If you received our security notice, follow these steps in order:
- Reset your Client Area password. Your old password no longer works, so use Forgot Password (section 1).
- Change your hosting, control panel and server passwords (sections 2 to 5), and replace any SSH keys you use.
- Change your other passwords and secrets, such as email, FTP, database and website administrator logins.
Keeping your Hostwinds account and hosting services secure starts with strong, unique passwords and regularly reviewing who has access.
This guide explains how to change or reset passwords for your Hostwinds Client Area, Shared or Business Hosting, cPanel/WHM accounts, VPS servers, and Dedicated Servers.
Important: Your Hostwinds Client Area password is separate from the passwords used to access your hosting services, control panels, and servers. Changing one does not automatically update the others.
1. Hostwinds Client Area Password and Security
Applies to: All Hostwinds customers with a Client Area account.
Your Client Area provides access to your Hostwinds services, billing information, and account settings.
Reset Your Client Area Password
If your password was reset as part of our security response, your old password no longer works. To choose a new one:
- Go to the Client Area login page and select Forgot Password.
- Enter the email address on your account, then follow the reset link we send you.
- Once you're signed in, check that your email address and contact details are correct. If anything has changed that you didn't change, open a ticket with our Billing Department.
Change Your Client Area Password
- Log in to your Hostwinds Client Area.
- Click your name in the upper-right corner and select Change Password.
- Enter your current password, followed by your new password and confirmation.
- Click Save Changes.
Review Account Access and Security
You can also manage user access and security settings from the dropdown menu under your name in the Client Area.
- User Management: View and manage users who have access to your account. Each user must log in separately to change their own password. Remove any users you don't recognize.
- Security Settings: Review your security questions and enable Two-Factor Authentication (2FA) to help protect your account.
For additional details, visit Account Management.
2. Shared and Business Hosting – cPanel Password
Applies to: Customers with Shared Hosting or Business Hosting type hosting services.
You can change your hosting account's cPanel password directly from the Hostwinds Client Area.
- Log in to your Hostwinds Client Area.
- Navigate to Services > My Services.
- Locate your Shared or Business Hosting service and click Manage.
- Select Change Password.
- Enter your new password in both fields and click Save Changes.
Remember that email accounts, FTP accounts, and website administrator logins may have separate passwords. Review these credentials as well when securing your hosting environment.
For detailed instructions, see How to Change a cPanel Password.
3. VPS and Cloud Servers – Password Management
Applies to: All Hostwinds Managed and Unmanaged VPS services running Linux or Windows.
VPS passwords can be managed through the Hostwinds Cloud Control Portal.
Access Your VPS
- Log in to your Hostwinds Client Area.
- Navigate to Services > My Services and filter by Active, if needed.
- Find your VPS service and click Manage.
- Select Click Here to Manage This Server to open the Cloud Control Portal.
You can also access the Hostwinds Cloud Control Portal directly.
Change Your VPS Password
- In the Cloud Control Portal, select the VPS you want to update.
- Click Change Password.
- Enter your new password and save your changes.
- Once the password has been updated, select Actions > Reboot for the change to take effect.
Important: Rebooting your VPS will temporarily interrupt any running services. We recommend doing this during a time when downtime will have the least impact.
For more information, visit Hostwinds Cloud Server Management.
4. cPanel/WHM – Password and Account Management
Applies to: Customers with cPanel/WHM installed on their VPS or Dedicated Server.
If you have WHM administrator access, you can manage passwords for individual cPanel accounts as well as your WHM root password.
Access Your WHM Control Panel
- Open your browser and navigate to https://YourServerIPAddress:2087, replacing YourServerIPAddress with your server's IP address.
- Log in using your root username and password.
For additional login instructions, see How to Get Started with Your New cPanel/WHM Server.
Change a cPanel Account Password
- Log in to WHM.
- Navigate to Account Functions > Password Modification.
- Select the cPanel account you want to update.
- Enter and confirm a new password, or use the password generator.
- Save your changes.
For additional instructions, see How to Change a cPanel User Password from WHM.
Change Your WHM Root Password
Your WHM root password provides administrative access to your server. To change it:
- Log in to WHM as the root user.
- Navigate to Server Configuration > Change Root Password.
- Enter and confirm your new root password.
- Click Change Password to save your changes.
For detailed instructions, see How to Change Root Password in WHM.
We also recommend reviewing your WHM and cPanel users, removing unnecessary access, and enabling Two-Factor Authentication (2FA) where supported.
5. Dedicated Servers – Password Reset Assistance
Applies to: Customers with Hostwinds Dedicated Servers.
Unlike VPS services, Dedicated Servers do not have a direct password reset option in the Hostwinds Client Area.
If you need to reset or recover your Dedicated Server password, please submit a Technical Support Ticket.
Find Your Dedicated Server Identifier
To help our team identify the correct server:
- Log in to your Hostwinds Client Area.
- Navigate to Services > My Services.
- Filter by Active, if needed, and locate your Dedicated Server.
- Note the hostname or service identifier displayed beneath the service (for example, DED XXXX).
Include the hostname or identifier and a brief description of the issue in your support ticket. If multiple servers are affected, list each applicable identifier.
Important: Available password recovery methods may vary based on your server's operating system, configuration, and management level. Our Technical Support team can review your service and advise on the available options.
Password Security Best Practices
Regardless of which Hostwinds service you use, we recommend the following:
- Use strong, unique passwords: Aim for at least 16 characters for each account or service.
- Use a password manager: Generate and securely store passwords rather than reusing or sharing them.
- Enable 2FA: Turn on Two-Factor Authentication wherever supported.
- Review account access: Remove users and credentials that are no longer needed.
- Protect related applications: Remember that email, FTP, databases, and website administrator accounts may require separate password updates.
Need Additional Assistance?
If you're unable to change or reset your password, our Support team can assist.
- Billing Department: For Client Area login issues, account access, or account security concerns.
- Technical Support Department: For password issues involving cPanel/WHM, VPS, Dedicated Servers, or other hosting services.
To request assistance, open a support ticket and select the appropriate department.
When submitting your ticket, include the affected service and a brief description of the issue. Do not include your password.
For step-by-step instructions, see How to Create, Submit, and Manage Support Tickets.