On a cPanel server, use AutoSSL: in WHM open SSL/TLS > Manage AutoSSL, choose a provider, and run it for all users. Certificates install and renew on their own. On a server without a control panel, install Certbot and run sudo certbot --nginx or sudo certbot --apache. Certbot sets up automatic renewal. Check renewal with sudo certbot renew --dry-run.
Protect your server from malware and viruses by installing ClamAV on WHM. Follow this guide to install, update, and scan your system for threats.
Linux Malware Detect (LMD) is an open-source malware scanner for Linux systems, specifically designed for shared hosting environments. It leverages real-time threat intelligence from network intrusion detection systems and community submissions to identify and eliminate malware. LMD integrates seamlessly with ClamAV to enhance scanning capabilities using both MD5 hash-based and HEX pattern matching detection techniques.
Parked domains let you point multiple domains to your primary website without separate hosting. This UnderHost tutorial reveals professional techniques for managing them efficiently in cPanel.
If you manage the server, turn on backups in WHM > Backup > Backup Configuration: pick a schedule, a retention period and an off-site destination, and cPanel runs them automatically. If you only have a cPanel account, schedule a full backup with a cron job that calls cPanel's Backup API and sends the file to another server over SSH with a key. Never put passwords in cron jobs or scripts, and test a restore regularly.
This blog post has been updated! PHP 7 is now obsolete, and cPanel officially supports PHP 8.1, 8.2, and 8.3. At UnderHost, we use CloudLinux on our shared servers, allowing customers to select PHP versions from 5.6 up to 8.4. Learn more about supported versions and how to upgrade via EasyApache 4.
GeoIP allows websites to detect a visitor’s location based on their IP address. It provides details such as country, city, ISP, and connection type. If you're running a cPanel server and need to install GeoIP, follow this updated guide for 2025.
Sign up for Google Workspace and verify your domain. In cPanel, open Email > Email Routing and choose Remote Mail Exchanger. Then, in Domains > Zone Editor, replace the MX records with Google's: smtp.google.com with priority 1. Add include:_spf.google.com to your SPF record, publish the DKIM key from the Google Admin console, and add a DMARC record.
Lost access to your WordPress admin account? Reset your password using MySQL commands in cPanel’s command line.