InMotion Hosting Support Center

The cPanel 11.38 release disabled the ability to turn off security tokens, and it's now a forced option for all cPanel users. This was done to provide an extra layer of security and to help prevent CSRF (Cross-site request forgery) attacks.

What do security tokens look like?

When you're logged in to either cPanel or WHM, you'll now see cpsess followed by a number in the address bar.



In this case you can see I've highlighed cpsess8185580286 when trying to access cPanel and cpsess4067102361 when trying to access WHM, these are the security tokens for those particular login sessions of mine.

What do security tokens do?

A security token is simply a string of text that is uniquely generated on each login session. It can help ensure that an unauthorized user does not hijack a user's session, and will require re-authentication if the security token does not match what is stored for the session.

A good example of when you might encounter issues with cPanel security tokens, would be trying to bookmark a particular page in cPanel. For instance if you bookmarked the Addon Domains page in cPanel the URL would be something like this:

If you try to come back to that page a day later, your cPanel login security token isn't going to match that URL. So you'll be presented with the cPanel HTTP error 401 Invalid security token message.

Now you can simply type in your cPanel password and click on Click here to proceed with the current request

The address bar will now show that you're using a different security token for this session

What can I do if I can't login to cPanel now?

If you're having issues logging into cPanel because you keep getting the HTTP error 401 Invalid security token error. You should be able to type in your cPanel password again, or you can try to log out of cPanel and clear all of your cookies for the server.

Support Center Login

Social Media Login

Social Login Joomla

Related Questions

Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
Ask a Question
n/a Points
2015-08-26 7:36 am

After many years of logging into CPAnel using the same URL and password, a week or so ago I suddenly was confronted with File Not Found, Session Timed Out errors and a password rejected loop. Or I could reach the CPanel home page, but when clicking on File Manager the log-in screen came back up. This happened whether logging in with Chrome or Microsoft Edge. I had no idea what was going on - I saw the cpsess text in the URL but my web hosting company did not display any message explaining this addition.

I am no computer expert - I thought it might have to do with my upgrading to Windows 10 or some other error on my part. My host contact wrote that he had never experienced this kind of problem - he suggested maybe it was a problem with my computer (not so, because I tried to get in using another computer in the office).

After dealing with this for several days I finally decided to try cleaning the various caches using CCleaner. This helped sometimes! Then, after much searching I found this URL that explained the whole thing. It certainly would have helped if my host had issued an explanation.

Post a Comment

Email Address:
Phone Number:

Please note: Your name and comment will be displayed, but we will not show your email address.

2 Questions & Comments

Post a comment

Back to first comment | top

Need more Help?


Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail:
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!