cPanel / WHM
Manage DNS-01 records through a cPanel account or a WHM (reseller/root) server via an API token. This covers the large share of shared hosting that runs on cPanel, without needing a provider-specific API.
Prerequisites
- A cPanel account (or WHM access) that manages the DNS zone.
- The panel reachable from CertAutoPilot over HTTPS (cPanel
:2083, WHM:2087). - The domain must resolve publicly — DNS-01 needs the zone in public DNS.
Create the API token
- cPanel: Security → Manage API Tokens → Create → copy the token. Interface =
cpanel. - WHM: Development → Manage API Tokens → Generate → copy the token. Interface =
whm(use for reseller/root managing many accounts' zones).
Add the credential
- Settings → DNS Credentials → New → cPanel / WHM.
- Server URL:
https://host:2083(cPanel) orhttps://host:2087(WHM). - Interface: cPanel or WHM.
- Username + API Token.
- Test (with a domain) → Save.
Config fields
| Field | Required | Purpose |
|---|---|---|
url | yes | Panel base URL (cPanel :2083 / WHM :2087). |
username | yes | Panel account username. |
token | yes | cPanel/WHM API token. |
mode | no | cpanel (default) or whm. |
Propagation
The record is written to the panel's own DNS; propagation depends on that server's nameservers. Default settings usually work; raise the propagation timeout in Settings → General if the zone's NS are slow.
Troubleshooting
401 / "access denied"
Wrong username/token, token lacks DNS scope, or the mode doesn't match the port (cPanel token on a WHM URL or vice versa).
"Zone not found"
The domain isn't a zone on this panel, or the account can't manage it (WHM needed for a zone owned by another account).