If your server is hacked or stolen your accounts password, you can use the following script to change all the cpanel accounts password. Change password via WHM and scripts.

WHM >> Account Functions >> Force Password Change then Select All,

then Submit



Change multiple accounts password via the following script /scripts/realchpass

The syntax is

# /scripts/realchpass username password


Change multiple accounts password

Method : 1

Use the following shell script to change all the cpanel account password randomly.

vi /root/passch.sh

#! /bin/bash
ls -1 /var/cpanel/users | while read user; do
echo “$user $pass” >> new-pass.txt
/scripts/realchpass $user $pass

Save and excute that file.

chmod +x /root/passch.sh

sh /root/passch.sh

You can use random string generate scripts like the following generate passwords.

pass=`date | md5sum | head -c16 | xargs`
pass=`openssl rand -base64 128 | head -c16 | xargs`

In some cases when executing /scripts/realchpass script will showing the following error.

ERROR: /usr/local/cpanel/scripts/realchpass
Invocation changes only the system
password and does not have any effect
on other services associated with your
cPanel account, including FTP, SSH,
WebDAV, and FrontPage.  It is strongly
encouraged for you to change the
password via the WHM & cPanel
interface. You can force a password
change through this script by setting
the environment variable

You can fix the above error by running the following command. After that execute the script again.


Method : 2

Another script to change password.

#! /bin/bash
for i in `awk -F: '{print $2}' /etc/trueuserdomains`
tmp=`mkpasswd -l 8`
/scripts/chpass $i $tmp
echo "$i $tmp" >> newpasswds


Get Free cPanel Knowledge Base

Thank you for subscribing.

Something went wrong.

5.00 avg. rating (97% score) - 2 votes