HoganHost blog

[email protected]

How do I Disable Cookie IP validation in WHM?

Validate the IP addresses used in all cookie-based logins. This will limit the ability of attackers who capture cPanel session cookies to use them in an exploit of the cPanel or WebHost Manager interfaces. For this setting to have maximum effectiveness, proxydomains should also be disabled. Strict validation requires the current IP address and the cookie IP address to exactly match. Loose validation only requires they are in the same /24.

While accessing cPanel/WHM/Webmail you are getting the below error, then you can solve the issue by disabling Cookie IP validation in WHM.


  • cookie ip check: IP address has changed
  • Your IP address has changed. Please login again
  • Redirecting the cPanel again to login page


  1. Login to the Dedicated Server/Vps WHM as root user.
  2. Go to the path,

Home » Service Configuration » Tweak Settings

  1. Security >> Cookie IP validation >> Choose “disabled
  2. disabled — Does not validate IP addresses.
  3. loose — The access IP address and the cookie IP address must be in the same class C subnet.
  4. strict — The access IP address and the cookie IP address must match exactly. This is the default value
  5. Click Save.

Once disbaled “Cookie IP validation” option, it will allow the IP addresses to access the server without validating.

Leave a Comment

Your email address will not be published. Required fields are marked *