Documentation

From bare VPS to live panel

Everything you need to install Vanta Panel and run your hosting stack. Start with the one-command install below.

$ curl -fsSL https://get.vantapanel.com | sudo bash

Fresh Ubuntu 22.04+ or Debian 12 · root access · panel live in about three minutes.

Account & Licensing

Advanced Features

Databases

DNS & SSL

Email

Email Hosting and Mailboxes

Create and manage mailboxes on your own domains with Postfix and Dovecot: address rules, passwords, quotas, the mailbox limits that really apply, mail DNS and the Brevo sending key. The hub for every email page in Vanta Panel.

Read

Mail Client Setup (IMAP, POP3, SMTP)

Connect any mail app to a Vanta Panel mailbox: the exact hostname, IMAP 993, POP3 995 and SMTP 587 settings, why the unencrypted ports refuse your password, and how the trusted mail certificate is issued.

Read

Email Deliverability: SPF, DKIM and DMARC

Fix mail that never arrives: live SPF, DKIM and DMARC checks with the exact records to publish, reverse DNS, blocked outbound port 25, an authenticated outbound relay, and the one-click repair for mail held with 451 Service unavailable.

Read

Webmail (Roundcube)

Read and send mail in the browser with Roundcube. Open a mailbox from vPanel with automatic sign-in, or go straight to https://your-domain/webmail with the full email address and mailbox password.

Read

Email Forwarders

Forward mail from an address on your domain to anywhere, including catch-alls. Why a forwarder overrides a mailbox with the same address, what a catch-all costs you, and what forwarding does to SPF at the destination.

Read

Autoresponders and Out-of-Office Replies

Set an automatic reply on a mailbox: subject, message, and how often one sender may be answered. Includes the two cases that silently prevent a reply — a matching filter rule, and a forwarder on the same address.

Read

Email Filters

Sort incoming mail per mailbox: match From, To, Subject or the message body, then move to a folder, forward or delete. First match wins, filters run before your autoresponder, and they only affect newly delivered mail.

Read

Mailing Lists

One address that fans out to a group of people. Create a list, add and remove members, and understand what it is not: no subscribe links, no moderation and no archive — anyone who knows the address can post to it.

Read

Spam Filters

Set the SpamAssassin score threshold and what happens to flagged mail. What the panel stores per account, what the server-wide scanner actually does, and the filter rule that gives you a Junk folder you control.

Read

Mail Queue (vWHM)

See what Postfix is holding and why, from vWHM: active, deferred and held messages with the last error for each, retry-all, single delete and purge — plus what every common queue error is telling you.

Read

Getting Started

Monitoring

Security

Security Tools

Every security tool in Vanta Panel and where it lives: two-factor authentication, delegated logins, IP blocking, directory privacy, hotlink protection, SSH keys and SSL.

Read

Two-Factor Authentication

Turn on TOTP two-factor authentication in vPanel or vWHM, save your eight single-use recovery codes, read the recent sign-ins log, and understand server-enforced 2FA policy.

Read

Directory Privacy

Password-protect a folder on your site with HTTP Basic authentication. Covers protecting a folder, managing several logins, how the .htpasswd and .htaccess are written, and the real limits of Basic auth - including why you should only use it over HTTPS.

Read

IP Blocker

Block abusive visitors by IP address or CIDR range in vPanel. How the .htaccess rule is written, what validates, and what the block list does not cover.

Read

Hotlink Protection

Stop other sites embedding your images and spending your bandwidth. Requests for the protected file types are blocked unless the referrer is one of your domains - or there is no referrer at all. Covers the settings, the .htaccess rules written, and the cases that legitimately break.

Read

User Manager and Delegated Logins

Create extra vPanel logins for a developer or colleague, scoped to only the areas you tick. Permission groups, the account+username login format, and what is never delegated.

Read

Changing Your Password

Change your hosting account password in vPanel. It updates your panel login and your SSH/SFTP system password together, and signs out every other session.

Read

Admin Access Control (vWHM)

Protect the vWHM administrator login: password changes, two-factor authentication, an IP allow-list for the whole admin panel, sign-in history, and how to recover if you lock yourself out.

Read

Leech Protection

Record a credential-sharing policy for a password-protected folder: how many logins per username in two hours count as normal, and where to send visitors past that. Enforcement needs the server's login-tracker - the policy on its own does not block anyone.

Read

Server Administration

vWHM Admin Overview

A map of the vWHM administrator panel: what every screen does, from the dashboard and account tools to packages, services, monitoring, security, backups and the API.

Read

Creating a Hosting Account

How vWHM provisions a hosting account: the form fields and their real limits, every step that runs on submit, double-submit protection, and the one-time credentials receipt.

Read

Managing a Hosting Account

Every panel on the vWHM account screen: package and usage, password reset, PHP version, suspend and terminate, admin notes, SSH, DNS, HTTPS, and the Java, Kafka and Redis toggles.

Read

Packages and Plans

Define reusable packages of per-account limits in vWHM. What each limit actually enforces, what happens when an account hits one, and how packages interact with your license.

Read

Server Status

The live vitals page in vWHM: CPU load, memory, disk and swap gauges, uptime, process count, the worker bridge check and core service health, refreshed every three seconds.

Read

Resource Overview

Per-account disk, database and subdomain usage measured live in vWHM, plus the database registry tools that adopt unregistered databases and clear orphan MySQL grants.

Read

Managing Services

Check, restart and reload the core services from vWHM — Apache, MariaDB and both panel services — plus restart-all and a guarded server reboot.

Read

Panel Settings and Server Alerts

Configure vWHM branding and accent colours, the support contact, the two-factor policy, and the server alert engine with its thresholds, cooldown and resolved notices.

Read

Server Setup and Private Nameservers

Set the server hostname and your private nameservers in vWHM, register the glue records they need, and turn on the built-in authoritative DNS engine for new accounts.

Read

Firewall and Brute-Force Protection

Manage the ufw firewall from vWHM and review fail2ban bans. Covers adding scoped rules and the two anti-lockout guards that protect SSH, HTTP and HTTPS from being closed.

Read

The Audit Log

Every privileged action in Vanta Panel is recorded with actor, target, detail and IP. What gets logged, what does not, how to filter it, and how retention works.

Read

Unassigned Databases

Find MySQL databases that no Vanta account owns — usually left by a migration — and assign each to an account so it appears in their panel, phpMyAdmin and backups.

Read

Using the API

Issue scoped, revocable API tokens in vWHM and manage hosting accounts over a bearer-authenticated REST API. Covers scopes, the rate limit, endpoints and error codes.

Read

Server Backups and Schedules (vWHM)

Per-site full and database-only backup schedules in vWHM: frequency, retention, staggered runs, the pre-flight disk check and archive verification, reading the status badges, immediate restores, and customer self-service control.

Read

Off-Site Backup Destinations (vWHM)

Copy backups off-server to S3-compatible storage, SFTP, FTPS, FTP or WebDAV. Covers per-site folders, retry and retention behaviour, the 4 GiB S3 multipart threshold, and pulling an archive back to restore it.

Read

Tools & Automation

Websites

Websites and Domains

Manage every hostname on your account: the primary domain, subdomains and addon domains, each with its own document root, Apache vhost and free SSL certificate. Covers creating and deleting them, the DNS each one needs, and per-package domain limits.

Read

File Manager

Browse, edit, upload and archive your files in the browser. Covers every operation and keyboard shortcut, the two upload limits that apply (500 MB in the panel, 64 MB in PHP by default), the 2 MB cap on downloads and the editor, and protected home entries.

Read

FTP Accounts

Create extra FTP logins for your account, each locked to one folder. Covers usernames and passwords, connecting with explicit FTP over TLS on port 21, why you must use the server's IP rather than a Cloudflare-proxied domain, and why FTP accounts cannot use SFTP.

Read

One-Click App Installers

Install WordPress, Joomla or Microweber in one click - the database is created and the setup wizard completed for you. Covers install locations, the admin credentials shown only once, updating and password-resetting WordPress, and what removing an application deletes.

Read

Redirects

Forward a domain or a path to another URL with 301 or 302 redirects, including wildcard redirects that pass the rest of the URL through. Rules are written to a managed block at the top of the source domain's .htaccess, above your CMS's own rewrite rules.

Read

Custom Error Pages

Replace Apache's default 404, 403, 401 and 500 messages with pages of your own, chosen per domain. Covers how the pages are wired up with ErrorDocument, why an error page needs absolute paths, and how to check you are returning the right status code.

Read

Directory Indexes

Choose what visitors see when they open a folder with no index file: a 403 Forbidden, or a browsable listing of its contents. Covers why 403 is the safer default, which filenames count as an index file, and how to override the setting for a single folder.

Read

Node.js App Hosting

Run Node.js apps on your hosting account. vPanel writes a systemd service that runs as your own Linux user, injects PORT, restarts on failure and survives reboots, then wires an Apache reverse proxy to a URL path on your site or to a domain of its own.

Read

Python App Hosting: FastAPI, Flask and Django

Deploy FastAPI, Flask and Django apps from a folder in your home directory. Each app gets its own virtualenv, a uvicorn or gunicorn service that runs as your Linux user and restarts on failure, and an optional Apache reverse proxy on a path or its own domain.

Read
Can’t find it? Ask support · Feature overview · Pricing