Applying a narrowly scoped ModSecurity exception as administrator A false-positive exception should remove only the protection that blocks a verified legitimate request. Disabling a rule globally is broader than…

Changing the server root password in WHM The root password controls a highly privileged server account. Change it only when you administer that server and have an approved recovery route if the…

Creating a feature list in WHM A feature list controls which cPanel tools a package exposes. Use it to provide a purposeful set of customer tools while keeping package resource…

Enabling or disabling cPanel features through WHM Adjust a feature list when customers need access to a particular cPanel tool. The change can affect every account assigned to that list, so identify the…

Enabling two-factor authentication for WHM administration Two-factor authentication adds a time-based code to supported WHM interactive logins. Configure it for each administrator and retain a controlled…

Finding a ModSecurity rule ID for a blocked customer request A ModSecurity rule hit can explain why a legitimate form submission or upload receives a blocked response. Identify the exact request and rule before…

Increase phpMyAdmin’s upload limit through WHM Tweak Settings If cPanel's phpMyAdmin says a selected SQL file exceeds the maximum upload size, check the file and the panel's internal PHP limits before changing your…

Planning key-based administrator access before disabling SSH passwords Disabling SSH password authentication reduces exposure to password guessing, but every authorised administrator must first have a working alternative.…

Removing a custom WHM feature list Delete a custom feature list only after deciding what its accounts and packages should use instead. Removing it changes feature-list assignments and can…

Requiring a cPanel user to change their password WHM can require selected cPanel users to choose a new password at their next cPanel login. This is useful after handing over an account or reviewing a…

Restricting a management service through WHM Host Access Control Host Access Control can restrict selected management services by source address. Its implementation depends on the server operating system and firewall…

Restricting compiler access to accounts that require it Compiler Access can limit which unprivileged accounts use the server’s managed C and C++ compilers. Apply it according to actual build requirements…

Reviewing cPHulk login blocks without weakening global protection cPHulk can temporarily block account or IP-based login attempts after repeated failures. A normal invalid-login message can therefore indicate a…

Setting the default nameservers in WHM The WHM default nameservers provide nameserver values for account provisioning on the server. Setting these defaults is one part of a working DNS setup;…

Setting the server time and timezone in WHM Accurate server time matters for logs, scheduled jobs, authentication and licensing. A timezone controls how time is displayed and interpreted, while…

Setting up private nameservers for a WHM reseller Private nameservers such as ns1.example.com and ns2.example.com let customers use nameservers under your own domain. The registrar, authoritative DNS…

Turning WHM Security Advisor findings into an action plan Security Advisor checks server configuration and reports findings with suggested actions. Treat it as an evidence-based maintenance input, then assess…

Using WHM disabled features for server-wide restrictions The special disabled feature list is a server-wide restriction mechanism. It overrides ordinary feature lists, so a change here can affect accounts…