# Managing account passwords in WHM

> Reset or change cPanel account passwords from WHM when a user is locked out or for security reasons.

Source: https://helpcenter.ruachost.com/vps/whm/managing-account-passwords-in-whm/

**WebHost Manager (WHM)** allows VPS and dedicated server administrators to manage cPanel account passwords. This is useful when customers forget their login credentials or when you need to reset access for security reasons.

## Why Manage Passwords in WHM?

- Reset forgotten cPanel account passwords.
- Enforce stronger security practices.
- Quickly restore access for customers.
- Maintain control over hosted accounts.

## Resetting a cPanel Account Password

### Method 1: Via *List Accounts*

1. **Log in to WHM.**
2. In the left sidebar, search for **List Accounts**.
3. Locate the account you want to update.
4. Click the **+** icon next to the domain name.
5. Under **Change Password**, enter a new password.
6. Click **Change**. The account owner can now log in with the new password.

### Method 2: Via *Password Modification*

1. In WHM, search for **Password Modification**.
2. Select the account by domain or username.
3. Enter a new password (or use the Password Generator).
4. Click **Change Password**. This resets the cPanel account password immediately.

## Best Practices for Password Management

- Use the **Password Generator** to create strong, random passwords.
- Share new passwords securely (never via plain email).
- Encourage customers to change their password after logging in.
- Regularly review accounts for weak or outdated passwords.

> **Note:**
- WHM administrators can reset passwords, but customers cannot recover them directly through WHM.
- Customers can reset their own passwords via the **cPanel login page** if email recovery is enabled.
- Always back up account data before making major changes.