{"id":13077,"date":"2026-06-11T11:41:31","date_gmt":"2026-06-11T11:41:31","guid":{"rendered":"https:\/\/www.webystrata.co.uk\/blog\/how-to-force-a-user-to-change-password-from-whm\/"},"modified":"2026-06-11T11:42:13","modified_gmt":"2026-06-11T11:42:13","slug":"how-to-force-a-user-to-change-password-from-whm","status":"publish","type":"post","link":"https:\/\/www.webystrata.co.uk\/blog\/how-to-force-a-user-to-change-password-from-whm\/","title":{"rendered":"How to Force a User to Change Password from WHM?"},"content":{"rendered":"<h2 data-section-id=\"qrlb9i\" data-start=\"0\" data-end=\"49\">How to Force a User to Change Password from WHM<\/h2>\n<p data-start=\"51\" data-end=\"487\"><a href=\"https:\/\/www.webystrata.com\/\" target=\"_blank\" rel=\"noopener\"><strong data-start=\"51\" data-end=\"102\">How to Force a User to Change Password from WHM<\/strong><\/a> is an important WHM security feature that allows server administrators to require cPanel users to update their passwords. This is especially useful after account migrations, security incidents, password resets, or when enforcing stronger password policies. Once enabled, WHM will continuously prompt the user to change their password before they can fully access their cPanel account.<\/p>\n<h3 data-section-id=\"18s4j86\" data-start=\"489\" data-end=\"513\">Step 1: Log in to WHM<\/h3>\n<p data-start=\"515\" data-end=\"565\">Log in to your WHM account using root credentials.<\/p>\n<h3 data-section-id=\"csufkr\" data-start=\"567\" data-end=\"600\">Step 2: Open Account Functions<\/h3>\n<p data-start=\"602\" data-end=\"650\">From the left-side navigation menu, navigate to: <strong data-start=\"652\" data-end=\"673\">Account Functions<\/strong><\/p>\n<h3 data-section-id=\"1a9np05\" data-start=\"675\" data-end=\"716\">Step 3: Click on Force Password Change<\/h3>\n<p data-start=\"718\" data-end=\"750\">Under Account Functions, select: <strong data-start=\"752\" data-end=\"777\">Force Password Change<\/strong><\/p>\n<p data-start=\"718\" data-end=\"750\">\n<p data-start=\"718\" data-end=\"750\"><img fetchpriority=\"high\" decoding=\"async\" class=\"wp-image-12952  aligncenter\" title=\"force-users-change-password-whm\" src=\"https:\/\/www.webystrata.co.uk\/blog\/wp-content\/uploads\/2026\/06\/whm_account-functions-click-on-force_password_change.webp\" alt=\"force-users-change-password-whm\" width=\"590\" height=\"393\" \/><\/p>\n<p data-start=\"779\" data-end=\"864\">\n<p data-start=\"779\" data-end=\"864\">The interface will display a list of all active cPanel accounts hosted on the server.<\/p>\n<h3 data-section-id=\"m2pr8y\" data-start=\"866\" data-end=\"897\">Step 4: Select User Accounts<\/h3>\n<p data-start=\"899\" data-end=\"974\">Locate the user account(s) for which you want to enforce a password change.<\/p>\n<p data-start=\"976\" data-end=\"1053\">Under the <strong data-start=\"986\" data-end=\"997\">Forced?<\/strong> column, check the box next to the desired user account.<\/p>\n<p data-start=\"1055\" data-end=\"1092\">You can select one or multiple users.<\/p>\n<p data-start=\"1055\" data-end=\"1092\">\n<p data-start=\"1055\" data-end=\"1092\"><img decoding=\"async\" class=\"aligncenter wp-image-12951 \" title=\"whm_force_pass_change_submit\" src=\"https:\/\/www.webystrata.co.uk\/blog\/wp-content\/uploads\/2026\/06\/whm_force_pass_change_submit.webp\" alt=\"whm-force-pass-change-submit\" width=\"536\" height=\"357\" \/><\/p>\n<h3 data-section-id=\"q88m0p\" data-start=\"1094\" data-end=\"1119\"><\/h3>\n<h3 data-section-id=\"q88m0p\" data-start=\"1094\" data-end=\"1119\">Step 5: Submit Changes<\/h3>\n<p data-start=\"1121\" data-end=\"1131\">Click the: <strong data-start=\"1133\" data-end=\"1143\">Submit <\/strong>button.<\/p>\n<p data-start=\"1154\" data-end=\"1193\">WHM will immediately apply the setting.<\/p>\n<h4 data-section-id=\"14xzydi\" data-start=\"1195\" data-end=\"1216\">What Happens Next?<\/h4>\n<p data-start=\"1218\" data-end=\"1259\">The next time the user logs in to cPanel:<\/p>\n<ul data-start=\"1261\" data-end=\"1500\">\n<li data-section-id=\"1br5l7e\" data-start=\"1261\" data-end=\"1310\">They will be prompted to change their password.<\/li>\n<li data-section-id=\"gd8281\" data-start=\"1311\" data-end=\"1395\">Access to certain cPanel features may be restricted until the password is updated.<\/li>\n<li data-section-id=\"1wpdxaq\" data-start=\"1396\" data-end=\"1500\">The password change prompt will continue to appear until the user successfully changes their password.<\/li>\n<\/ul>\n<blockquote data-start=\"1502\" data-end=\"1611\">\n<p data-start=\"1504\" data-end=\"1611\"><strong data-start=\"1504\" data-end=\"1513\">Note:<\/strong> If the user has not changed their password, the <strong data-start=\"1562\" data-end=\"1573\">Forced?<\/strong> checkbox will remain selected in WHM.<\/p>\n<\/blockquote>\n<h4 data-section-id=\"8dtpi\" data-start=\"1613\" data-end=\"1626\">Conclusion<\/h4>\n<p data-start=\"1628\" data-end=\"1865\">The Force Password Change feature in WHM is a simple but effective way to improve account security. It helps administrators ensure that users update outdated, weak, or compromised passwords and maintain a more secure hosting environment.<\/p>\n<p class=\"ws-crosspost-source\">Originally published on <a href=\"https:\/\/www.webystrata.com\/blog\/how-to-force-a-user-to-change-password-from-whm\/\" target=\"_blank\" rel=\"noopener\">WebyStrata.com Blog<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to Force a User to Change Password from WHM How to Force a User to Change Password from WHM is an important WHM security feature that allows server administrators to require cPanel users to update their passwords. This is especially useful after account migrations, security incidents, password resets, or when enforcing stronger password policies. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":13081,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,3],"tags":[],"class_list":["post-13077","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-latest-updates","category-whm-panel"],"_links":{"self":[{"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/posts\/13077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=13077"}],"version-history":[{"count":1,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/posts\/13077\/revisions"}],"predecessor-version":[{"id":13080,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/posts\/13077\/revisions\/13080"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/media\/13081"}],"wp:attachment":[{"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=13077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=13077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webystrata.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=13077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}