What Is WHM? A Beginner’s Guide to Web Host Manager

WHM (Web Host Manager) is a tool for server management. Hosting companies, resellers, and server admins use it to manage many cPanel accounts from one place. With WHM, you can create accounts, set limits, adjust server settings, improve security, and watch server performance. cPanel is made for one website owner. WHM is made for people who manage many users and websites.

This guide explains how WHM works with cPanel. It covers the main features, account management tools, and key security settings. If you manage client sites or run a hosting business, learning WHM is very useful.

What Is WHM?

Definition of Web Host Manager

WHM is the software that sits above cPanel. cPanel is the dashboard a website owner uses to manage files, email accounts, and databases for one account. WHM is the dashboard a hosting provider uses to manage all the cPanel accounts on the server.

For example, imagine you are a web designer who sells hosting. You use WHM to create a new cPanel account for each client. You choose their limits for disk space, bandwidth, email, and other features. You can also build packages such as “Starter Plan” or “Business Plan.” Your clients then log in to their own cPanel account to manage their websites.

Relationship Between WHM and cPanel

WHM and cPanel work together. They are part of the same software package, called cPanel & WHM, and they are installed on the same server.

• cPanel is for the end user. It lets a site owner manage files, databases, email, domains, backups, and security settings inside their own account.
• WHM is for the admin or reseller. It lets that person create, suspend, or remove cPanel accounts. It also lets them set account limits, change server settings, install SSL certificates for many domains, and check server health.

A simple way to think about it is this: WHM is like the office for the building manager. cPanel is like each apartment inside the building. The building manager decides who gets which unit and what is included. The tenant manages the inside of the apartment.

How WHM Helps Server Administrators Manage Hosting Accounts

WHM gives you one dashboard for account and server management.

• Account creation: Create new cPanel accounts in a few clicks. Set the username, domain, password, and limits for disk space, bandwidth, email accounts, and databases.
• Package management: Build ready-made packages such as “Shared Starter” or “Shared Business.” Then apply them to new accounts right away.
• Suspension and termination: Suspend an account for non-payment or a policy issue. Remove accounts when you need to free server resources.
• Resource monitoring: Check which accounts are using too much CPU, RAM, or disk space. This helps you fix issues before they affect other users.
• SSL management: Install SSL certificates, including free Let’s Encrypt certificates, for many domains from one place.
• DNS and nameserver setup: Create custom nameservers for your brand, such as ns1.yourbrand.com and ns2.yourbrand.com.
• Server configuration: Adjust PHP settings, Apache or Nginx settings, firewall rules, and email server settings for the whole server.

For a hosting business, WHM is a key tool. It turns a basic server into a platform you can sell as hosting. Without WHM, you would need to create users, set up virtual hosts, and manage limits by command line. That takes more time and raises the chance of mistakes.

How WHM Works

WHM works at the server level. It lets admins manage hosting accounts, assign resources, adjust server settings, and monitor performance. It acts as the main control panel for creating and managing many cPanel accounts from one place.

Server-Level Administration

WHM gives you root or admin access to the server. This means you can do high-level tasks that affect the whole machine. You usually log in through a special port, often https://yourdomain.com:2087, using root or reseller login details.

From the main dashboard, you can:

• Monitor server health – Check CPU, memory, and disk use in real time
• Manage server services – Start, stop, or restart Apache, MySQL, FTP, and other important services
• Configure security settings – Enable firewalls, brute force protection, and server-wide SSL features
• Set up nameservers – Create custom nameservers for your hosting business
• View system logs – Use logs to find errors and solve problems

You can think of WHM as the control room for your hosting server. The root user has full access. A reseller has only the permissions the root admin allows.

Account Creation and Management

One of the main jobs of WHM is to create and manage cPanel accounts. You can create one account for each domain or client. Each account gets its own login, limits, and features.

When you create an account, you enter:

• Domain name – The main domain, such as clientwebsite.com
• Username – A unique ID, usually 8 characters or fewer, with letters and numbers only
• Password – A strong password for the account owner
• Contact email – For billing and support notices
• Package – A ready-made set of resource limits

After the account is created, it is separated from other accounts. This isolation is important. If one account is hacked or gets a traffic spike, the other accounts stay safer.

You can also use WHM to:

• Suspend accounts – Turn off access for unpaid bills or policy issues
• Unsuspend accounts – Restore access when the issue is fixed
• Terminate accounts – Delete accounts for good, with or without backups
• Modify accounts – Change packages, update contact details, or adjust limits
• List all accounts – Search and review all cPanel accounts on the server

For master resellers, WHM can also support sub-reseller accounts. These users can sell hosting to their own customers.

Resource Allocation

WHM lets you control how many server resources each cPanel account can use. You do this with packages, also called hosting plans.

Here are common package limits:

When you save a package, it becomes a template. That makes new account creation much faster. You just choose the right package from a menu.

If the server uses CloudLinux, you can also set CPU and RAM limits with LVE packages. This helps stop the “noisy neighbor” problem, where one busy customer slows the server for everyone else.

You can set:

• CPU (%) – Part of a CPU core, such as 100% = 1 core and 200% = 2 cores
• Memory (pMem) – Max RAM in GB
• Entry Processes – Number of PHP or web requests at the same time
• I/O – Disk read and write speed

Security and Maintenance Functions

WHM brings security and maintenance tools into one place. That makes it easier to protect the full hosting environment.

Key security tools include:

• Security Advisor – Scans the server for common risks and suggests fixes
• cPHulk Brute Force Protection – Blocks IP addresses after many failed login attempts
• Two-Factor Authentication (2FA) – Adds another layer of login security
• Host Access Control – Limits WHM access to trusted IP addresses
• SSL/TLS management – Manage SSL certificates for all accounts in one interface

For firewall management, WHM works with ConfigServer Security & Firewall (CSF). This helps you block harmful IPs, allow trusted ones, and manage firewall rules without using the command line.

Backup and restore tools are also built in. You can set backups for:

• Single accounts
• All accounts on the server
• Remote storage, such as FTP, Amazon S3, or Google Drive

If a customer deletes files by mistake or their site gets hacked, you can restore the account from backup in a few clicks.

Update management is another important part of maintenance. WHM can help you set automatic updates for cPanel, WHM, and system packages so security fixes are applied on time.

WHM vs cPanel: What’s the Difference?

WHM and cPanel are linked, but they do different jobs. WHM handles server management and account control. cPanel lets one user manage websites, email, databases, and hosting settings inside their own account.

1 WHM Overview

WHM (Web Host Manager) is the admin control panel for the server. It is made for people who manage many hosting accounts, such as hosting companies, resellers, and server admins.

Main features of WHM:

• Create and manage hosting accounts. Make new cPanel accounts, set disk space, bandwidth, email limits, and database limits, and suspend or delete accounts when needed.
• Server configuration. Change Apache, PHP, MySQL, FTP, and mail settings for the whole server. You can also manage firewalls, SSL, and other security settings.
• Monitor server health. Watch CPU use, memory use, disk space, bandwidth, and load. You can also see which accounts use the most resources.
• Manage DNS. Use WHM with DNS clustering to manage zones for customer domains.
• Install and update software. Update PHP versions, Perl modules, and other server software from the WHM interface.
• Security tools. Use features such as CSF, ModSecurity, and SSL/TLS management.

Who uses WHM? Hosting providers, resellers, agencies, and system admins. If you manage many client websites or many separate hosting accounts, WHM is often your main tool.

2 cPanel Overview

cPanel is the control panel for one hosting account. Each account on the server gets its own cPanel login. It is built for website owners, developers, and end users who manage one site or a small group of sites.

Main features of cPanel:

• File management. Upload, edit, and delete files with File Manager. You can also manage FTP accounts.
• Email management. Create email accounts, set up forwarders and autoresponders, manage spam filters, and use webmail.
• Database management. Create and manage MySQL and PostgreSQL databases with tools such as phpMyAdmin.
• Domain management. Add addon domains, subdomains, and parked domains. Manage DNS records.
• Security tools. Install SSL certificates, manage SSH access, and set up hotlink protection.
• One-click installers. Install WordPress, Joomla, Drupal, and other apps with one click.
• Metrics and logs. View bandwidth use, error logs, access logs, and visitor statistics.

Who uses cPanel? Website owners, bloggers, freelancers, small businesses, and developers. If you manage one website or a few sites inside one account, cPanel is usually the right tool.

3 WHM and cPanel Comparison Table

Key Features of WHM

WHM includes tools for account creation, package setup, DNS management, server monitoring, security, and backups. These features make server management easier and help hosting businesses run more smoothly.

1 Create and Manage cPanel Accounts

• Add new hosting accounts. The main job of WHM is to create new cPanel accounts. You can create them one by one or in bulk. When you make an account, you enter the domain, username, password, and hosting package. The account is created right away.
• Change account settings. You can reset a client password, adjust resource limits, change the package, or update the domain name. You can also check usage details such as disk space, bandwidth, email accounts, and databases.
• Suspend and terminate accounts. If a customer does not pay, you can suspend the account. The files stay there, but access is blocked. If the problem continues, you can terminate the account and remove the files and databases for good. This helps keep server resources under control.

2 Package Management

• Create hosting plans. Packages decide how many resources each cPanel account gets. You can create many packages for different tiers such as Basic, Business, and Premium. Package settings can include disk space, bandwidth, email accounts, databases, addon domains, subdomains, FTP accounts, cron jobs, SSL, and backups.
• Set disk space and bandwidth limits. You can add clear limits to each package. You can also use “unlimited,” though fair use still matters. WHM tracks usage and can suspend accounts that go over their set limits.
• Manage resource use. On a VPS or dedicated server with CloudLinux, you can set CPU and memory limits for each account. This helps keep one customer from taking too many resources and slowing everyone else down.

3 DNS Zone Management

• Create DNS records. WHM lets you manage DNS zones for all hosted domains. You can add, edit, or remove records such as A, CNAME, MX, and TXT. You can even create DNS zones for domains that are not hosted yet.
• Edit DNS zones. You can edit zones directly or use the DNS Zone Manager in WHM. Common jobs include creating A records for subdomains, changing MX records for mail, and adding SPF or DKIM records for email security.
• Manage nameservers. You can set custom nameservers for your hosting brand, such as ns1.yourhostingcompany.com and ns2.yourhostingcompany.com. WHM helps you set them up and connect them with your domain registrar.

4 Server Monitoring

• Track resource use. WHM shows CPU use, memory use, disk space, bandwidth, and load averages. You can check this live or review past data. This helps you spot weak points and plan upgrades.
• Check server health. The Server Information area shows uptime, Apache status, mail queue, MySQL status, and service status. You can also set email alerts for major issues such as high load or failed services.
• Manage service status. You can start, stop, or restart Apache, MySQL, FTP, DNS, and email services from WHM. This is useful during troubleshooting or after a config change.

5 Security Tools

• SSL management. WHM lets you manage SSL certificates for all domains on the server. You can install free Let’s Encrypt SSL certificates automatically, or add premium certificates from another source.
• IP blocking. You can block one IP address or a full IP range from reaching the server. This is useful for stopping known attackers or users who break your rules.
• Security policies. WHM includes password strength rules, failed login protection, and SSH access control. It also works with CSF for stronger firewall control.
• Two-factor authentication. WHM supports 2FA for your login. This adds another security step. You can also require 2FA for customer cPanel accounts.

6 Backup Management

• Automated backups. WHM can back up all cPanel accounts on the server. You can schedule backups every day, week, or month. You can store them on the same server, a remote server, or cloud storage such as S3.
• Full account backups. You can create a full backup of one account. This can include files, databases, email, and DNS settings. You can generate backups when needed and save them locally or remotely.
• Restore options. WHM lets you restore a full backup, individual files, or databases. You can restore from local storage or a remote location. The process is simple and can be done in a few clicks.

Benefits of Using WHM

WHM makes server management easier by keeping account tools, resource controls, security settings, and monitoring tools in one place. It helps you work faster, scale your business, reduce manual work, and manage many cPanel accounts more easily.

Simplified Server Management

Without WHM, managing a server often means using the command line, editing config files, and remembering many system commands. WHM replaces much of that with a browser-based dashboard. You can check server load, disk use, and memory use in one place. You can restart Apache, MySQL, or FTP with a click. You can also check logs, manage SSL certificates, and change server-wide settings without opening the command line. This saves time and makes server work easier.

Better Resource Control

WHM gives you close control over server resources. You can set CPU, RAM, disk space, and bandwidth limits for each cPanel account. This helps stop one customer from slowing the whole server. You can also create packages with fixed limits and apply them right away. If a customer needs more power, you can upgrade the package in seconds. This keeps performance more stable and helps you use your server well.

Easier Client Management

WHM is very helpful when you manage many clients. From the main dashboard, you can create, suspend, or delete cPanel accounts in a few clicks. You can also move accounts to another server, reset passwords, and manage DNS zones for all customers from one place. For resellers, WHM also supports a structure where your own resellers can manage their customers without seeing your master account. This is important for growth.

Enhanced Security

Security matters for every hosting provider. WHM includes strong tools to help protect the server. You can set firewall rules, control SSH access, and install SSL certificates for many domains at the same time. WHM also works with tools such as CSF and Imunify360, which add malware scanning and stronger intrusion protection. You can also enforce password rules, disable risky PHP functions, and track login attempts across all cPanel accounts. Managing security in one place is much easier than securing each account one by one.

Scalable Hosting Operations

As your hosting business grows, WHM can grow with it. You can add more servers and manage them from one system. The Transfer Tool helps you move accounts between servers with little downtime. You can also create feature lists that turn certain cPanel functions on or off for different customer levels. This means you can start small and grow to many customers without changing your core management tool.

Who Uses WHM?

WHM is mostly used by hosting companies, reseller hosting providers, server admins, web agencies, and businesses that manage many websites. It gives them one place to control accounts, resources, and server settings.

Web Hosting Companies

Hosting providers use WHM as their main account management tool. When you buy shared hosting from a company such as Hostinger, Bluehost, or SiteGround, that company may use WHM to create and manage your account. It helps them set limits for disk space, bandwidth, CPU, and memory. It also helps them build packages, monitor server health, and manage DNS and security settings. Without WHM, managing many customer accounts would be much harder.

Hosting Resellers

Reseller hosting is a business model where you buy reseller hosting from a larger company and sell hosting under your own brand. As a reseller, you usually get access to WHM so you can create and manage customer accounts. You can set your own pricing, build your own packages, and add your branding to the control panel. WHM makes this possible without requiring you to manage the hardware itself.

Server Administrators

System admins and IT staff use WHM to manage full servers. If you run a VPS or a dedicated server, WHM gives you a visual dashboard for tasks that would otherwise need command-line work. You can create and remove accounts, watch server load, change security settings, manage DNS zones, and set up email authentication like SPF, DKIM, and DMARC. If you manage many servers, WHM can also support clustering for shared settings.

Web Development Agencies

Agencies that build and support client websites often use WHM to offer hosting too. Instead of sending clients to another host, the agency can sell hosting under its own brand. With WHM, the agency can create one hosting account per client, set the right limits, and manage everything from one dashboard. This gives the agency more control and adds recurring income.

Businesses Managing Multiple Websites

Some businesses run many websites, such as a main company site, product sites, and a blog. Managing every site with a separate login can be messy. With WHM, the business can create separate cPanel accounts for each site while managing them all from one interface. It can also set limits so one busy site does not use all the resources. This is useful for businesses that have moved past simple shared hosting.

How to Access WHM

Accessing WHM is simple once you know the right login URL and have your login details ready. Unlike cPanel, which normal site owners use, WHM uses a special port that leads to the server’s admin dashboard.

WHM Login URL Formats

WHM uses port 2087 for secure logins. You can access it by domain name or by server IP.

• Using your domain: https://yourdomain.com:2087
• Using your server IP: https://192.0.2.1:2087
  Replace that sample IP with your real server IP.

A strong security tip: always use https://. This encrypts your login details and keeps them from being sent as plain text over the internet. Your browser may show a warning if the server does not yet have a valid SSL certificate. This can happen on first login. Even so, you should install a valid SSL certificate as soon as possible.

There is also port 2086, but that is for unencrypted access. It is not a good choice for normal use because it is less secure.

Login Credentials

Unlike cPanel, which uses account-level usernames and passwords, WHM needs higher-level access.

• Root user: This is the master admin account with full server access. The username is often root, along with the password you set when the server was first configured. The root user can access any cPanel account on the server and has full control over WHM.
• Reseller users: If you have reseller hosting, you log in with your reseller username and password. Resellers can only manage the accounts they own and the tools they have permission to use.

One important note: the root password can often be used to log in to any cPanel account on the server. This is useful for admins, but it also means root access must be protected carefully.

Access Through Hosting Providers

Access to WHM depends on your hosting plan.

• VPS and Dedicated Servers: WHM is usually included if your server has a valid cPanel license. Your hosting provider gives you the login details.
• Reseller Hosting Plans: WHM is usually included so you can manage your customers’ cPanel accounts. Your provider gives you reseller-level access.
• Shared Hosting: WHM is usually not included. Shared plans normally give you only cPanel access for your own website.

If you are not sure whether your plan includes WHM, check the service details from your hosting company. Look for terms like cPanel/WHM in the feature list. Some providers also offer a Terminal feature inside WHM, but that must be enabled by the provider.

Security Considerations

Because WHM gives high-level control, security is very important.

• Use strong passwords: Go to WHM > Security Center > Password Strength Configuration. A score of 80 or higher is often recommended. Good passwords should include uppercase letters, lowercase letters, numbers, and symbols.
• Enable Two-Factor Authentication (2FA): Go to WHM > Security Center > Two-Factor Authentication to add another login step.
• Turn on brute force protection: Use cPHulk Brute Force Protection under WHM > Security Center. It can block IP addresses after many failed login attempts.
• Restrict IP access: Use Host Access Control to allow WHM access only from trusted IP addresses, such as your office IP.
• Use a firewall: ConfigServer Security & Firewall (CSF) adds extra protection around your WHM interface.
• Limit account access: To tighten security, go to WHM > Server Configuration > Tweak Settings > System and change “Accounts that can access a cPanel user account” to “cPanel User Only.”
• Bookmark the login URL: After login, save the correct secure URL so you avoid typos and always use the right address.

When you follow these steps, your WHM login is much safer. The next part explains the main WHM tasks beginners should learn first.

Essential WHM Tasks for Beginners

New users should learn the basics first. That includes creating hosting accounts, building packages, managing DNS, setting up email, watching server health, and making backups. These tasks are the foundation of daily WHM use.

Create a New Hosting Account

When a new customer buys hosting, you can create the account in WHM. Go to Account Functions → Create a New Account. Enter the customer’s domain, username, password, and email address. Choose a hosting package, or set limits by hand. Then click Create. WHM will set up the account, create the needed folders, and generate cPanel access details. The process usually takes only a few seconds.

Set Up Hosting Packages

Hosting packages, also called plans or tiers, define what each customer gets. Instead of setting limits one by one for every account, you can build packages and reuse them. Go to Packages → Add a Package. Give the package a name such as Starter, Business, or Premium. Set limits for disk space, bandwidth, email accounts, databases, and addon domains. You can also allow features such as SSL, CGI access, and shell access. Once the package is saved, you can assign it to any new account with one click.

Manage DNS Settings

DNS settings control how a domain points to your server. WHM gives you two main ways to manage DNS. For a single customer domain, you can use the DNS tools linked with cPanel. For server-level DNS work across all domains, go to DNS Functions → Edit DNS Zone. There, you can add, edit, or remove A, CNAME, MX, and TXT records. Good DNS setup is important for both website access and email delivery.

Configure Email Services

WHM has useful email tools. Under Email Functions, you can change mail delivery settings, set up spam filters such as Apache SpamAssassin, and adjust email routing. You can also manage default addresses, turn email on or off for certain domains, and configure DKIM and SPF records to improve mail delivery. If a customer sends large amounts of email, you may need to change sending limits to avoid blacklisting.

Monitor Server Performance

Watching server health helps you find issues before your customers do. Under Server Status, you can see live service status for Apache, MySQL, FTP, and more. Service Manager lets you start, stop, or restart services. Process Manager shows active processes and can help you stop a bad one. You can also use server information tools to review CPU, memory, and disk use over time. Setting alerts is a smart idea so you know when resource use gets too high.

Perform Backups

Backups are your safety net. WHM includes a backup system under Backup → Backup Configuration. You can schedule full or partial backups of home folders, databases, and config files. These can run daily, weekly, or monthly. You can store backups on another server or in cloud storage such as Amazon S3 or FTP. You can also use incremental backups to save space. It is a good idea to test backups by restoring a test account now and then.

WHM Reseller vs Root Access

In cPanel & WHM, access levels decide what a user can do. The two most common types are reseller WHM access and root WHM access. Knowing the difference helps you choose the right level for your role.

Reseller WHM Access

Limited server permissions

Resellers work inside a limited environment. They cannot change core server settings or see accounts they do not own. A reseller account is only one step below root access, so providers usually grant reseller rights with care. Resellers can view global packages only if the provider enables the right ACL, such as viewglobalpackages.

Account management capabilities

Resellers can create, suspend, terminate, and upgrade the cPanel accounts they own. They can also:

• Manage DNS zones for their domains
• Create custom hosting packages
• Access the accounts they resell without needing customer login details
• Use the List Accounts tool in WHM

Even so, resellers usually cannot restart system services or assign IP addresses unless the root admin gives them those rights.

Root WHM Access

Full server control

Root WHM access gives full admin control over the server. The root user can use every WHM feature and change global server settings. There is only one root user for each server.

Advanced administration features

Root access includes everything a reseller can do, plus the power to:

• Install SSL certificates across the server
• Restart services such as web, mail, SQL, and SSH
• Assign dedicated IP addresses
• Manage automatic backups
• Create and manage reseller accounts
• Use the Reseller Center to set account creation limits

A clear warning: giving root-level access to a reseller gives them almost the same power as the root user. Only trusted admins should get this level of access.

Common WHM Issues and Troubleshooting

Common WHM issues include login problems, DNS errors, email delivery issues, resource limit warnings, and backup failures. If you know how to spot and fix these problems, you can reduce downtime and keep customers happier.

Login Problems

Symptoms: You cannot log in to WHM on port 2087 or cPanel on port 2083. The page times out or shows a connection error.

Common causes: The cPanel/WHM service is not running. A firewall is blocking the port. Your IP address changed, and IP access rules are blocking you. SSL problems can also cause issues.

How to fix: Log in to the server by SSH on port 22. Run /etc/init.d/cpanel restart to restart cPanel services. Check the firewall and make sure ports 2087 and 2083 are open. If you use IP restrictions, add your current IP in WHM → Security Center → Host Access Control. You can also clear your browser cache.

DNS Configuration Errors

Symptoms: Websites do not load. Visitors see “Server not found.” DNS lookups show the wrong IP address.

Common causes: Nameservers are not set correctly at the domain registrar. The DNS zone file is missing. A records point to the wrong IP. DNS changes may also still be spreading.

How to fix: In WHM, go to DNS Functions → Edit DNS Zone. Check that the A records for the domain and www point to the right server IP. Make sure the registrar uses the right nameservers, such as ns1.yourdomain.com and ns2.yourdomain.com. You can test with dig yourdomain.com in the command line. You can also use online DNS lookup tools to check propagation.

Email Delivery Issues

Symptoms: Customers cannot send or receive email. Messages go to spam. SMTP errors appear.

Common causes: The server IP is blacklisted. MX records are wrong. The email service, such as Exim, is not running. Reverse DNS (PTR) is missing.

How to fix: In WHM, go to Home → Email Deliverability to look for DNS problems. Check that MX records point to the right server. Review blacklist status with tools such as MXToolbox. Ask your hosting provider to set a PTR record. Make sure Exim is running under WHM → Service Status. Add SPF, DKIM, and DMARC records to improve deliverability.

Resource Limit Warnings

Symptoms: Accounts get suspended with “Resource Limit Reached” notices. Websites load slowly or time out. WHM shows high CPU or memory use.

Common causes: A site has outgrown its plan. A script or plugin is using too much CPU. The server does not have enough RAM for the number of accounts.

How to fix: In WHM, go to Home → Account Information → View Bandwidth Usage to find heavy accounts. Use the Resource Usage tool in cPanel to find scripts that cause spikes. You may need to move the customer to a bigger plan or a VPS. If the whole server is overloaded, you may need more RAM, a faster CPU, or fewer accounts on the server.

Backup Failures

Symptoms: Backup logs show errors. Backup files are missing. Customers cannot restore their data.

Common causes: There is not enough disk space. Backup destination details are wrong. The backup config may be damaged.

How to fix: Check free space on the backup storage. In WHM, open Home → Backup → Backup Configuration and review the destination settings. Test FTP or S3 login details. Read the backup logs for the exact error. Some admins use JetBackup for a more user-friendly backup system.

WHM Best Practices

Good WHM habits include keeping software updated, using strong security, watching server resources, enabling automatic backups, and limiting user permissions. These steps help improve performance, reliability, and security.

Keep Software Updated

Old software is one of the biggest security risks. WHM helps with updates, but you still need to manage them well.

• What to update: WHM/cPanel, the operating system, PHP versions, MySQL or MariaDB, and third-party plugins
• How to update in WHM: Go to Home > cPanel > Update Preferences and set security updates to Automatic. For major version upgrades, test on a staging server first. Turn on notifications so you know when updates are ready.
• Why it matters: Attackers often search for servers that use old software. One missing security patch can put the whole server at risk.

Use Strong Security Settings

WHM has built-in security tools, but you must set them up correctly.

• Important settings: Enable cPHulk Brute Force Protection in Security Center. Turn on Two-Factor Authentication. Disable direct root login by SSH and use a sudo user instead. Change the default SSH port from 22 to another port, such as 2222. Install CSF for more firewall control.
• ModSecurity: Turn on ModSecurity with the OWASP Core Rule Set to block common attacks such as SQL injection and cross-site scripting. You can manage this under Security Center > ModSecurity™ Configuration.
• Regular audits: Use WHM Security Advisor under Home > Security Center > Security Advisor to find and fix common issues.

Monitor Server Resources Regularly

A healthy server needs enough CPU, RAM, disk space, and I/O. Regular monitoring helps you catch problems early.

• What to watch: CPU use, RAM use, free disk space, load average, and inode use
• How to monitor in WHM: Use Home > Server Status > Service Status, Apache Status, and MySQL Status. If you need more detail, you can use tools such as Nagios or Zabbix.
• Set alerts: Configure WHM to send email alerts when resources hit high levels. External uptime tools such as UptimeRobot or Pingdom can also help.

Enable Automatic Backups

Backups are the last line of defense. Without them, a hack, hardware problem, or user mistake can cause major loss.

• Configure backups in WHM: Go to Home > Backup > Backup Configuration. Choose a backup destination, such as local storage, remote FTP/SFTP, Amazon S3, or Google Cloud. Set a retention rule, such as 7 daily, 4 weekly, and 3 monthly backups. Make sure backups include accounts, databases, and config files.
• Test backups: A backup is useful only if it can be restored. Test a restore every month. WHM lets you restore one account to a test domain for checking.
• Use off-site backups: Always keep backups off-site. If the server is hacked or fails badly, local backups may also be lost.

Restrict User Permissions

Not every user should have full WHM access. Give each person only the access they really need.

• Feature Manager: Go to Home > Packages > Feature Manager to create custom feature lists. You can decide which cPanel tools each user can access.
• Reseller privileges: Use Home > Resellers > Reseller Center to manage reseller rights. Limit which packages resellers can use. Keep them away from root-level tools. Check reseller resource use from time to time.
• Creating and suspending accounts: Create new accounts from Home > Account Information > Create a New Account. Use Account Functions to suspend, terminate, or reset passwords. Review old accounts often and remove the ones you no longer need.

WHM Alternatives

There are other control panels that can do work similar to WHM. Popular options include DirectAdmin, Plesk, and InterWorx. Each has different strengths, pricing, and use cases.

DirectAdmin

DirectAdmin is a lightweight control panel known for speed and low server usage. It is often seen as a lower-cost alternative to cPanel & WHM.

Pros:

• Low resource use: Fast and lightweight
• Lower cost: Licensing is per server, not per account. The Personal Plus plan starts around $5/month, and the Standard plan for hosting providers is about $29/month
• Simple management: Covers the key hosting tools for domains, email, DNS, databases, and backups
• Branding support: Strong template system for reseller branding

Cons:

• Fewer built-in extras: It does not have all the advanced plugins found in the cPanel ecosystem
• Less polished interface: It has improved, but many users still find it less refined than cPanel or Plesk
• Linux only: It does not support Windows

Best for: Budget users, VPS hosting, and providers who want speed and lower overhead.

Plesk

Plesk is one of the most popular server control panels in the world. Many people see it as the closest alternative to WHM. It is known for its cleaner interface and support for more than one operating system.

Pros:

• Cross-platform: Supports both Linux and Windows
• Modern interface: Clean and easy to use
• Developer features: Includes strong WordPress Toolkit, Git tools, and Docker support
• Flexible licensing: Pricing is based on domains instead of accounts, which can help in smaller setups. Entry plans start around $12/month

Cons:

• Heavier on resources: It often uses more server resources than DirectAdmin
• Cost can rise: Some advanced security and premium features cost extra

Best for: Developers, agencies, and hosts that manage Windows and Linux servers or many WordPress sites.

InterWorx

InterWorx is a server control panel aimed more at enterprise and high-scale hosting. It is owned by Liquid Web and is often used in setups with many servers.

Pros:

• Built to scale: Good for many servers and load-balanced clusters
• Two-panel design: Uses NodeWorx for server admins and SiteWorx for site users, similar to the WHM/cPanel split
• Fixed pricing: Around $7.50 for VPS and $20 for Dedicated, which can be cost-effective at scale
• Security support: Offers real-time patches

Cons:

• Steeper learning curve: The interface is not as easy for new users, and community support is smaller
• Limited OS support: Mainly built for Red Hat-based Linux systems such as CentOS, AlmaLinux, and Rocky Linux

Best for: Larger hosting providers that want to scale while keeping costs predictable.

Conclusion

WHM (Web Host Manager) is a very useful tool for managing hosting servers well. It gives you central control over cPanel accounts, server resources, security settings, DNS, backups, and performance. That makes it valuable for hosting providers, resellers, developers, and server admins.

In this guide, we looked at how WHM makes account management easier, automates common tasks, improves security, and supports growth. Learning WHM can help you build skills in hosting, server management, and client website support.

For beginners, the best way to learn is to practice. Create test accounts. Build hosting packages. Edit DNS zones. Explore security settings. Run backups in a safe test setup. With regular use, WHM becomes a strong tool for running secure, stable, and professional hosting services.