{"id":177,"date":"2025-03-27T10:11:59","date_gmt":"2025-03-27T08:11:59","guid":{"rendered":"https:\/\/www.24x7serverguard.com\/blog\/?p=177"},"modified":"2025-03-27T10:11:59","modified_gmt":"2025-03-27T08:11:59","slug":"how-to-disable-cpanel-login-credentials-for-ftp-access","status":"publish","type":"post","link":"https:\/\/www.24x7serverguard.com\/blog\/ftp-issues\/how-to-disable-cpanel-login-credentials-for-ftp-access\/","title":{"rendered":"How to Disable cPanel Login Credentials for FTP Access?"},"content":{"rendered":"\n

Why Disable Default cPanel Login for FTP?<\/strong><\/p>\n\n\n\n

By default, cPanel login credentials can be used to access FTP<\/strong>, which poses a security risk. Hackers can exploit this vulnerability to upload malicious scripts. To enhance security, you can disable FTP access for cPanel users<\/strong> by following the steps below.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Steps to Disable FTP Access for cPanel Users<\/strong><\/h3>\n\n\n\n
    \n
  1. Open the ftpupdate File<\/strong>
    Access your server as the root user and edit the ftpupdate<\/code> script: <\/li>\n<\/ol>\n\n\n\n

    vi \/usr\/local\/cpanel\/bin\/ftpupdate<\/mark><\/p>\n\n\n\n

    2. Locate the Relevant Code<\/strong><\/p>\n\n\n\n

    If you’re using an older cPanel version<\/strong>, navigate to line 189<\/strong>.<\/p>\n\n\n\n

    If you have an updated cPanel version<\/strong>, the code is usually found at line 211<\/strong>.<\/p>\n\n\n\n

    3. Comment Out the FTP Credentials Line<\/strong>
    Locate the following line:<\/p>\n\n\n\n

    print FTPASS join( ‘:’, $system_user, $entry->[1], $entry->[2], $entry->[3], $entry->[6], $entry->[7], $entry->[8] ) . “\\n”;<\/mark><\/p>\n\n\n\n

      <\/ol>\n\n\n\n

      Modify it by commenting it out:<\/p>\n\n\n\n

      print FTPASS join( ‘:’, $system_user, $entry->[1], $entry->[2], $entry->[3], $entry->[6], $entry->[7], $entry->[8] ) . “\\n”;<\/mark><\/p>\n\n\n\n

      4. Run the FTP Update Command<\/strong>
      Apply the changes by executing:<\/p>\n\n\n\n

      \/usr\/local\/cpanel\/bin\/ftpupdate<\/mark><\/p>\n\n\n\n

      <\/p>\n\n\n\n

      Outcome:<\/strong><\/h3>\n\n\n\n

      After completing these steps, the default cPanel login credentials will no longer work for FTP access<\/strong>, reducing the risk of unauthorized file uploads.<\/p>\n\n\n\n

      Additional Security Recommendations:<\/strong><\/h3>\n\n\n\n
        \n
      • Use SFTP (Secure FTP)<\/strong> instead of FTP for enhanced security.<\/li>\n\n\n\n
      • Create separate FTP accounts<\/strong> with limited access.<\/li>\n\n\n\n
      • Implement strong passwords<\/strong> and IP restrictions<\/strong> for FTP users.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

        Why Disable Default cPanel Login for FTP? By default, cPanel login credentials can be used to access FTP, which poses a security risk. Hackers can exploit this vulnerability to upload malicious scripts. To enhance security, you can disable FTP access for cPanel users by following the steps below. Steps to Disable FTP Access for cPanel […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[122,118,124,120,119,116,123],"class_list":["post-177","post","type-post","status-publish","format-standard","hentry","category-ftp-issues","tag-24x7-server-guard","tag-disable-ftp-access-in-cpanel","tag-dxb","tag-restrict-cpanel-ftp-login","tag-secure-cpanel-ftp","tag-server-management","tag-server-support"],"_links":{"self":[{"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/posts\/177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/comments?post=177"}],"version-history":[{"count":1,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/posts\/177\/revisions"}],"predecessor-version":[{"id":178,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/posts\/177\/revisions\/178"}],"wp:attachment":[{"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/media?parent=177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/categories?post=177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.24x7serverguard.com\/blog\/wp-json\/wp\/v2\/tags?post=177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}