cPanel shows this message and logs you out when your internet address changes during a session. A VPN, a proxy or a mobile connection is the usual cause.
Why it happens
When you log in, cPanel ties your session to the IP address you logged in from. If the next click arrives from a different IP address, cPanel ends the session and asks you to log in again. This protects you: someone who copies your session cookie can't use it from another connection.
Your IP address can change in the middle of a session without you noticing, for example when:
- a VPN or proxy switches servers, or sends some requests through a different address;
- your phone or laptop moves between Wi-Fi and mobile data;
- Safari's iCloud Private Relay or a browser's built-in VPN is on;
- your office or school network sends traffic out through several addresses;
- your connection switches between IPv4 and IPv6.
Fix it on your side
Turn off your VPN or proxy while you work in cPanel, or set it to stay on one server. If your VPN supports split tunneling, leave your hosting server out of the VPN.
On a Mac, iPhone or iPad, turn off iCloud Private Relay while you use cPanel (in your Apple Account settings under iCloud, then Private Relay).
Stay on one network. Don't switch between Wi-Fi and mobile data while you are logged in.
Try a private browser window with no extensions, or another browser. VPN and "data saver" extensions often change the address of some requests.
Log in again. The quickest way is Log in to control panel on your hosting service in the client area, see Log in to cPanel.
If the message keeps coming back on a normal home or office connection, open a ticket and tell us your public IP address (search for "what is my IP" to find it) and the time it happened. We'll check the server logs.
On your own VPS or dedicated server (WHM)
On shared hosting this check is a server-wide setting that we can't turn off for one account. If you manage your own server with WHM, you can change how strict it is:
Log in to WHM as
root.Go to Server Configuration > Tweak Settings and open the Security tab.
Find Cookie IP validation and choose one of these options:
- strict (default): the IP address must stay exactly the same.
- loose: the new IP address must be in the same class C range (the first three numbers match). This usually solves the problem for VPNs and office networks.
- disabled: no IP check. We don't recommend it, because a stolen session cookie then works from anywhere.
Click Save at the bottom of the page.
Related articles
- Log in to cPanel
- Log in to cPanel from the client area
- Change or reset your cPanel password
- Connect to your server with SSH
Still stuck? Open a support ticket and we'll help.
