How to log in to cPanel (and WHM), and what to try when it will not open
The five URLs, two ports and one common cause when the cPanel login page refuses to load. Plus how WHM differs, and how to reset a password without your host.
In short
cPanel is at port 2083 (https), WHM is at port 2087. If yourdomain.com/cpanel does not open, the fastest checks are the direct :2083 URL, whether the SSL certificate covers cpanel.yourdomain.com, and whether DNS for the domain still points at the host.
You paid for hosting, an email arrived with a login link, and now you want to get in. Or the shortcut you had bookmarked has stopped working. Either way this is the article most people search for at the moment they need it, so it starts with the URLs and works down to what to check when none of them open.
This is written for anyone with a cPanel account, on any host. The instructions are the same whether the account is here or at a competitor.
The URLs that actually work
cPanel manages one hosting account — files, email, databases, one domain and its addons. There are five equivalent ways to reach it. Any one that works is fine; try them in this order.
1. `https://yourdomain.com/cpanel` — the friendly URL. Requires that DNS for the domain still resolves to the host, and that the host has cPanel's auto-redirect enabled (most do).
2. `https://yourdomain.com:2083` — cPanel over the standard secure port. Works as long as DNS resolves and port 2083 is not blocked by your network.
3. `https://cpanel.yourdomain.com` — the cpanel subdomain, if the host set it up during account provisioning.
4. `https://server-hostname:2083` — the hostname the welcome email mentioned (something like `server42.yourhost.net`). Works even before DNS is fully set up, which is why hosts include it in the setup email.
5. From the hosting dashboard at the provider — most providers put a one-click cPanel login button in your customer account, which bypasses the password entirely.
For WHM the same pattern applies but the port is 2087 and the path is `/whm`. WHM is the reseller/admin panel — one WHM login manages many cPanel accounts. If you only have shared hosting you do not have WHM; that button is for reseller and VPS customers.
Webmail is not cPanel
One trap worth naming: webmail lives at a different URL on a different port, and people looking for their inbox end up on the cPanel search page instead. Webmail is at `https://yourdomain.com/webmail` or `https://yourdomain.com:2096`. Both open a chooser between the installed webmail clients (Roundcube on most hosts).
You do not need to be inside cPanel to read your email. The cPanel account and each email address have separate passwords — the address's own password is what webmail asks for.
When the login page will not load
The single most common reason is a browser SSL warning that people click through and then dismiss. cPanel's login form is served over HTTPS with a certificate that has to cover whichever hostname you visited. If you went to `https://yourdomain.com:2083` and the certificate only covers the server hostname, the browser shows a warning. That is safe to click through on a login you initiated; it is not safe to enter a password on a login you were sent to from an unexpected email.
The other common cause is DNS. If the site was recently moved between hosts, `yourdomain.com/cpanel` will resolve to the old host until propagation finishes. The fix is the direct `server-hostname:2083` URL from the welcome email, which does not depend on DNS.
Corporate and hotel networks sometimes block ports 2083, 2087 and 2096 because they are unusual. If nothing opens on those ports but ordinary websites work, that is what is happening. A phone hotspot bypasses it.
How to reset the password without your host
Two situations to separate. The cPanel account password itself is set and reset by the host, because the account belongs to a hosting plan the host owns. Every cPanel account carries a password-reset link on its login page — clicking it emails a reset link to the address on file, which is the address you signed up with. If that address is no longer accessible, only the host can help; there is no self-serve recovery.
The password on an individual email address you created inside cPanel is different. That one you reset yourself, from inside cPanel, under Email Accounts. It is also what webmail asks for. Changing the cPanel account password does not change the email addresses' passwords.
The two-factor prompt, if it appears
cPanel supports TOTP two-factor authentication — the six-digit-code kind from an app like 1Password, Bitwarden or Google Authenticator. If it was enabled on the account, the login form asks for a code after the password. Backup codes were shown once when 2FA was set up; if they are lost, the host is again the only route back in.
If nobody in your team remembers turning 2FA on and it is asking for a code anyway, check that you are on the real cPanel URL and not a phishing page. The real one is on port 2083 with a valid certificate; a phishing page is anywhere else.
What is different at HostPowr
cPanel accounts here use the standard URLs above and behave the same way as they do at any cPanel host — that portability is deliberate. From the customer portal at portal.hostpowr.com there is a Single Sign-On button that opens cPanel without asking for a password; that is the fastest route from a bookmark, because it does not depend on remembering which subdomain the site is on.
If none of the URLs open and the SSO button does the same, the support team can check the account status directly in WHM — pause, suspension, quota-exceeded and IP block all present as "login page will not load" from the visitor's side.