Last updated: October 6, 2026
Quick answer: cPanel is a Linux-based web hosting control panel that lets you manage websites, email accounts, domains, databases, files, SSL certificates, and backups from a graphical dashboard in your browser. Your hosting provider installs it on the server, and you log in at yourdomain.com/cpanel or on port 2083. Its companion tool, WHM (WebHost Manager), handles server-level administration.
If you have ever bought shared hosting, you have probably seen a cPanel login screen in your welcome email. So, what is cPanel exactly, and why do so many hosts still build their plans around it 30 years after its first release?
This guide answers that question in plain language. You will learn how cPanel works, how to log in, how to complete the 12 tasks most site owners need, what cPanel costs in 2026, what the new AI Assistant and Meridian interface change, and what the 2026 security incidents mean for your website. If you are new to hosting in general, start with our guide on what web hosting is and how it works, then come back here.
Key takeaways: what is cPanel in one minute
- cPanel gives you a point-and-click interface for jobs that would otherwise require Linux commands.
- cPanel manages one hosting account. WHM manages the whole server and every account on it.
- A single-account cPanel Solo license costs $29.99 per month in 2026, double the 2021 price.
- On shared hosting, your host pays the license. On a VPS or dedicated server, you usually pay it.
- cPanel now ships an optional AI Assistant inside its new Meridian theme, but your host decides whether you get it.
- A critical 2026 login bypass (CVE-2026-41940) makes patch speed one of the most important things to check in a cPanel host.
What Is cPanel?
cPanel is web hosting control panel software that turns server administration into a visual dashboard. Instead of connecting over SSH and typing commands to create a mailbox or a database, you click an icon, fill in a form, and cPanel runs the commands for you.
The software has a long history. According to cPanel’s Wikipedia entry, J. Nick Koston created it on March 21, 1996, as the control panel for Speed Hosting, a now-defunct host. cPanel 3 arrived in 1999 and introduced automatic updates and WHM. In 2018, a group led by Oakley Capital agreed to acquire the company, and it became part of WebPros, the same group that owns Plesk and WHMCS. CVC Capital Partners took majority ownership of WebPros in December 2019.
Today cPanel, L.L.C. still develops the product from Houston, Texas, and ships a new major version every few months. Version 132 arrived on September 30, 2025, version 134 followed in January 2026, and version 136 is the current major release.
cPanel at a Glance
| Detail | cPanel in 2026 |
|---|---|
| Developer | cPanel, L.L.C. (a WebPros company) |
| First release | March 21, 1996 |
| Current major version | 136 |
| Supported operating systems | AlmaLinux 8, 9, 10; CloudLinux 8, 9, 10; Ubuntu 24.04 LTS |
| Windows support | No (Linux only) |
| Default login | yourdomain.com/cpanel or port 2083 (SSL) |
| Server admin tool | WHM on port 2087 (SSL) |
| Lowest license price | $29.99 per month (Solo, 1 account) |
| AI features | AI Assistant, AI App Hosting, Nova for WordPress (host-enabled) |
How Does cPanel Work?
cPanel sits between you and the Linux server. When you click “Create” in the Email Accounts tool, cPanel tells the mail server to add a mailbox, sets the quota, and writes the password. You never touch the underlying configuration files.
A typical cPanel server runs in four layers:
- Operating system: AlmaLinux, CloudLinux, or Ubuntu.
- Services: a web server (Apache, NGINX, or LiteSpeed), the Exim mail server, Dovecot for mailbox access, MariaDB or MySQL for databases, and a DNS server.
- cPanel and WHM: the control layer. A service daemon called cpsrvd handles logins and serves both interfaces.
- You: the person clicking buttons in a browser.
This design explains why cPanel feels the same at every host. The branding and enabled features change, but the layout, tool names, and workflows stay consistent, so the skills you learn at one host carry over to the next.
cPanel vs WHM: What Is the Difference?
People often use “cPanel” to mean both tools, but they serve different users. Every cPanel license includes both interfaces.
| cPanel | WHM (WebHost Manager) | |
|---|---|---|
| Who uses it | Website owners | Hosting providers, resellers, VPS owners |
| Scope | One hosting account | The entire server and all accounts |
| Secure port | 2083 | 2087 |
| Typical tasks | Email, files, databases, domains, SSL, backups | Create accounts, set packages, install software, update the server, configure security |
| Root access | No | Yes (for server owners) |
On shared hosting you only see cPanel. Buy a VPS with a cPanel license, or a reseller plan, and you get WHM as well.
cPanel Ports and Login URLs
cPanel’s official firewall documentation lists the ports each interface uses. Always use the SSL versions.
| Interface | Standard port | SSL port | Shortcut URL |
|---|---|---|---|
| cPanel | 2082 | 2083 | yourdomain.com/cpanel |
| WHM | 2086 | 2087 | yourdomain.com/whm |
| Webmail | 2095 | 2096 | yourdomain.com/webmail |
cPanel Statistics and Market Facts for 2026
Most articles repeat the old claim that cPanel “powers most websites” without a source. Here is what the measurable data actually shows. For broader numbers on the industry, see our web hosting statistics roundup.
- About 650,000 exposed instances. The Shadowserver Foundation counted roughly 650,000 cPanel and WHM instances reachable from the internet during its 2026 scans, and Rapid7 cited Shodan data showing about 1.5 million (Help Net Security). Because one server can host hundreds of accounts, the number of websites behind those servers runs far higher.
- Low detectable share, by design. W3Techs measured cPanel at 2.1% of web panels it can identify in May 2026, against 51.2% for Hostinger’s hPanel and 43.9% for Plesk. W3Techs can only count panels that leave a footprint on the public website, and most cPanel servers stay hidden behind a host’s own branding, so this figure understates real usage.
- Cloudflare is the default companion. Among cPanel sites with a known reverse proxy, 75.3% use Cloudflare.
- Seven straight years of price increases. The January 2026 increase was the seventh annual round since cPanel switched to per-account pricing in 2019.
- The Solo license doubled in five years. It cost $15 per month in 2021 and costs $29.99 in 2026.
- 44,000 compromised servers. Shadowserver tied at least 44,000 unique IP addresses to compromised cPanel systems after the CVE-2026-41940 exploitation wave.
How to Access and Log In to cPanel
You can reach your cPanel dashboard in four ways:
- Use your host’s dashboard. Most hosts add a “Login to cPanel” button in the client area that signs you in automatically. This is the easiest method.
- Add /cpanel to your domain. Visit
https://yourdomain.com/cpanel. The server redirects you to the secure login page. - Use the port directly. Visit
https://yourdomain.com:2083. - Use the server IP or hostname. If your domain does not point to the server yet, use the address from your welcome email, such as
https://server123.examplehost.com:2083.
Enter the username and password from your welcome email, then click Log in.
When the cPanel Login Fails
- Wrong password: reset it from your host’s client area. Repeated failures can trigger cPHulk, cPanel’s brute-force protection, which temporarily blocks your IP.
- Page does not load: your office or school network may block port 2083. Switch to the
/cpanelURL, which works over standard HTTPS. - New domain not working: DNS changes can take up to 48 hours to spread. Log in with the server hostname in the meantime.
- Certificate warning: you probably used the IP address. Use the server hostname instead.
A Tour of the cPanel Dashboard
cPanel ships two user interfaces. Jupiter is the long-standing default, with tools grouped into sections on a single home page. Meridian is the new interface, which cPanel describes as goal-oriented, with six task-focused workspaces, guided onboarding, and built-in AI tools. Switching themes only changes the presentation; your data stays the same.
In Jupiter, you will find these sections:
| Section | What you use it for | Key tools |
|---|---|---|
| Mailboxes and mail settings | Email Accounts, Forwarders, Autoresponders, Email Deliverability, Spam Filters | |
| Files | Site files and backups | File Manager, Backup, Backup Wizard, Disk Usage, FTP Accounts |
| Databases | Data for WordPress and other apps | MySQL Databases, Database Wizard, phpMyAdmin, Remote MySQL |
| Domains | Sites and DNS | Domains, Redirects, Zone Editor, Dynamic DNS |
| Metrics | Traffic and errors | Visitors, Errors, Bandwidth, Awstats, Resource Usage |
| Security | Protection | SSL/TLS, SSL/TLS Status, IP Blocker, Two-Factor Authentication, Hotlink Protection |
| Software | Apps and PHP | WP Toolkit, MultiPHP Manager, MultiPHP INI Editor, Softaculous (if your host adds it) |
| Advanced | Developer tools | Cron Jobs, Terminal, Indexes, Error Pages |
The search bar at the top of the home page finds any tool by name, which saves time once you know what you need.
How to Use cPanel: 12 Essential Tasks Step by Step
These steps follow the Jupiter interface. Your host may hide some tools or add its own, but the names below match standard cPanel.
1. Install WordPress With WP Toolkit
Every cPanel plan includes WP Toolkit, so most hosts give you one-click WordPress installs.
- Open WP Toolkit under Software or Domains.
- Click Install.
- Choose your domain and leave the directory field empty to install on the main domain.
- Set an admin username, a strong password, and your email address.
- Click Install and wait about a minute.
WP Toolkit also handles updates, staging copies, cloning, and security hardening. Some hosts offer Softaculous instead, which works in a similar way.
2. Create a Professional Email Account
- Open Email Accounts and click Create.
- Pick the domain, enter a username such as
hello, and set a password. - Set a storage limit or leave it unlimited if your plan allows.
- Click Create.
You can read mail through Webmail (Roundcube) or connect the account to Outlook, Apple Mail, or Gmail using the settings from Connect Devices. Then open Email Deliverability and repair any SPF or DKIM records it flags, so your messages land in inboxes instead of spam folders.
3. Upload and Edit Files With File Manager
- Open File Manager.
- Go to
public_html, the folder that holds your main website. - Click Upload to add files, or select a ZIP file and click Extract.
- Right-click any file to edit it, rename it, or change permissions.
Keep folders at permission 755 and files at 644. Wrong permissions cause many “500 Internal Server Error” messages. Version 132 also added a new HTML editor (beta) built on Jodit inside File Manager.
4. Create a MySQL Database and User
- Open Database Wizard.
- Name the database and click Next Step.
- Create a database user with a generated password and save the password somewhere safe.
- Tick ALL PRIVILEGES and click Next Step.
Use phpMyAdmin to browse tables, run queries, or import an SQL backup.
5. Add a Domain or Subdomain
- Open Domains and click Create a New Domain.
- Enter the domain (for example,
shop.yourdomain.comoranothersite.com). - Untick “Share document root” if the new domain needs its own website files.
- Click Submit.
For a brand-new domain, update its nameservers at your registrar to the ones your host provides. Hosts on version 132 or later can also provision temporary domains, so you can build a site before the real domain is ready.
6. Install a Free SSL Certificate
Most hosts enable AutoSSL, which issues and renews free domain-validated certificates automatically.
- Open SSL/TLS Status.
- Select your domains and click Run AutoSSL.
- Wait a few minutes and check for green padlock icons.
If AutoSSL fails, your domain usually points somewhere else, or a proxy such as Cloudflare blocks the validation request. Version 136 merged three separate SSL screens into one SSL/TLS page and added support for short-lived certificates renewed through the ACME protocol.
7. Back Up and Restore Your Website
- Open Backup or Backup Wizard.
- Click Download a Full Account Backup for a complete archive, or download your home directory and each database separately.
- Store a copy off the server, such as on your computer or cloud storage.
To restore, use the restore options in the same tool. Many hosts also add JetBackup, which gives you daily snapshots you can restore with a click. Never rely on the host’s backups alone.
8. Change Your PHP Version
- Open MultiPHP Manager.
- Tick your domain.
- Choose a PHP version from the dropdown and click Apply.
Version 136 now labels end-of-life and hardened PHP versions clearly, so you can spot outdated versions at a glance. Pick the newest version your plugins and themes support. On CloudLinux servers you may see Select PHP Version instead.
9. Edit DNS Records With Zone Editor
- Open Zone Editor and click Manage next to your domain.
- Click Add Record and choose A, CNAME, MX, or TXT.
- Enter the values from the service you are connecting (for example, Google Workspace MX records or a verification TXT record).
- Click Save Record.
Zone Editor only matters when your domain uses the host’s nameservers. If you use Cloudflare DNS, edit records there instead.
10. Schedule Cron Jobs
- Open Cron Jobs.
- Pick a schedule from Common Settings, such as once per hour.
- Enter the command, for example
/usr/local/bin/php /home/username/public_html/wp-cron.php. - Click Add New Cron Job.
Many WordPress site owners disable the built-in WP-Cron and use a real cron job like this to make scheduled posts and emails more reliable.
11. Monitor Traffic and Resource Usage
Open Visitors for recent hits, Errors for the latest error log entries, and Bandwidth for data transfer. On CloudLinux servers, Resource Usage shows whether your account hits CPU, memory, or process limits, which often explains slowdowns that look like “the host is slow.”
12. Turn On Two-Factor Authentication
- Open Two-Factor Authentication under Security.
- Click Set Up Two-Factor Authentication.
- Scan the QR code with an authenticator app.
- Enter the six-digit code and save.
This takes two minutes and blocks most password-based attacks on your account.
cPanel AI and Meridian: What Changed in 2026
2026 brought the biggest change to the cPanel experience in years. cPanel announced general availability of cPanel AI, a set of AI features built into cPanel and WHM. Here is what each piece does.
- AI Assistant. An embedded chat panel that opens from an “Ask AI” button in the bottom-right corner of Meridian. Version 1.0.0 launched in July 2026. It answers questions and looks up information about your account by default. If your host allows it, the assistant can also make simple changes, such as creating an email account, but only after you approve each one.
- Faster approvals. According to the AI Assistant release notes, version 1.9.1 (September 10, 2026) groups a multi-step request into one ordered plan on a single approval card and extends the approval window from five minutes to 24 hours.
- AI App Hosting. A Node.js engine for deploying apps built with AI coding tools such as Claude, Lovable, Bolt, v0, and Replit. If you build JavaScript apps often, compare it with dedicated Node.js hosting providers.
- MCP integration. Lets compatible AI platforms connect to cPanel through the Model Context Protocol for diagnostics and troubleshooting under the host’s control.
- Nova for WordPress. An AI-assisted generator that drafts WordPress sites.
- Sitejet AI. The Sitejet Builder includes an AI website generator and works in both Jupiter and Meridian. If drag-and-drop builder terms confuse you, our website builder glossary explains them.
Important: the AI Assistant only works in Meridian and requires your host to enable it. If you do not see the Ask AI button, your host has not switched it on.
What Is New in cPanel & WHM Version 136
cPanel announced version 136 on May 27, 2026. The release matters most to server owners, but several changes reach regular users too.
- Firewall updates through cPanel. ConfigServer Security & Firewall (CSF) now updates through cPanel’s signed update pipeline, and existing installs migrate automatically.
- Short-lived SSL certificates. Native support for shorter certificate lifespans, with automatic issuance and renewal through ACME for all SSL types, including paid certificates.
- One SSL page. Three separate SSL interfaces now live on a single SSL/TLS management page.
- Server-wide PHP error logging. Admins can set PHP error logging for every account from one WHM screen.
- Log retention controls. New settings show how much disk space web server logs use and how long they stay.
- MariaDB 11.8 support. Available in WHM’s database upgrade tool.
- Full SSO logout. Signing out of a WebPros account now ends the global single sign-on session.
- Last stop for Ubuntu 22.04. Version 136 is the final release that supports Ubuntu 22.04 LTS. Servers must move to Ubuntu 24.04 LTS through the ELevate upgrade path before the next version.
cPanel Pricing in 2026: What It Really Costs
cPanel charges by the number of cPanel accounts on a server, not by the server itself. Here are the official tiers, which cPanel’s support center lists as valid from December 16, 2025:
| Tier | Accounts | 2021 price | 2025 price | 2026 price | Change since 2021 |
|---|---|---|---|---|---|
| Solo | 1 | $15.00 | $26.99 | $29.99 | +100% |
| Admin | Up to 5 | $22.00 | $32.99 | $35.99 | +64% |
| Pro | Up to 30 | $32.25 | $46.99 | $53.99 | +67% |
| Premier | Up to 100 | $48.50 | $65.99 | $69.99 | +44% |
| Extra accounts (Premier) | Each above 100 | n/a | $0.45 | $0.49 | n/a |
All prices are per month. 2021 prices come from cPanel’s 2021 pricing announcement.
WP Squared, cPanel’s WordPress-focused edition, sits above these tiers at $84.99 per month and bundles CloudLinux, Imunify360, AccelerateWP, and Patchstack, according to the cPanel pricing page.
What These Numbers Mean for You
- Shared hosting customers do not pay the license directly. The host absorbs it, but annual increases often appear later as higher renewal prices.
- VPS owners feel the full cost. A $10 VPS plus a $29.99 Solo license means the control panel costs three times more than the server.
- Agencies and resellers pay more as they grow. A Premier server with 300 accounts costs $69.99 plus 200 extra accounts at $0.49, or $167.99 per month for the license alone.
- Before 2019, a cPanel license cost about $20 per month for unlimited accounts, according to ServerPoint.
Large partners got a better deal in 2026. WebHosting.Today reported that cPanel raised the discount for resellers spending over $2,000 per month from 6% to 16%, while smaller partners lost their previous 2% discount.
If you want cPanel on your own server, compare license-inclusive plans among the best VPS hosting providers before you buy a separate license. If the rising fees push you to leave, our list of the best cPanel alternatives covers free and low-cost panels.
What Is cPanel Hosting?
cPanel hosting is any hosting plan that includes cPanel as the control panel. It comes in five main forms:
| Hosting type | Who holds the license | Your license cost | WHM access | Best for |
|---|---|---|---|---|
| Shared hosting | Host | Included | No | Blogs, small business sites |
| Reseller hosting | Host | Included | Limited WHM | Freelancers and agencies selling hosting |
| VPS hosting | Usually you | $29.99+ per month | Full WHM | Growing sites, developers |
| Dedicated server | Usually you | $69.99+ per month | Full WHM | Large hosts, high-traffic sites |
| Managed WordPress (WP Squared) | Host | Included | Host only | WordPress-only businesses |
If you want someone else to handle updates, security, and patching, look at managed hosting providers that include cPanel or a comparable panel.
How to Tell If Your Host Uses cPanel
- Visit
yourdomain.com/cpanel. A cPanel login page confirms it. - Check your welcome email for “cPanel” or a link ending in
:2083. - Look for the cPanel logo after signing in through your host’s client area.
Many popular hosts now skip cPanel. Hostinger uses its own hPanel (see our Hostinger review), and Cloudways uses its own management platform built for cloud servers (see our Cloudways review).
What to Look for in a cPanel Host
- A current cPanel version. Ask which version the host runs. Anything older than the supported releases signals slow maintenance.
- Fast security patching. Ask how quickly the host applied the April 28, 2026 patch for CVE-2026-41940.
- CloudLinux and Imunify360. CloudLinux isolates accounts from each other, and Imunify360 adds malware scanning.
- LiteSpeed web server. Often faster than Apache for WordPress.
- JetBackup or daily backups. Self-service restores save hours.
- Honest renewal pricing. License increases tend to show up at renewal time.
Our ranking of the best web hosting providers covers hosts that meet these criteria.
cPanel Security: What the 2026 Vulnerabilities Mean for You
2026 tested cPanel’s security reputation harder than any year before it.
CVE-2026-41940 (CVSS 9.8). This authentication bypass in the login flow let unauthenticated attackers take over cPanel and WHM without a password. It affected every version after 11.40. Researchers found exploitation dating back to at least February 23, 2026, two months before cPanel published its advisory and patch on April 28, 2026. The US Cybersecurity and Infrastructure Security Agency added the flaw to its Known Exploited Vulnerabilities catalog and gave federal agencies until May 3 to patch. CyberInsider reported Shadowserver data showing at least 44,000 compromised systems, and some attackers deployed “Sorry” ransomware to encrypt site data.
Three more flaws in May. On May 8, 2026, cPanel patched CVE-2026-29201 (arbitrary file read, CVSS 4.3), CVE-2026-29202 (code injection in the create_user API, CVSS 8.8), and CVE-2026-29203 (unsafe symlink handling, CVSS 8.8). Security Affairs noted that the last two could let a basic hosting account escalate privileges.
What Website Owners Should Do
- Ask your host whether it patched CVE-2026-41940 and when.
- Turn on two-factor authentication in cPanel (task 12 above).
- Keep an off-server backup of your files and databases.
- Ignore emails that claim to be cPanel security advisories and ask you to log in through a link. Phishing campaigns have used fake cPanel security advisories to steal logins.
- Change your cPanel password if your host confirms a compromise.
What VPS and Server Owners Should Do
- Check your version with
/usr/local/cpanel/cpanel -V. - Update immediately with
/scripts/upcp. - Run cPanel’s published detection script to check session files for signs of compromise.
- Restrict ports 2083 and 2087 to trusted IP addresses where possible.
- Confirm CSF is active and managed through cPanel on version 136.
cPanel Pros and Cons
| Pros | Cons |
|---|---|
| Easiest panel for beginners to learn | License costs rise every year |
| Same interface at every host | Linux only, no Windows support |
| Huge library of tutorials and forum answers | Per-account pricing punishes agencies at scale |
| WP Toolkit included on every plan | Uses more server resources than lightweight panels |
| Strong ecosystem (CloudLinux, Imunify360, JetBackup) | 2026 security incidents exposed slow-patching hosts |
| New AI Assistant and Node.js app hosting | AI features depend on your host enabling them |
| Easy migrations between cPanel hosts | Older Jupiter layout feels crowded to new users |
cPanel vs Plesk vs hPanel vs DirectAdmin vs CyberPanel
| Panel | Cost model | Operating systems | Best for | Main trade-off |
|---|---|---|---|---|
| cPanel | Paid, per account | Linux | Shared hosting, resellers, beginners | Rising license fees |
| Plesk | Paid, per server tier | Linux and Windows | Windows sites, developers | Smaller tutorial ecosystem |
| hPanel | Free with Hostinger | Hostinger only | Hostinger customers | Not available elsewhere |
| DirectAdmin | Paid, lower cost | Linux | Budget VPS owners | Fewer integrations |
| CyberPanel | Free, open source | Linux (OpenLiteSpeed) | WordPress speed on a budget | Less polish, community support |
Hostinger customers who want something different can check our list of hPanel alternatives. For a full ranking with pricing, read our guide to the best hosting control panels.
Common cPanel Problems and How to Fix Them
| Problem | Likely cause | Fix |
|---|---|---|
| Locked out after failed logins | cPHulk blocked your IP | Wait for the block to expire or ask your host to whitelist your IP |
| “Disk quota exceeded” | Old backups, logs, or email | Use Disk Usage to find large folders and delete old backup files |
| 500 Internal Server Error | Bad .htaccess, wrong permissions, or PHP version | Rename .htaccess, set files to 644, try another PHP version |
| Emails land in spam | Missing SPF, DKIM, or DMARC | Run Email Deliverability and repair the records |
| AutoSSL fails | DNS points elsewhere or a proxy blocks validation | Point DNS to the server or pause the proxy and rerun AutoSSL |
| Site shows old content | Browser cache or DNS propagation | Clear cache, check DNS with a propagation tool |
| WordPress suddenly slow | Account hitting CPU or memory limits | Check Resource Usage, add caching, or upgrade the plan |
Is cPanel Worth It in 2026?
For most beginners on shared hosting, yes. You get a familiar, well-documented interface at no extra cost, plus WP Toolkit, free SSL, and easy backups. Learning cPanel also makes it easy to switch hosts later.
For VPS owners running a single site, the answer is less clear. Paying $29.99 per month for a Solo license on a cheap server rarely makes financial sense when free panels exist. Agencies with dozens of client sites should calculate the per-account cost carefully, and teams that prefer scalable infrastructure may get more value from cloud hosting providers with their own dashboards.
Whatever you choose, pick a host that patches quickly. The 2026 vulnerabilities showed that the host’s maintenance habits matter as much as the panel itself.
Frequently Asked Questions About cPanel
What is cPanel used for?
What is cPanel used for day to day? Site owners use it to install WordPress, create email accounts, upload files, manage databases, add domains, install SSL certificates, change PHP versions, and run backups, all from one browser dashboard.
Is cPanel free?
No. cPanel is paid software, with licenses starting at $29.99 per month in 2026. Shared hosting plans include it at no separate charge because the host pays the license. cPanel offers a free trial for people who want to test it on their own server.
What is the difference between cPanel and WHM?
cPanel manages a single hosting account, including its websites, email, and databases. WHM (WebHost Manager) manages the whole server, including creating cPanel accounts, setting packages, and applying updates. Every cPanel license includes both.
How do I log in to cPanel?
Go to yourdomain.com/cpanel or yourdomain.com:2083 and enter the username and password from your hosting welcome email. Most hosts also offer a one-click login button in their client area.
Can I use cPanel on Windows servers?
No. cPanel only runs on Linux, currently AlmaLinux, CloudLinux, and Ubuntu 24.04 LTS. You can access it from any Windows, Mac, or mobile browser. If you need Windows hosting, Plesk supports Windows servers.
What is the default cPanel port?
cPanel uses port 2083 for secure (SSL) access and 2082 for unencrypted access. WHM uses 2087 and 2086, and Webmail uses 2096 and 2095. Always use the SSL ports.
Can I install cPanel on my own VPS?
Yes. You need a fresh server running a supported operating system, root access, and a license. Run cPanel’s installation script, which can take an hour or more, then configure the server in WHM.
Is cPanel safe to use after the 2026 vulnerabilities?
Yes, as long as your server runs a patched version. cPanel fixed CVE-2026-41940 on April 28, 2026, and three further flaws on May 8, 2026. Confirm your host applied both updates, turn on two-factor authentication, and keep off-server backups.
Does cPanel have AI features?
Yes. cPanel AI includes an AI Assistant inside the Meridian interface, AI App Hosting for Node.js apps, and Nova for WordPress site generation. Your host must enable the AI Assistant, and it only makes changes after you approve them.
Why do some hosts not use cPanel?
Rising license fees push many large hosts to build their own panels. Hostinger uses hPanel, and cloud platforms such as Cloudways use custom dashboards. Custom panels let hosts control costs and design features around their own infrastructure.
Final Thoughts
So, what is cPanel in 2026? It is still the most familiar way to run a website without touching the command line, now with an AI Assistant, a new Meridian interface, and modern SSL automation. It also costs more every year, and the 2026 security incidents proved that your host’s patching speed matters as much as the panel.
Start with the 12 tasks in this guide, turn on two-factor authentication today, and keep an off-server backup. Those three habits cover most of what a cPanel site owner needs.
