Knowledgebase

If your server is hacked or stolen your accounts password, you can use the following script to change all the cpanel accounts password. Change password via WHM and scripts.

WHM >> Account Functions >> Force Password Change then Select All,

then Submit

Change multiple accounts password via the following script /scripts/realchpass

The syntax is

# /scripts/realchpass username password

Change multiple accounts password

Method : 1

Use the following shell script to change all the cpanel account password randomly.

vi /root/passch.sh

#! /bin/bash
ls -1 /var/cpanel/users | while read user; do
pass=`strings /dev/urandom | tr -dc .~?_A-Z-a-z-0-9 | head -c16 | xargs`
echo “$user $pass” >> new-pass.txt
/scripts/realchpass $user $pass
/scripts/ftpupdate
done

Save and excute that file.

chmod +x /root/passch.sh

sh /root/passch.sh

You can use random string generate scripts like the following generate passwords.

pass=`date | md5sum | head -c16 | xargs`
pass=`openssl rand -base64 128 | head -c16 | xargs`
pass=`strings /dev/urandom | tr -dc .~?_A-Z-a-z-0-9 | head -c16 | xargs`

In some cases when executing /scripts/realchpass script will showing the following error.