A compromised WHM reseller account can affect every cPanel account it owns, so reseller credentials deserve stronger protection than an ordinary website login.
Step by step
- Use a long unique password and enable multi-factor authentication where available.
- Never share the main WHM login when a separate delegated account or limited access method will do.
- Keep contact/recovery information current.
- Review customer accounts for unexpected creations, suspensions or package changes.
- Secure the devices and password manager used to access WHM and rotate credentials after suspected compromise.
Important
Do not send WHM passwords or API tokens through tickets, chat transcripts or email. HostLaunch support should not need your password to investigate normal service issues.
Checks and troubleshooting
If compromise is suspected, change credentials first, preserve relevant logs/details, review downstream accounts and open an urgent support ticket.