SSH Password Security Updates

We're introducing stronger password checks and a new password generator to help protect your services and data. All customers must updated their SSH password by December 15, 2026.

SSH and SFTP/FTP passwords

The Change Password option for SSH will generate a random 24-character password containing letters and numbers. This password is shared by SSH and SFTP/FTP. Symbols are intentionally excluded to avoid compatibility issues with FTP links and scripts.

Application passwords, HTTP/proxy passwords, your UCP login and SSH keys are unaffected by this change.

Transition period: November 6–December 15, 2026

During this period, you can generate a password or use Choose Your Own Password, provided it scores Strong or above.

Until you generate a password, your UCP service page will display an “Update your SSH password by December 15, 2026” reminder.

On December 15, 2026, we will forcibly replace any SSH password that does not meet the new requirements. From that date, generating a password will be the only option for SSH and SFTP/FTP.

Stronger checks for newly set passwords

We’re also introducing a password strength meter across the UCP. New passwords must score Strong or above.

Common passwords, predictable patterns, and details such as your username, email address or app name can reduce the score. A long, unique passphrase can meet the requirement without symbols.

If you encounter any issues, or your newly generated password does not work, please contact our support team for assistance.

Best regards,

The Ultra.cc Team