cPanel is a commercial web hosting control panel for Linux servers that gives account owners a graphical interface to manage websites, domains, email, databases, files and backups. In servers and hosting, it is closely paired with WHM (WebHost Manager), the administrative interface that the server owner or reseller uses to create and control the individual cPanel accounts.
cPanel became the most widespread panel in shared hosting because it turns many separate server services into one consistent interface. A customer can publish a website, create mailboxes and install TLS certificates without ever logging in to a shell.
How cPanel and WHM are structured
cPanel works on three permission levels. The server administrator uses WHM with root privileges, resellers use a limited WHM to manage their own customers, and end users log in to cPanel to manage only their own account. Each cPanel account maps to a separate Linux user with its own home directory, quotas and limits.
Behind the interface, cPanel configures standard open-source services. The web server is typically Apache, optionally fronted by Nginx or replaced by LiteSpeed. Email uses Exim and Dovecot, DNS uses BIND or PowerDNS, and databases run on MySQL or MariaDB, with PostgreSQL as an option.
| Interface | User level | Default secure port |
|---|---|---|
| WHM | Root administrator and resellers | 2087 |
| cPanel | Hosting account owner | 2083 |
| Webmail | Individual mailbox users | 2096 |
| cPanel API | Scripts and automation | Same ports with tokens |
Core features for hosting accounts
The cPanel interface groups its tools by task. The following table shows the areas that account owners use most and what each one manages on the server.
| Feature area | What it manages | Underlying component |
|---|---|---|
| Domains | Addon domains, subdomains, redirects | Apache virtual hosts and DNS zones |
| Mailboxes, forwarders, spam filters | Exim, Dovecot, SpamAssassin | |
| Databases | Databases, users and privileges | MySQL or MariaDB, phpMyAdmin |
| Files | File manager, FTP accounts, disk usage | Home directory and quotas |
| Security | TLS certificates, IP blocking, two-factor login | AutoSSL, ModSecurity |
| Software | PHP versions and extensions, application installers | MultiPHP with PHP-FPM |
| Backups | Full and partial account backups | cPanel backup system |
AutoSSL deserves special mention. It issues and renews domain-validated certificates automatically for every domain on the account, which made HTTPS the default for shared hosting customers without manual work.
Account mobility is another strength. A complete cPanel account, including files, databases, mailboxes and DNS zones, can be packaged with one standardized backup format and restored on another cPanel server. The WHM Transfer Tool copies accounts directly between servers, which makes hardware upgrades and provider changes predictable and explains why many hosting companies stay within the cPanel ecosystem.
cPanel compared with other hosting panels
cPanel competes with several panels that differ in licensing, operating system support and focus. The right choice depends on whether the server hosts many customers or a few owned sites.
| Panel | Operating systems | Licensing | Typical use |
|---|---|---|---|
| cPanel and WHM | AlmaLinux, Rocky Linux, CloudLinux, Ubuntu | Commercial, priced by account count | Shared and reseller hosting |
| Plesk | Linux and Windows | Commercial, priced by edition | Agencies, Windows hosting |
| CloudPanel | Debian and Ubuntu | Free | PHP and Node.js sites on a single server |
| DirectAdmin | Linux | Commercial, lower cost | Budget hosting providers |
| No panel | Any | None | Automated or containerized infrastructure |
cPanel is strongest where many separate customers share one server, because its account isolation, reseller model and migration tools are mature. For a single company site on a VPS, a lighter panel or plain configuration management is often more efficient.
Resource limits and account isolation
On shared servers, cPanel combines with operating system mechanisms to keep one account from consuming resources needed by others. WHM packages define disk quotas, bandwidth, and the number of domains, mailboxes and databases.
Finer control of CPU, memory, I/O and processes usually comes from CloudLinux LVE, which places each account in its own lightweight container. Typical limits include entry processes, the number of concurrent PHP requests, and a process limit for all processes of the account. When an account hits these limits, visitors see 503 or 508 errors instead of the whole server slowing down.
PHP runs per account under the account user, usually through PHP-FPM pools, so one compromised site cannot read files belonging to another account. Adding CageFS goes further by giving each account a virtualized file system view that hides other users and most system files.
Licensing, security and common pitfalls
cPanel licenses are priced by the number of hosted accounts, a model introduced in 2019 that raised costs notably for servers with many small accounts. This change pushed some providers toward alternative panels and is worth evaluating before choosing a platform.
- Restrict WHM access to trusted IP addresses and require two-factor authentication for every administrative login.
- Keep automatic updates enabled, because cPanel patches security issues in its own code and bundled services.
- Store backups off the server, since a backup on the same disk does not survive hardware failure or ransomware.
- Avoid manual edits of generated configuration files, which cPanel may overwrite; use its include files and templates instead.
- Watch outbound email, because a single compromised account can send spam and get the server IP blocklisted.
A frequent operational surprise is that cPanel expects to own the whole server. It is meant to be installed on a freshly provisioned machine, and installing it over an existing setup with its own web server, mail system or firewall rules usually fails or breaks those services. Planning a clean installation saves considerable trouble.
The short version
A web server is a powerful computer, but setting it up usually requires typing technical commands. cPanel puts a friendly dashboard on top of it. Through buttons and forms, a website owner can create email addresses, upload files, add a database or connect a new domain.
The hosting company uses a separate dashboard to give each customer their own space. Each customer sees only their own part of the server and cannot touch anyone else.
Where it makes a difference
A small web agency manages 35 client websites on one dedicated server running cPanel and WHM with CloudLinux. Each client has a separate cPanel account created from a package with 10 GB of disk space, two CPU cores, 2 GB of memory and 20 entry processes.
One client runs a seasonal promotion that brings heavy traffic. Its account reaches the entry process limit, so some of its visitors briefly see a busy message, while the other 34 sites stay fast. The agency reviews the resource graphs in WHM, moves the client to a larger package, and enables caching. Clients also create their own mailboxes and reset passwords without contacting the agency, which cuts routine support requests considerably.