When your hosting is handed over, you get a username and password for logging in to cPanel. The first screen is full of icons, and many managers only visit a few sections and steer clear of the rest. In practice, knowing a handful of main sections is enough to run a company website. Section names and layout vary a little depending on the cPanel version, theme and host settings, but on most hosts the sections below exist in a similar form, and the search box at the top of the page helps you find them.
Secure login
Your host gives you the login address, which usually opens over https on port 2083. The first thing to do after handover is change the password and enable two-factor authentication in the security section. Don’t share the main cPanel password with your web designer or contractor; create a separate FTP account for them, and in versions that allow sub-users with limited access, use that instead.
Files
- File Manager: View, edit, upload and compress files in the browser. The
public_htmlfolder is usually the root of the main site. - FTP Accounts: Create a separate account for each person, limited to the folder they need, and delete it when the work is done.
- Backup: Take a full account backup or separate backups of the home directory and databases. Download the backup file and keep it off the host.
- Disk Usage: Shows which folders are filling up the account’s space; often old backups or logs.
Databases
In the MySQL Databases section, you can create databases and users and assign a user to a database with specific privileges. The phpMyAdmin tool lets you view tables and export and import databases. Before any direct edit in phpMyAdmin, export the database; this tool has no undo button.
Domains and DNS
- Domains: Add another domain or a subdomain to the same account and set the folder for each.
- Redirects: Redirect an address or an entire domain to another address.
- DNS editor (Zone Editor): Manage A, CNAME, MX and TXT records, but only if the domain’s NS records point to this host. Otherwise, changes here have no effect.
This section is where you create mailboxes, set each mailbox’s size, and manage forwarders, autoresponders, filters and anti-spam settings. The email sending reputation section (usually Email Deliverability in newer versions) shows the status of the domain’s SPF and DKIM records. If your company’s business email is on a separate server, set the domain to remote mail exchanger in the Email Routing settings; otherwise, email the site itself sends to company addresses may stay on this host and never reach the main mailbox.
Security, software and advanced tools
- SSL/TLS: Certificate status and automatic renewal.
- IP Blocker: Block access from addresses that are attacking the site.
- PHP version selector: Set the PHP version for each domain; the name of this section varies by host.
- Software installer: Many hosts offer a tool for installing and managing WordPress.
- Scheduled tasks (Cron Jobs): Run a command automatically at a set time. Review this list from time to time; an unfamiliar scheduled task can be a sign of a breach.
- Metrics and logs: Visitor statistics, bandwidth usage and error logs; the first place to look when the site shows an error.
Before any significant change, such as editing the .htaccess file, changing the PHP version or editing the database, back up that part first. Most breakages start with a small change made without a backup.
Checklist
- The cPanel password has been changed and two-factor authentication is enabled
- Contractors have separate, restricted FTP accounts
- Full backups are taken periodically and stored off the host
- Disk space and mailbox sizes are monitored
- All domains have valid SSL certificates
- The list of scheduled tasks has been reviewed
cPanel hosting from ITPlus724 comes with technical support, and our engineers can help your company with setup, security settings and everyday panel tasks.