Security Tips for cPanel

Login to cPanel and WHM Safely

Always log in to cPanel and WHM using a valid SSL-installed domain name or hostname. Never log in with an IP address for security.

cPanel Login (with SSL)

Use your domain name:

https://example.com:2083

WHM Login (with SSL)

Use your domain name:

https://example.com:2087

Login Without SSL (Not Recommended)

For cPanel:

http://example.com:2082

For WHM:

http://example.com:2086

Auto Login via Domain

To access cPanel directly using your domain name:

https://example.com/cpanel

For WHM:

https://example.com/whm

Firewall

Install CSF (ConfigServer Security & Firewall) to protect your network. Installation commands:

cd /usr/src
rm -fv csf.tgz
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Test CSF Required Modules:

perl /usr/local/csf/bin/csftest.pl

Don't worry if you cannot run all the features — as long as the script doesn't report any FATAL errors.

📘 Full CSF Installation Manual

Secure SSH

Do not use the default SSH port 22. Change it to a non-standard port for better security.

1. Edit the SSH configuration file:

/etc/ssh/sshd_config

2. Change the Port 22 line to a custom port (e.g., 1527):

Port 1527

3. Open the new port in your firewall rules and restart SSH:

service sshd restart