A cracked cPanel license, or any “nulled” control panel or server software, is software with its licence check removed or bypassed. It is cheap or free because it skips the vendor’s licensing, and it is risky because you cannot know what else was changed: it may carry backdoors, it does not receive genuine updates, and it breaks the vendor’s licence terms. A shared licence is a different thing: a legitimate licence supplied and managed by a licence provider, activated for your server and receiving official updates. This guide explains the risks and what to check before buying either.
What “cracked” or “nulled” software is
Commercial server software such as cPanel & WHM, Plesk, CloudLinux, Imunify360 and LiteSpeed checks with the vendor’s licensing system that it is allowed to run. A cracked copy has that check removed or tricked, usually by modified files or scripts downloaded from forums or unknown websites. Whoever modified it had full control of the code that will run with root privileges on your server.
The risks of cracked licences
1. Hidden malware and backdoors
Modified installers and patch scripts run as root. They can install backdoors, add hidden admin accounts, send out spam, mine cryptocurrency or copy data. Every website, mailbox and database on the server is exposed, including your clients’.
2. No genuine security updates
Control panels and security tools receive regular patches for vulnerabilities. Cracked copies often cannot update safely, or updates restore the licence check and break the crack, so servers stay on old, vulnerable versions.
3. Sudden failures
When a vendor changes its licensing system, cracked installations can stop working without warning, taking sites and email offline.
4. Breaking the licence terms
Running software outside its licence breaches the vendor’s terms. For a hosting business, that can put contracts, payment providers and reputation at risk.
5. Data protection exposure
If a compromised server leaks personal data, the organisation responsible for that data has to deal with the consequences, including obligations under data protection laws such as Zimbabwe’s Cyber and Data Protection Act.
6. Blacklisting
Servers that send spam or host malware end up on blocklists. Your clients’ email then goes to spam or is rejected, even after the server is cleaned.
Why the low price of cracked software is misleading
The saving from a cracked licence is small next to the cost of one serious incident: cleaning a compromised server, restoring client sites, getting an IP address off blocklists and explaining the outage to customers. Legitimate licences are also no longer expensive for small servers, which removes most of the reason to take the risk.
What a shared licence is
A shared licence is supplied and managed by a licence provider rather than issued by the vendor directly to you. The provider activates it for your server, and the software runs as normal, receiving official updates. Tremhost’s licences are shared licences supplied by Tremhost; the owner confirms they receive official vendor updates. They are not licences issued directly by cPanel, Plesk or CloudLinux to the buyer.
The key difference from a cracked copy is accountability: a shared licence comes from a business you can identify, pay through normal channels and contact for support, and the software keeps receiving the vendor’s updates. A cracked copy comes from an unknown source, with no updates and no one to answer for what it contains.
What to check before buying any shared licence
- Official updates: confirm the licence receives the vendor’s updates and security patches.
- Activation method: ask how the licence is activated on your server and what the supplier installs to do it.
- Support: who you contact if the licence stops validating, and during what hours.
- Server changes: what happens if your IP address changes or you move servers.
- Company details: a real business with a published address and clear terms.
- Payment and renewal: billing cycle, renewal price and what happens if a payment is missed.
Tremhost licence prices
Prices in US dollars, as listed on Tremhost’s licence pages:
- cPanel & WHM: $5 a month for a VPS, $6 for a dedicated server, with unlimited accounts. Lifetime options: $190 (VPS) and $250 (dedicated).
- Plesk: $5 a month for a VPS, $6 for a dedicated server; bundles with CloudLinux, Imunify360 and LiteSpeed from $15 a month.
- CloudLinux: $6 a month, or $250 lifetime.
- Imunify360: $5 a month, or $190 lifetime.
- LiteSpeed: from $5 a month (2 cores).
Every licence and price is on the Tremhost licences page. Payment is in US dollars by EcoCash, InnBucks, ZimSwitch, Omari, Visa, Mastercard or cryptocurrency, and support runs Monday to Friday, 08:00 to 17:00 CAT.
If you are already running cracked software
- Assume the server may be compromised.
- Build a clean server from a fresh operating system image and install licensed software from the vendor’s installer.
- Restore website files and databases from backups, scanning them for malware first.
- Change every password and key: root, panel, database, email and FTP.
- Check your server IP against major blocklists and request removal once clean.
If a site on the server has already been hacked, Tremhost’s Armor SOS offers free same-day triage and then quotes the cleanup.
Frequently asked questions
Is a shared licence the same as a cracked one?
No. A cracked copy bypasses licensing with modified code. A shared licence is supplied, activated and supported by an identifiable licence provider, and the software receives official updates.
Can I install the licence on a server from another provider?
Yes, as long as you have root access. Choose the VPS or dedicated version to match your server.
Do I need a licence for every server?
Yes. Each server running the software needs its own licence.
Next step
Need a server to go with the licence? See Tremhost’s KVM VPS plans from $15 a month.
