How to reset and manage passwords in CloudPanel via CLI and interface

Anyone using CloudPanel to manage websites and web applications on Linux knows the panel is lightweight, fast, and unbloated. However, getting locked out of the web interface on port 8443 or forgetting administrative credentials can happen to anyone.

Knowing how to recover access quickly without reinstalling the control panel or disturbing production sites is essential. CloudPanel provides two clear paths: the native command-line binary clpctl (accessible via SSH) and the web interface itself (for routine password rotations).

Here is how to reset administrator passwords and manage individual site and SFTP credentials step by step.

1. Resetting administrator passwords via command line (CLI)#

If you have lost access to your admin account or the web interface is unreachable in your browser, the SSH terminal is the fastest recovery method.

CloudPanel includes a native command-line binary named clpctl. This utility communicates directly with the internal database of the control panel, operating independently of the web server or browser port.

Connect to your server via SSH as root (or with sudo elevation):

clpctl user:reset:password --userName=admin --password='MyNewSecurePass123!'

Parameter details:#

• --userName: The username registered inside CloudPanel that you need to reset (such as admin or another manager account).
• --password: The new password string enclosed in single quotes ('). Single quotes prevent the Bash shell from misinterpreting special characters like $, !, or *.

The command takes effect immediately. Once executed, open https://SERVER_IP:8443 in your browser and log in with your updated credentials.

2. Changing administrator credentials in the web interface#

When you are already logged into the dashboard and wish to update passwords for routine security hygiene:

1. Open your browser and navigate to https://SERVER_IP:8443.
2. In the upper right corner of the dashboard, click on Admin Area.
3. In the left navigation menu, click Users.
4. Locate the user you wish to edit and click the edit icon.
5. Enter the new password in the designated fields and save.

This modifies users with global server permissions who manage domains, system services, and firewall rules.

3. Resetting site user passwords (isolated SSH and SFTP)#

CloudPanel isolates each hosted domain under its own unprivileged system user. This user owns the application files and authenticates via SFTP or SSH, with optional restricted access to that specific domain's dashboard.

If a developer, client, or you need to update a site user's password:

1. From the CloudPanel main dashboard, click on the domain you want to manage.
2. In the site menu on the left, click Settings.
3. Scroll down until you reach the Site User section.
4. Enter the new password into the password field and save your changes.

Saving this form updates the SFTP login, SSH shell credentials (if SSH access is enabled for that user), and website-level dashboard access simultaneously.

4. Security best practices after resetting passwords#

Whenever modifying server credentials, especially through the command line, keep these operational habits in mind:

1. Clear session command history: Bash stores executed commands in ~/.bash_history. If you executed clpctl with the password in plain text, flush your session history so the string does not remain stored on disk:

   history -c && history -w

1. Enable two-factor authentication (2FA): CloudPanel supports native 2FA for administrator profiles. Enabling an authenticator app adds critical protection against automated credential stuffing.
2. Use unique credentials per site: Avoid sharing administrator passwords with site-level users. Keeping distinct passwords for individual applications ensures that a compromised SFTP account cannot escalate to full server control.

See also

Cybersecurity Troubleshooting Fail2ban status 255 exception: migrating to systemd backend and Nginx modular includes

Servers Web server ciphers: from ransomware confusion to real ssl/tls hardening

Cybersecurity Forensic analysis of a CloudLinux and cPanel compromise: from the sshd_config trap to PAM and IPMI persistence

This post is licensed under CC BY-NC.