{"id":2287,"date":"2023-01-12T05:45:00","date_gmt":"2023-01-12T11:45:00","guid":{"rendered":"https:\/\/www.supportpro.com\/blog\/?p=2287"},"modified":"2026-05-28T23:01:11","modified_gmt":"2026-05-29T05:01:11","slug":"access-whm-cpanel-without-root-password","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/access-whm-cpanel-without-root-password\/","title":{"rendered":"Access WHM\/cPanel Without Root Password"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The WHM\/cPanel can be accessed without knowing the actual password if it satisfies a single condition i.e you must have shell access to the server. If you have the shell access through SSH Keypair or using VPS nodes on the server, you can simply access the <a href=\"https:\/\/cpanel.net\/products\/\">WHM panel<\/a> without knowing the actual root password of the server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The steps to create a session to access the WHM panel for the root or any reseller accounts without a password is detailed below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">whmapi1 is the command which could be executed via Linux Shell so as to accomplish this. WHM API 1 accesses the WHM interface\u2019s features. You can make use of this API to administrate cPanel and WHM reseller accounts, perform <a href=\"https:\/\/www.supportpro.com\/serveradministration.php\">server administration tasks<\/a> and manage cPanel &amp; WHM services.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Whmapi command to create a WHM root session from the command line.<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">By executing the following command you can create a temporary root WHM session:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"># whmapi1 create_user_session user=root service=whostmgrd<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The output will be as the following:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>---------------------------\r\nCT-xxxxxxxxx-bash-4.2# whmapi1 create_user_session user=root service=whostmgrd\r\n---\r\ndata:\r\ncp_security_token: \/cpsess3736615296\r\nexpires: '1519064107'\r\nservice: whostmgrd\r\nsession: root:GSs8CH3T4YhRuk4o:create_user_session,340efbb4413cee451a9f2d115a14760c\r\nurl: https:\/\/v123456.serverxxx.com:2087\/cpsess3736615296\/login\/?session=root%3aGSs8CH3T4YhRuk4o%3acreate_user_session%2c340efbb4413cee451a9f2d115a14760c\r\nmetadata:\r\ncommand: create_user_session\r\nreason: Created session\r\nresult: 1\r\nversion: 1\r\n---------------------------<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><a class=\"lightbox\" href=\"https:\/\/www.supportpro.com\/requestquote.php\"><img fetchpriority=\"high\" decoding=\"async\" width=\"768\" height=\"124\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/whmapi-768x124.png\" alt=\"\" class=\"wp-image-2294\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/whmapi-768x124.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/whmapi-768x124-300x48.png 300w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">This is a one-time-use session to access WHM panel. You can paste the WHM URL in the browser which would in turn bypass the need to enter a root password.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Create a WHM Session for Reseller Account<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/access.jpg\" data-rel=\"penci-gallery-image-content\" ><img decoding=\"async\" width=\"960\" height=\"640\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/access.jpg\" alt=\"a person accessing a protected system\" class=\"wp-image-4064\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/access.jpg 960w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/access-300x200.jpg 300w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2018\/03\/access-768x512.jpg 768w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"># whmapi1 create_user_session user=USERNAME service=cpaneld<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Replace USERNAME with the exact cPanel username.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is a one-time-use session to access WHM\/cPanel panel. The system destroys the temporary session after 15 minutes of inactivity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In conclusion, it is possible to access the WHM\/cPanel without knowing the root password as long as you have shell access to the server. The whmapi1 command can be executed via Linux Shell to create a temporary root WHM session or a session for a reseller account. The output from the command will provide a WHM URL that can be pasted in a browser to bypass the need to enter a password. However, it is important to note that these sessions are one-time-use only and the system will automatically destroy the session after it has been used.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you require help, <a href=\"https:\/\/www.supportpro.com\/requestquote.php\">contact SupportPRO Server Admin<\/a><\/p>\n\n\n\n<div class=\"wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile is-vertically-aligned-center has-white-background-color has-background\"><div class=\"wp-block-media-text__content\">\n<p class=\"has-large-font-size wp-block-paragraph\">Facing issues? <\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Our technical support<br>engineers can solve it. <\/p>\n\n\n\n<!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-3350a795-db50-482f-9911-301930d1b1be\"><span class=\"hs-cta-node hs-cta-3350a795-db50-482f-9911-301930d1b1be\" id=\"hs-cta-3350a795-db50-482f-9911-301930d1b1be\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/3350a795-db50-482f-9911-301930d1b1be\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-3350a795-db50-482f-9911-301930d1b1be\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2725694\/3350a795-db50-482f-9911-301930d1b1be.png\"  alt=\"Contact Us today!\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2725694, '3350a795-db50-482f-9911-301930d1b1be', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code -->\n<\/div><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"904\" height=\"931\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png\" alt=\"guy server checkup\" class=\"wp-image-12943 size-full\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png 904w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-291x300.png 291w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-768x791.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-585x602.png 585w\" sizes=\"(max-width: 904px) 100vw, 904px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The WHM\/cPanel can be accessed without knowing the actual password if it satisfies a single condition i.e you must have shell access to the server. If you have the shell&hellip;<\/p>\n","protected":false},"author":4,"featured_media":13036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[1],"tags":[20,106],"class_list":["post-2287","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-miscellaneous","tag-security","tag-server"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/2287","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/comments?post=2287"}],"version-history":[{"count":16,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/2287\/revisions"}],"predecessor-version":[{"id":13037,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/2287\/revisions\/13037"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media\/13036"}],"wp:attachment":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media?parent=2287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/categories?post=2287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/tags?post=2287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}