How to Allow cPanel users to reset cPanel account password via WHM?

In cPanel and WHM, users can change their own account password through the cPanel interface. If this ability has been restricted on your server, you can re-enable it so that users can manage their own passwords without contacting your support team. This reduces support overhead and improves the user experience.

Step 1: Log in to WHM

Open your browser and navigate to https://your-server-ip:2087. Log in with your root or reseller credentials.

Step 2: Open Tweak Settings

Navigate to Home » Server Configuration » Tweak Settings in the left-hand sidebar.

Step 3: Locate the Password Reset Setting

Use the search box at the top and type reset password to locate the setting. The option is typically found under the Domains tab and may be labeled Allow cPanel users to reset their password via email or Reset Password for cPanel accounts, depending on your WHM version.

Step 4: Enable the Option

Toggle the setting to On. This allows cPanel users to initiate a password reset from the cPanel login screen using their email address on file.

Step 5: Verify Package Features

In addition to the Tweak Settings option, ensure that the password feature is enabled in the cPanel package assigned to the user:

1. Navigate to Home » Packages » Edit a Package.
2. Select the package assigned to the user's account.
3. Ensure that Password Modification (or similar) is enabled in the feature list.
4. Click Save.

Step 6: Save Changes

Return to Tweak Settings and click Save to apply all changes. The setting takes effect immediately.

Important Notes

• cPanel users can always change their password directly through cPanel » Preferences » Password & Security, provided the feature is enabled in their package.
• The email-based password reset requires that a valid contact email address is set in the user's cPanel profile (cPanel » Preferences » Contact Information).
• This setting only controls cPanel account passwords. It does not affect email, FTP, or database passwords.
• If your server uses external authentication (LDAP or Active Directory), password management may be handled by the external system.
• Suspended accounts cannot reset their passwords until they are unsuspended.

Troubleshooting

• Users cannot find the password change option in cPanel: Verify that Password Modification is enabled in their package feature list under WHM » Packages » Edit a Package.
• Email password reset not working: Ensure the user has a valid contact email configured and that your server can send outbound email (Exim is running).
• Setting not visible in Tweak Settings: The exact label varies by WHM version. Try searching for password in the search bar.
• User reports the feature is disabled: Check if a reseller has restricted password modification features in their ACL under WHM » Reseller Center » Edit Privileges.

For official documentation, see the cPanel Tweak Settings guide and cPanel Password Management documentation.