModSecurity WAF — protects against SQL injections and XSS.
  • ✦ Never use "admin" as a WordPress username — change it on install.
⚡

PERFORMANCE

  • ✦ Use PHP 8.2+ — significantly faster than PHP 7.4 legacy versions.
  • ✦ Enable GZIP via .htaccess — saves approximately 70% bandwidth.
  • ✦ Set browser caching headers for static CSS and JS assets.
  • ✦ Resize and compress images before uploading — use WebP format.
  • ✦ Enable PHP OPcache in MultiPHP INI Editor for faster execution.
💾

BACKUP STRATEGY

  • ✦ Use Backup Wizard every week — download to your local PC.
  • ✦ Store off-server copies: Google Drive, Dropbox, or AWS S3.
  • ✦ Test the restore process at least once per quarter.
  • ✦ Enable JetBackup automatic snapshots if your host offers it.
  • ✦ Keep 3 backup copies: daily, weekly, and monthly rotations.