[JAY]

Can't log in to CloudPanel? Port 8443, lost password and 2FA fixes

Locked out of your own control panel is a horrible feeling, but with root SSH access you can always get back in. This guide covers the page not loading at all, forgotten passwords, a lost 2FA phone and Basic Auth lockouts.

Problem 1: the login page doesn't load
CloudPanel runs on its own port:

Code:Copy

https://YOUR_SERVER_IP:8443

(or your panel domain, if you set one). Note the https and the :8443.

Check the firewall. CloudPanel has its own firewall under Admin Area > Security, and the docs recommend allowing port 8443 only from your own IP. If your home IP changed since you made that rule, you're now blocked. Your VPS provider may also have a cloud firewall in front of the server. From SSH, check the server firewall:

Code:Copy

ufw status numbered

To allow your current IP (find it at any "what is my IP" site):

Code:Copy

ufw allow from YOUR_HOME_IP to any port 8443 proto tcp

Then update the rule in CloudPanel once you're back in, so the panel and the server agree.

Check that something listens on 8443:

Code:Copy

ss -tlnp | grep 8443 systemctl --failed

If nothing listens, a service failed. Rebooting the server often brings it back; if not, the

Code:Copy

systemctl --failed

list tells you which service to look at.

Self-signed certificate warning. On a fresh install, the browser warns about the certificate. Click Advanced > Proceed. That's normal until you set a panel domain with a real certificate.

Problem 2: forgot the admin password
Log in over SSH as root and list the panel users:

Code:Copy

clpctl user:list

Then set a new password for your user:

Code:Copy

clpctl user:reset:password --userName='john.doe' --password='A-New-Strong-Password'

Use a long, unique password, and clear your shell history afterwards if other people use this server (

Code:Copy

history -c

).

Problem 3: lost your 2FA phone or app
As root:

Code:Copy

clpctl user:disable:mfa --userName='john.doe'

Log in with just the password, then turn two-factor authentication back on in your user settings with your new device. This time, keep a backup of the 2FA setup (many authenticator apps can back up or export accounts).

Problem 4: a Basic Auth box you can't get past
If you (or a previous admin) put Basic Auth in front of CloudPanel and nobody remembers the login, switch it off as root:

Code:Copy

clpctl cloudpanel:disable:basic-auth

You can turn it on again with new details:

Code:Copy

clpctl cloudpanel:enable:basic-auth --userName='panel' --password='Another-Strong-Password'

Problem 5: the login works, then you're thrown out again

• Clear the cookies for the panel address, or try a private window.
  
• Check the server time. A wrong clock breaks sessions and 2FA codes:
  Code:Copy

  timedatectl
  . If "System clock synchronized" says no, enable NTP:
  Code:Copy

  timedatectl set-ntp true
  .
  
• Full disk breaks logins too:
  Code:Copy

  df -h /
  .
  

Keep it secure afterwards

• Allow port 8443 only for your own IPs, or use Basic Auth if your IP changes often.
  
• Turn on 2FA and keep a backup of it.
  
• Keep root SSH access working (with an SSH key). It's your way back in when the panel fails.
  

More CloudPanel commands are in our clpctl cheat sheet.

Sources: CloudPanel: root user commands · CloudPanel: security


More CloudPanel troubleshooting

• Installation failed: common install errors
  
• Site shows 403 Forbidden or 404
  
• Too many redirects or mixed content after SSL
  
• PHP extension missing / enable ionCube
  
• WordPress asks for FTP or can't update plugins
  
• Varnish showing old pages or breaking logins
  
• Restore a site from a backup
  
• SSH or SFTP login fails
  
• Node.js app shows 502 or keeps restarting
  
• Site hacked: find malware and clean up
  
• clpctl errors: not found, wrong user, quoting
  

Applies to CloudPanel v2 on Ubuntu and Debian, October 2026.