cPanel

On this page 7

cPanel is a commercial web hosting control panel for Linux servers that gives account owners a graphical interface to manage websites, domains, email, databases, files and backups. In servers and hosting, it is closely paired with WHM (WebHost Manager), the administrative interface that the server owner or reseller uses to create and control the individual cPanel accounts.

cPanel became the most widespread panel in shared hosting because it turns many separate server services into one consistent interface. A customer can publish a website, create mailboxes and install TLS certificates without ever logging in to a shell.

How cPanel and WHM are structured

cPanel works on three permission levels. The server administrator uses WHM with root privileges, resellers use a limited WHM to manage their own customers, and end users log in to cPanel to manage only their own account. Each cPanel account maps to a separate Linux user with its own home directory, quotas and limits.

Behind the interface, cPanel configures standard open-source services. The web server is typically Apache, optionally fronted by Nginx or replaced by LiteSpeed. Email uses Exim and Dovecot, DNS uses BIND or PowerDNS, and databases run on MySQL or MariaDB, with PostgreSQL as an option.

InterfaceUser levelDefault secure port
WHMRoot administrator and resellers2087
cPanelHosting account owner2083
WebmailIndividual mailbox users2096
cPanel APIScripts and automationSame ports with tokens
cPanel interfaces and their default ports

Core features for hosting accounts

The cPanel interface groups its tools by task. The following table shows the areas that account owners use most and what each one manages on the server.

Feature areaWhat it managesUnderlying component
DomainsAddon domains, subdomains, redirectsApache virtual hosts and DNS zones
EmailMailboxes, forwarders, spam filtersExim, Dovecot, SpamAssassin
DatabasesDatabases, users and privilegesMySQL or MariaDB, phpMyAdmin
FilesFile manager, FTP accounts, disk usageHome directory and quotas
SecurityTLS certificates, IP blocking, two-factor loginAutoSSL, ModSecurity
SoftwarePHP versions and extensions, application installersMultiPHP with PHP-FPM
BackupsFull and partial account backupscPanel backup system
Main cPanel feature areas

AutoSSL deserves special mention. It issues and renews domain-validated certificates automatically for every domain on the account, which made HTTPS the default for shared hosting customers without manual work.

Account mobility is another strength. A complete cPanel account, including files, databases, mailboxes and DNS zones, can be packaged with one standardized backup format and restored on another cPanel server. The WHM Transfer Tool copies accounts directly between servers, which makes hardware upgrades and provider changes predictable and explains why many hosting companies stay within the cPanel ecosystem.

cPanel compared with other hosting panels

cPanel competes with several panels that differ in licensing, operating system support and focus. The right choice depends on whether the server hosts many customers or a few owned sites.

PanelOperating systemsLicensingTypical use
cPanel and WHMAlmaLinux, Rocky Linux, CloudLinux, UbuntuCommercial, priced by account countShared and reseller hosting
PleskLinux and WindowsCommercial, priced by editionAgencies, Windows hosting
CloudPanelDebian and UbuntuFreePHP and Node.js sites on a single server
DirectAdminLinuxCommercial, lower costBudget hosting providers
No panelAnyNoneAutomated or containerized infrastructure
cPanel and alternative control panels

cPanel is strongest where many separate customers share one server, because its account isolation, reseller model and migration tools are mature. For a single company site on a VPS, a lighter panel or plain configuration management is often more efficient.

Resource limits and account isolation

On shared servers, cPanel combines with operating system mechanisms to keep one account from consuming resources needed by others. WHM packages define disk quotas, bandwidth, and the number of domains, mailboxes and databases.

Finer control of CPU, memory, I/O and processes usually comes from CloudLinux LVE, which places each account in its own lightweight container. Typical limits include entry processes, the number of concurrent PHP requests, and a process limit for all processes of the account. When an account hits these limits, visitors see 503 or 508 errors instead of the whole server slowing down.

PHP runs per account under the account user, usually through PHP-FPM pools, so one compromised site cannot read files belonging to another account. Adding CageFS goes further by giving each account a virtualized file system view that hides other users and most system files.

Licensing, security and common pitfalls

cPanel licenses are priced by the number of hosted accounts, a model introduced in 2019 that raised costs notably for servers with many small accounts. This change pushed some providers toward alternative panels and is worth evaluating before choosing a platform.

  • Restrict WHM access to trusted IP addresses and require two-factor authentication for every administrative login.
  • Keep automatic updates enabled, because cPanel patches security issues in its own code and bundled services.
  • Store backups off the server, since a backup on the same disk does not survive hardware failure or ransomware.
  • Avoid manual edits of generated configuration files, which cPanel may overwrite; use its include files and templates instead.
  • Watch outbound email, because a single compromised account can send spam and get the server IP blocklisted.

A frequent operational surprise is that cPanel expects to own the whole server. It is meant to be installed on a freshly provisioned machine, and installing it over an existing setup with its own web server, mail system or firewall rules usually fails or breaks those services. Planning a clean installation saves considerable trouble.

The short version

A web server is a powerful computer, but setting it up usually requires typing technical commands. cPanel puts a friendly dashboard on top of it. Through buttons and forms, a website owner can create email addresses, upload files, add a database or connect a new domain.

The hosting company uses a separate dashboard to give each customer their own space. Each customer sees only their own part of the server and cannot touch anyone else.

Where it makes a difference

A small web agency manages 35 client websites on one dedicated server running cPanel and WHM with CloudLinux. Each client has a separate cPanel account created from a package with 10 GB of disk space, two CPU cores, 2 GB of memory and 20 entry processes.

One client runs a seasonal promotion that brings heavy traffic. Its account reaches the entry process limit, so some of its visitors briefly see a busy message, while the other 34 sites stay fast. The agency reviews the resource graphs in WHM, moves the client to a larger package, and enables caching. Clients also create their own mailboxes and reset passwords without contacting the agency, which cuts routine support requests considerably.