You'll rarely live in cPanel day to day. Most tasks (files, email, databases, DNS, cron) have faster native pages in the portal, as covered in the portal vs cPanel: what goes where. But cPanel still has a handful of tools with no portal equivalent, and knowing where they live saves you a support ticket. This is a tour of the ones our other articles actually reference.
Get there the same way every time: go to Services, click your hosting service, then the cPanel one-click login. You're signed in automatically, no separate cPanel password required (see accessing cPanel for the full rundown).
MultiPHP INI Editor: PHP limits, not PHP version
The portal's PHP Version tile switches your PHP version (7.4 through 8.3, default 8.3) per domain. It does not touch PHP runtime limits. For those, in cPanel go to Software → MultiPHP INI Editor. That's where you set upload_max_filesize, post_max_size, memory_limit, max_execution_time, and similar directives. Pick your domain from the dropdown, use the Editor Mode for a form UI, or switch to raw text mode if you're pasting a specific set of values. Changes apply immediately, no restart needed.
Errors and Awstats: when something's broken or you want traffic numbers
Two separate tools cover two separate questions:
- Metrics → Errors shows the raw PHP and web-server error log for your domain. If a page is throwing a 500 or a plugin is misbehaving, this is the first place to look. It shows the most recent entries; if you need older history, ask support.
- Awstats (under Metrics) gives you visitor and traffic statistics: hits, unique visitors, bandwidth, referrers, by day and month. Useful for a general sense of traffic, though for anything beyond casual monitoring you'll probably want a real analytics tool on the site itself.
Email deliverability
SPF and DKIM are configured automatically for domains hosted with us, so outbound mail authenticates correctly by default. DMARC deserves its own look: if you're chasing a deliverability issue (mail landing in spam, a receiving server rejecting your messages), check your DMARC policy and confirm your sending domain matches what the receiving server expects. This is one area where a support ticket is often faster than digging through DNS by hand, since deliverability issues can involve the sending server's reputation as well as your own records.
Backup Wizard and JetBackup 5: don't wait for disaster to learn this
Backups run automatically: JetBackup takes daily backups, no setup required. But you should know where to find them before you need them. In cPanel, JetBackup 5 is where you browse and restore from those automatic snapshots, home directory, databases, or email individually. Backup Wizard is the older, simpler flow if you just want to download a full backup or kick off a manual one. For most restores, JetBackup's browse-by-date interface is the faster path since you can restore a single file or database without touching anything else.
Directory Privacy: password-protect a folder
If you need to lock a specific directory behind a username and password (a staging area, an internal tool, anything not ready for public eyes), Directory Privacy in cPanel handles it with an .htpasswd-style prompt. cPanel gives you granular control if you're managing several protected folders at once.
SSH Access: for anyone who wants a shell
SSH Access in cPanel is where you manage your SSH key pairs, generate a new key, authorize one, or grab the connection details for your account. If you deploy with git, run composer or npm from the command line, or just prefer a shell over a file manager, this is the tile to check first. It pairs naturally with the portal's Git Version Control tile for deploy workflows.
Imunify360: malware scanning and the firewall
Every account is protected by Imunify360, which handles both malware scanning and web application firewall protection. There's no separate scanner tool to hunt for, it's all under the Imunify360 tile in cPanel. From there you can see scan results, review anything quarantined, and check what the firewall has blocked. If you get a notice about flagged files or a blocked IP and something looks wrong, that's the panel to check before opening a ticket.
When to open a ticket instead
If a MultiPHP change doesn't take effect, an error log doesn't explain a crash, or Imunify360 flags something you don't recognize as malicious, don't spend hours guessing. Open a ticket from Support → New ticket in the portal. It's a real person on the other end, not a bot, and for anything involving credentials there's a secure-share panel built for sending passwords safely rather than pasting them in plain text.