\n\t\t\t\tcPanel automatically prefixes both names with your account username, so you’ll end up with something like cpaneluser_wpdb<\/code>. The MySQL\u00ae Database Wizard<\/strong> walks you through the same steps if you prefer a guided flow.<\/p>\n\n\n\nConnect It to Your Application<\/h3>\n\n\n\n Your app needs those details. In WordPress, they go in wp-config.php<\/code>:<\/strong><\/p>\n\n\n\nphp<\/p>\n\n\n\n
define('DB_NAME', 'cpaneluser_wpdb');\ndefine('DB_USER', 'cpaneluser_wpuser');\ndefine('DB_PASSWORD', 'your-strong-password');\ndefine('DB_HOST', 'localhost');<\/code><\/pre>\n\n\n\nMost of the time the host is simply localhost<\/code>.<\/p>\n\n\n\nphpMyAdmin<\/h3>\n\n\n\n For anything beyond creating databases, such as browsing tables, running queries, exporting, and importing, use phpMyAdmin<\/strong>. Export a backup before any manual edit, and be careful with DROP<\/code> and DELETE<\/code> commands. Very large imports can hit upload limits depending on server settings, so if an import keeps failing, ask support rather than fighting it. We cover the details in our phpMyAdmin database guide.<\/p>\n\n\n\nDatabase tips worth following:<\/strong> use a separate database and user for each site, never reuse the cPanel password for a database user, and delete databases for sites you’ve retired.<\/p>\n\n\n\nSecuring Your cPanel Account<\/h2>\n\n\n\n Your cPanel login controls everything: files, databases, email, and DNS. Protecting it is the highest-value security work you can do. Our full walkthrough on securing your cPanel hosting account goes further, but here are the essentials.<\/p>\n\n\n\n
1. Turn On Two-Factor Authentication<\/h3>\n\n\n\n Go to Security \u2192 Two-Factor Authentication<\/strong> and link an authenticator app. Even if someone gets your password, they can’t log in without the code.<\/p>\n\n\n\n2. Make Sure SSL Is Active and Enforced<\/h3>\n\n\n\n Check Security \u2192 SSL\/TLS Status<\/strong> to confirm your domains have valid certificates. Then, under Domains<\/strong>, turn on Force HTTPS Redirect<\/strong> so visitors can’t land on the insecure version. Our SSL setup guide covers fixing mixed-content warnings too.<\/p>\n\n\n\n3. Block and Protect<\/h3>\n\n\n\n\nIP Blocker<\/strong> shuts out addresses that keep hammering your site<\/li>\n\n\n\nDirectory Privacy<\/strong> password-protects a folder, which is good for staging sites or admin areas<\/li>\n\n\n\nHotlink Protection<\/strong> stops other sites from embedding your images and burning your bandwidth<\/li>\n<\/ul>\n\n\n\n4. Scan for Malware<\/h3>\n\n\n\n If your host enables it, use Files \u2192 Virus Scanner<\/strong> for a quick check. If a scan flags something, act on it straight away. Our guide on preventing and recovering from site hacks explains the cleanup steps.<\/p>\n\n\n\n5. Keep Backups You’ve Actually Tested<\/h3>\n\n\n\n Use Files \u2192 Backup<\/strong> to download a full or partial copy, and store it somewhere other than the server itself. A backup you’ve never restored is only a hope. Our backup and restore guide shows how to test the process safely.<\/p>\n\n\n\n6. Update the Software You Run<\/h3>\n\n\n\n Outdated WordPress, themes, plugins, and PHP versions are the most common entry point for attackers. Use Software \u2192 Select PHP Version<\/strong> to stay on a supported release, and read how to choose the right PHP version before switching.<\/p>\n\n\n\nFor the wider picture, see our web hosting security best practices.<\/p>\n\n\n\n
Monthly cPanel Maintenance Checklist<\/h2>\n\n\n\n
![\"Email](\"https:\/\/cyberin.in\/blog\/wp-content\/uploads\/2026\/11\/image.png\")