Cannot Log In to cPanel or the Client Area? Password Resets, 2FA and Lockouts

Cloudesta uses two separate logins. The client area at cloudesta.com/login (email and password) handles billing, services and tickets. cPanel at https://example.com:2083 (cPanel username and password) manages your website. Reset the client area password from the "Forgot password" page. Reset the cPanel password from your hosting service page in the client area. If a login page will not load at all, your IP address is probably blocked by the firewall rather than your password being wrong.

This guide covers both logins, two-factor authentication (2FA) recovery, firewall lockouts, browser problems and suspended accounts. It applies to shared cPanel hosting customers and to VPS owners running cPanel/WHM.

Prerequisites

• Access to the email address registered on your Cloudesta account.
• Your domain name or the cPanel username shown in your welcome email.
• For 2FA recovery: your backup code, or ID matching the account holder's name.
• For WHM/CLI steps: root SSH access to your own cPanel VPS.

1. Which login do I need: client area or cPanel?

• Client area: https://cloudesta.com/login. You sign in with your email address and client area password. Use it for invoices, payments, plan changes, support tickets and your list of services.
• cPanel: https://example.com:2083 or https://example.com/cpanel. You sign in with your cPanel username, not your email, and your cPanel password. Use it for files, databases, email accounts, DNS and SSL.

The two passwords are independent, so changing one does not change the other. Once you are in the client area, you can open cPanel without a password. Go to Services → My Services, select your hosting plan, and use the Login to cPanel button on the service page.

2. How do I reset my client area password?

• Open https://cloudesta.com/pwreset.php, or click Forgot password? on the login page.
• Enter the email address registered on your account and submit.
• Open the reset email and click the link. It expires after a short time, so use it promptly.
• Choose a new, unique password and sign in.

If no email arrives within 10 minutes, check your spam folder and try any other address you may have registered with. If you no longer have access to the registered email, open a ticket as a guest and explain the situation. Support will verify your identity before changing the account email.

3. How do I reset my cPanel password?

From the client area (recommended)

• Log in to the client area and go to Services → My Services.
• Click your hosting service.
• Choose Change Password from the Actions menu on the service page.
• Enter a strong password twice and save. The new password takes effect on cPanel immediately.

From inside cPanel

If you are already logged in, for example through single sign-on, go to cPanel → Preferences → Password & Security. Some cPanel login pages also show a Reset Password link. That link sends a code to the contact email stored in cPanel.

On your own cPanel VPS (WHM or root)

In WHM, go to Account Functions → Password Modification, or run this as root:

whmapi1 passwd user=exampleuser password='yourpassword'

4. What if I lost my two-factor authentication device?

Client area 2FA: on the login screen, choose the option to use a backup code. Enter the code you saved when you enabled 2FA. This signs you in and disables 2FA, so re-enable it with your new device straight away.

cPanel 2FA: cPanel does not issue backup codes.

• Shared hosting: open a ticket and ask support to remove 2FA from your cPanel account.
• Your own cPanel VPS: go to WHM → Security Center → Two-Factor Authentication, open the Manage Users tab and remove 2FA for the user.

No backup code and no client area access: open a ticket at https://cloudesta.com/submitticket.php. Support will ask for identity verification before disabling 2FA. This normally means a government ID matching the account holder's name, plus details such as a recent invoice number. It protects you from someone else talking their way into your account.

5. Is it a wrong password, or is my IP blocked?

The symptom tells you which problem you have:

• "The login is invalid" or a brute-force lockout message: the page loads, so the server can see you. Reset the password, then wait 10–15 minutes if a lockout message appears.
• Page times out or will not load, while the site works from mobile data or works for other people: your IP is most likely blocked. Repeated failed logins trigger cPHulk or Imunify360 to block the address. This often happens because an email client or FTP program keeps retrying an old password.

Find your public IP and test the cPanel port:

curl -4 ifconfig.me
nc -vz example.com 2083
curl -sI https://example.com:2083 | head -n 1

On Windows PowerShell, use Test-NetConnection example.com -Port 2083.

If the connection fails, follow the IP unblock guide in our knowledgebase, or open a ticket that includes your public IP. Before you retry, fix whatever was sending the wrong password, or you will be blocked again.

On your own cPanel VPS, as root, clear cPHulk's record for the address:

whmapi1 flush_cphulk_login_history_for_ips ip=203.0.113.10

Some office and public networks block port 2083. If the test fails only on that network, use https://cpanel.example.com or the client area single sign-on, which work over the standard HTTPS port 443.

6. Could my browser be causing the login failure?

• Autofill: password managers often fill in an old password, or put your email where cPanel expects a username. Type both fields manually once.
• Cookies: both logins need cookies. If you are returned to the login page after a successful login, clear cookies for cloudesta.com or your domain, or try a private window.
• Extensions: privacy or ad-blocking extensions can break the session or the 2FA step. Disable them temporarily.
• Clock: 2FA codes depend on accurate time. Enable automatic time sync on your phone.

7. Why do I see an "account suspended" page?

A suspended hosting account shows a suspension page on your website, and cPanel refuses the login. This is not a password problem, so resetting the password will not help.

• The client area stays accessible during a suspension.
• Pay the overdue invoice under Billing → My Invoices. Services suspended for non-payment are normally reactivated automatically once payment is recorded.
• If the suspension was for another reason, such as abuse or malware, check your email and open a ticket.

Verify it works

• Sign out, then sign in again at https://cloudesta.com/login with the new password, and complete 2FA if it is enabled.
• Open https://example.com:2083 in a private window and log in with your cPanel username and new password.
• Update saved passwords in your FTP client, backup scripts and password manager.
• If you re-enabled 2FA, store the new backup code somewhere offline.

Common problems

• You never received the reset email. Check spam and confirm you used the registered address. If it still does not arrive, open a guest ticket.
• cPanel says "invalid login" with the correct password. You are probably entering your email instead of the cPanel username. Find the username on the client area service page or in the welcome email.
• You get locked out again a few minutes after being unblocked. A phone mail app or FTP client is still using the old password. Update it, then request another unblock.
• Your 2FA code is always rejected. Your phone clock is wrong. Enable automatic time, or use the backup code.
• Login works on mobile data but not at the office. Either the office IP is blocked or port 2083 is filtered. Use single sign-on or cpanel.example.com, and request an unblock for the office IP.

Frequently asked questions

Is my cPanel password the same as my client area password?

No. They are separate accounts with separate passwords. You can reach cPanel from the client area without its password by using the Login to cPanel button.

Can support tell me my current password?

No. Passwords are stored encrypted and cannot be read by anyone, including support. You can always set a new one using the steps above.

How long does an IP block last?

Short brute-force lockouts usually clear within 15–60 minutes. Firewall blocks can last longer, and support can lift them sooner if you send your IP in a ticket.

Need help? If you are still locked out, open a support ticket at https://cloudesta.com/submitticket.php. Include your domain, your public IP and the exact error message you see.