Skip to content
CorePanel

The Client Panel

The client panel is where your customers manage their own hosting: sites, email, files, databases, backups and the rest. It runs at the same address as your panel, and the hosting account is the user — there is no second login to create and nothing to provision.

It requires CorePanel Pro or Business. On Personal the login form only accepts administrators, and a customer who tries their hosting credentials is told the panel is not available on this server, not that their password is wrong.

How a customer signs in

Section titled “How a customer signs in”

They open the same URL you do and enter their account username and password — the pair the account was created with, the same one that opens FTP.

  • They land on /my, their panel. An administrator who opens /my is sent back to the accounts list, and a customer who opens an administrator page is sent back to /my.
  • A failed sign-in looks the same whether the name exists or not, so the form cannot be used to discover usernames.
  • An account with an old or weak password is asked to choose a new one first — see the forced password change.

The client panel in icon view for the account cpanel on corepanel.io, in the Classic Blue (light) theme. Down the left, a navy sidebar with the CorePanel logo and Home highlighted, then the sections under small headings: Domains (Websites, DNS), Email (Email, Forwarders), Files & backups (File manager, FTP accounts, Backups), Databases, Security (SSL, WAF, SSH & SFTP), WordPress and Advanced (Optimizations, Applications, Cron jobs). Across the top, the domain corepanel.io, a "Search the panel…" field with its Ctrl K hint, a bell carrying an unread badge of 3, the language button reading EN, the theme button and the account menu. The page is headed by the domain corepanel.io in large type, with a "Visit site" button at the right. Below it, white panels with plain titles and two tools to a row, each tool an icon on a softly tinted square in its group's colour with its name beside it: Domains in blue (Websites, New subdomain, New addon domain, New alias, HTTPS & www, DNS, Verify my domain, Use Google Workspace or Microsoft 365, Connect a subdomain to a service, Who sends my email, Add a DNS record), Email in violet (Email, Autoresponders, Email filters, Mailbox password, Email routing, Forwarders, Catch-all, Domain mail redirect) and the start of Files & backups (File manager, Trash). To the right, an "Account overview" card lists the account cpanel, the main domain corepanel.io, the contact email admin@corepanel.io and the last sign-in, "this session"; under it a "WAF protection" card with a shield icon reads "322 attacks blocked" over "Last 30 days", then a blue bar per day from Sep 20 to Oct 19 with the busiest days in solid blue, the line "Stopping attacks before they reach your websites. Nothing to configure." and a "View details" link; below that the "Usage" card begins with disk space 86 GB · no limit, database size 288 MB and bandwidth this month 258 GB of 600 GB with its bar.

What a customer can use

Section titled “What a customer can use”

Every section is the same screen you use in the account workspace, limited to the customer’s own account. There is no second implementation: what changes is only which account a request is allowed to name.

SectionWhat the customer does thereRead more
WebsitesAdd addon domains, aliases and subdomains; per site: serving mode, www and Force HTTPSWebsites, DNS and SSL
DNSPoint the domain, verify it, switch email provider, edit recordsWebsites, DNS and SSL
SSLSee their automatic certificates; install a commercial oneWebsites, DNS and SSL
OptimizationsWebP, Early Hints, minification, page cache, browser cacheWebsites, DNS and SSL
Email and ForwardersMailboxes, aliases, autoresponders, filters, forwarders, catch-all, where mail is deliveredEmail
File manager, FTP, SSH & SFTPTheir home folder, extra FTP logins, their SSH keysFiles, databases and cron
DatabasesMySQL databases and users, table browser, SQL console, import and exportFiles, databases and cron
Cron jobsTheir scheduled commandsFiles, databases and cron
BackupsDownload any backup of their account; if you allow it, take and restore their ownBackups
WordPressThe full WordPress Manager for their sitesWordPress, applications and WAF
ApplicationsDeploy, roll back, start and stop the apps you created for themWordPress, applications and WAF
WAFThe attacks blocked on their sites (read-only)WordPress, applications and WAF
NotificationsTheir own feed, and whether it reaches their mailboxLayout and preferences
My accountContact details, layout, language and passwordLayout and preferences

Your side of it

Section titled “Your side of it”
  • Access and support — turn one customer’s access off, log in as a customer to help them, and what happens if your licence lapses.
  • Limits and boundaries — what a customer can never reach, and the ceilings under your package limits.
  • The panel-wide defaults are in Server → Settings → Client panel.