How to Deny sub account users to reset sub accounts password via WHM?

By default, sub-account users (such as email accounts and FTP accounts) can reset their own passwords. If you want to ensure all sub-account password changes go through the primary cPanel account holder or your support team, you can disable this feature globally through WHM's Tweak Settings.

Step 1: Log in to WHM

Open your browser and navigate to https://your-server-ip:2087. Enter your root or reseller credentials to access the WHM dashboard.

Step 2: Navigate to Tweak Settings

Use the left-hand sidebar to go to Home » Server Configuration » Tweak Settings.

Step 3: Locate the Sub Account Password Reset Option

Use the search bar at the top of Tweak Settings and type Sub Account. Look for the option labeled Reset Password for Sub Accounts.

Step 4: Disable the Option

Toggle or set Reset Password for Sub Accounts to Off.

Step 5: Save Changes

Click the Save button at the bottom of the page to apply the change.

Important Notes

• After disabling, sub-account users will no longer be able to reset their passwords via email links or the cPanel interface.
• The main cPanel account holder can still manage sub-account passwords through cPanel (e.g., via Email Accounts or FTP Accounts).
• Server administrators (root) can still reset any sub-account password via WHM or SSH.
• This setting applies globally to all sub accounts on the server.
• This affects email, FTP, and other sub-account password resets — but not the main cPanel account password.

Troubleshooting

• Cannot find the option: The label may vary slightly by WHM version. Search for sub account in the Tweak Settings search bar.
• Need to reset a sub-account password: The main cPanel user can do so via cPanel » Email Accounts » Manage (for email) or cPanel » FTP Accounts (for FTP). Root users can also use WHM » Database Services » Change Database User Password for database users.