WordPress Toolkit is a powerful management tool built into cPanel that lets you install, manage, update, and secure your WordPress sites — all from one place. It replaces the need for third-party installers and gives you full control over every WordPress installation on your hosting account.
What you can do with WordPress Toolkit:
- Install WordPress with one click — no technical knowledge required
- Manage themes and plugins (install, update, enable, disable, delete)
- Create staging and production copies (clone your site safely)
- Run automatic or smart updates for WordPress core, themes, and plugins
- Take backups and restore with a single click
- Enable maintenance mode with a custom message
- Apply security hardening to protect your site
- Manage admin and database passwords
- Control search engine indexing
- Use single sign-on to access your WordPress admin dashboard instantly
How to Access WordPress Toolkit
1. Log in to your cPanel account. If you're unsure how, see our guide: How to Reset cPanel's Account Password for login help.
2. In the Domains section, click on WordPress Toolkit.
You'll see the WordPress Toolkit dashboard showing all your existing WordPress installations. If you haven't installed WordPress yet, the dashboard will be empty.
How to Install WordPress with WordPress Toolkit
1. Open WordPress Toolkit from your cPanel dashboard.
2. Click the Install button (or the + icon).
3. Fill in the installation details:
- Installation path — Choose the domain or directory where WordPress will be installed (e.g.,
yourdomain.comoryourdomain.com/blog) - Website title — Enter your site's name
- Plugin/theme set — Optionally choose a predefined set of plugins and themes to install automatically
- WordPress version — Select the latest stable version (recommended)
- Language — Choose your preferred language
4. Expand Advanced Settings to configure (optional):
- Database name and username
- Admin username and password
- Automatic security hardening (recommended — enabled by default)
5. Click Install. WordPress Toolkit will set everything up automatically. You'll see a progress indicator, and once complete, your new WordPress site is ready.
Tip: WordPress Toolkit automatically applies security hardening during installation. This is recommended and enabled by default — it protects your new site from common vulnerabilities.
How to Log in to WordPress Admin (Single Sign-On)
Instead of entering your WordPress username and password every time, WordPress Toolkit lets you log in directly:
1. Open WordPress Toolkit in cPanel.
2. Find your WordPress installation in the list.
3. Click the Log in button next to the site. You'll be taken directly to the WordPress admin dashboard without entering a password.
How to Update WordPress, Themes, and Plugins
WordPress Toolkit shows you when updates are available and lets you apply them individually or in bulk:
1. Open WordPress Toolkit and click on the WordPress installation you want to update.
2. Go to the Updates tab. You'll see available updates for:
- WordPress core
- Installed plugins
- Installed themes
3. Select what you want to update and click Update.
Automatic Updates: You can configure WordPress Toolkit to automatically apply updates. Go to the installation's Settings tab and enable automatic updates for core, plugins, themes, or all three. Choose between:
- Smart updates — WordPress Toolkit creates a backup, applies the update, then checks if the site is still working. If something breaks, it rolls back automatically.
- Direct updates — Updates are applied immediately without a pre-update backup.
We recommend enabling smart updates to protect your site from update-related issues.
How to Back Up and Restore WordPress
Creating a backup:
1. Open WordPress Toolkit and click on your WordPress installation.
2. Go to the Backups tab.
3. Click Create Backup. Give it a descriptive name if you like (e.g., "Before plugin update").
4. Click Backup to start the process.
Restoring from a backup:
1. Go to the Backups tab for your WordPress installation.
2. Find the backup you want to restore and click the Restore icon next to it.
3. Confirm the restore. Your site will be reverted to the state it was in when the backup was created.
Note: Restoring a backup overwrites your current site. Make a fresh backup before restoring if you want to preserve the current state.
How to Clone WordPress (Create a Staging Site)
Cloning lets you create an exact copy of your WordPress site — perfect for testing changes before applying them to the live site.
1. Open WordPress Toolkit and find the installation you want to clone.
2. Click the Clone button (or the copy icon).
3. Choose where to clone the site:
- Same domain, different directory — e.g.,
yourdomain.com/staging - Subdomain — e.g.,
staging.yourdomain.com - Different domain — if you have multiple domains on your account
4. Click Clone and wait for the process to complete.
Copying changes back to production: Once you've tested your changes on the staging copy, you can push them back to the live site using the Copy Data feature. Select what to copy (files, database, or both) and confirm.
How to Enable Maintenance Mode
If you're making changes to your site and don't want visitors to see it in a broken state, enable maintenance mode:
1. Open WordPress Toolkit and click on your WordPress installation.
2. Toggle Maintenance Mode to ON.
3. Optionally customise the maintenance page message that visitors will see.
4. Toggle it OFF when you're ready to make the site live again.
How to Apply Security Hardening
WordPress Toolkit includes built-in security hardening to protect your site from common threats:
1. Open WordPress Toolkit and click on your WordPress installation.
2. Go to the Security tab.
3. Review the security status. WordPress Toolkit will show you which hardening measures are active and which are not.
4. Click Protect to apply all recommended security measures at once, or toggle individual settings:
- Disable file editing in WordPress dashboard
- Hide WordPress version information
- Restrict access to wp-config.php and .htaccess
- Disable XML-RPC (if not needed for remote publishing)
- Enforce HTTPS
We recommend applying all security hardening measures for every WordPress installation. This is done automatically for new installs.
How to Manage WordPress Passwords
WordPress Toolkit lets you manage passwords without logging into WordPress itself:
1. Open WordPress Toolkit and click on your installation.
2. Go to the Properties tab (or Settings).
3. You can view and change:
- WordPress admin password — the password for your wp-admin login
- Database password — the MySQL database user password
4. Enter a new password and save. You can use the built-in password generator for a strong, random password.
Also see: How to Change the Password of a WordPress Account for changing passwords from within the WordPress dashboard.
How to Manage Themes and Plugins
WordPress Toolkit gives you full control over themes and plugins from one interface:
1. Open WordPress Toolkit and click on your installation.
2. Go to the Themes or Plugins tab.
3. You can:
- Install new themes or plugins from the WordPress repository
- Update individual themes or plugins
- Enable or disable themes or plugins without deleting them
- Delete themes or plugins you no longer need
Tip: Disabling unused themes and plugins is a good security practice — fewer active components means fewer potential vulnerabilities.
How to Control Search Engine Indexing
If you're working on a staging site or don't want a specific WordPress installation to appear in Google search results:
1. Open WordPress Toolkit and click on your installation.
2. Go to the Properties tab.
3. Toggle Search engine indexing OFF to prevent search engines from indexing the site.
4. Toggle it back ON when the site is ready to go live.
How to Enable Debugging
If your WordPress site is showing errors or not working correctly, you can enable WordPress debug mode through WordPress Toolkit:
1. Open WordPress Toolkit and click on your installation.
2. Go to the Properties tab.
3. Toggle Debug mode ON. This enables WordPress debugging and displays error messages that help identify the problem.
4. When you're done troubleshooting, toggle it back OFF. Leaving debug mode on in production is not recommended as it can expose sensitive information.
Frequently Asked Questions
Is WordPress Toolkit included with my hosting plan?
Yes. WordPress Toolkit is included with your cPanel hosting at no extra cost.
I don't see WordPress Toolkit in my cPanel. What do I do?
If the WordPress Toolkit icon is not visible in the Domains section of cPanel, please contact our support team and we'll enable it for you.
Can I use WordPress Toolkit for multiple WordPress sites?
Yes. There is no limit to the number of WordPress sites you can manage through WordPress Toolkit. Install as many as your hosting plan supports.
What's the difference between WordPress Toolkit and Softaculous?
WordPress Toolkit is a comprehensive management tool built into cPanel. It handles installation, updates, backups, staging, security, and more — all in one place. Softaculous was a third-party installer that has been replaced by WordPress Toolkit on our servers.
Will my existing WordPress sites be affected by this change?
No. Your existing WordPress installations continue to work normally. You can now manage them through WordPress Toolkit instead of Softaculous.
Need help? If you have any questions or run into issues, contact our support team — we're here to help.
