Best Free cPanel Alternatives for Linux VPS

Wich cPanel alternatives you fit install for VPS today

The free cPanel alternatives wey you fit install for Linux VPS today na Virtualmin, ISPConfig, CyberPanel, HestiaCP, CloudPanel and Froxlor. Each one dey install from script for fresh server, and each one no get some things wey cPanel get. The real choice na which missing part you fit manage without, and how many hours you go spend to move.

cPanel na two programs. WHM na the server side. cPanel na the side for each account. Together, dem dey manage Apache virtual hosts (vhosts), PHP versions, MySQL users and grants, DNS zones, Exim and Dovecot mail, FTP accounts, cron jobs, certificates and backups for each account. Panel dey write and manage the configuration files for your server, instead make e just sit on top of dem as web interface. Na why every project below tell you make you start with fresh operating system.

Wetin cPanel cost, and where the real cost dey hide

[
  {
    "plan": "Solo",
    "usd_per_month": 29.99,
    "accounts_max": 1
  },
  {
    "plan": "Admin",
    "usd_per_month": 35.99,
    "accounts_max": 5
  },
  {
    "plan": "Pro",
    "usd_per_month": 53.99,
    "accounts_max": 30
  },
  {
    "plan": "Premier",
    "usd_per_month": 69.99,
    "accounts_max": 100
  }
]

Na the published monthly prices per server be these, as dem dey for cPanel pricing page for August 2026. Solo licence cover one account at 29.99 USD every month. Premier cover 100 accounts at 69.99 every month, and dem go bill extra accounts separately. If you pay yearly, the price go reduce small.

Na the licence be the number wey everybody dey mention. But na the hours decide the real cost, and dem price those hours further down this page.

Control panel dey need how much RAM?

Two different numbers matter here, and if you mix dem up, na why people dey put full panel for 1 GB VPS, then wonder why the box dey use swap.

[
  {
    "label": "Virtualmin, mini install",
    "min_ram_gb": 1
  },
  {
    "label": "HestiaCP, no mail filtering",
    "min_ram_gb": 1
  },
  {
    "label": "CloudPanel",
    "min_ram_gb": 2
  },
  {
    "label": "Coolify",
    "min_ram_gb": 2
  },
  {
    "label": "Virtualmin, full stack",
    "min_ram_gb": 4
  }
]

Those na published minimums wey each project own documentation provide, no be measurements from idle box. ISPConfig, CyberPanel and Froxlor no publish any figure, so dem no dey chart instead of us guessing. Read the first row and last row together: the same software dey ask for 1 GB without mail and 4 GB with am.

The second number na wetin the services under the panel dey consume, and e pass the panel itself by far. Virtualmin low memory page show the cost of each part.

[
  {
    "label": "ClamAV virus scanning",
    "typical_ram_mb": 2048
  },
  {
    "label": "SpamAssassin",
    "typical_ram_mb": 1024
  },
  {
    "label": "MySQL or MariaDB",
    "typical_ram_mb": 400
  },
  {
    "label": "Apache",
    "typical_ram_mb": 250
  },
  {
    "label": "PHP",
    "typical_ram_mb": 100
  },
  {
    "label": "The panel itself",
    "typical_ram_mb": 30
  }
]

ClamAV dey listed as 2048 MB and SpamAssassin as 1024 MB, while the panel process dey around 30 MB. The panel na the cheapest thing for the server. Mail filtering na the expensive part, so panel wey no get mail server go run fine for 2 GB, while stack wey get mailboxes, spam filtering and virus scanning dey need 4 GB. If you give am less, e go compete with your PHP workers for memory throughout the day.

Virtualmin: the closest match to cPanel and WHM

Virtualmin dey run on top Webmin and e get the same structure wey cPanel get: server view for admin, per-domain view for site owner, and resellers on top of dem. Na the only option for here wey get documented importer for cPanel account archives.

sudo sh -c "$(curl -fsSL https://download.virtualmin.com/virtualmin-install)" -- --bundle LAMP

Replace Nginx with --bundle LEMP. Add --type mini for the light install. E no include local mail, spam and virus filtering, local DNS, FTP, and Jailkit, but e still keep the complete web stack. The installer support Red Hat Enterprise Linux, AlmaLinux and Rocky Linux 8, 9 and 10, Debian 12 and 13, and Ubuntu 22.04 and 24.04 LTS (long term support). Anything else dey outside wetin the automated script cover.

Import cPanel account archive from command line.

virtualmin migrate-domain --source /root/backup/example.com.tgz --type cpanel --domain example.com --user exampleuser

The command suppose report the new virtual server, and e go then appear for the domain list. When e fail, na usually the archive cause am: partial cPanel backup, or backup wey much newer cPanel write and the importer no understand, no dey restore cleanly. The same tool fit take Plesk and DirectAdmin archives with --type plesk or --type directadmin.

Wetin e no do well: the interface na Webmin own, so one page fit get forty form fields without any obvious default. If you don already work with Webmin for Ubuntu 24.04, you know how e be. Virtualmin also dey available as free GPL edition and paid Pro edition, and the free interface dey advertise Pro features inside the interface, wey some people find irritating.

ISPConfig: one panel, several servers

ISPConfig na the answer when web, mail and DNS dey for different machines. One control panel dey drive all of dem, and no other project for this page dey do am free. The README get piped installer. Download am first so you fit read am and list the flags wey e support.

curl -fsSL https://get.ispconfig.org -o ispconfig-install.sh
less ispconfig-install.sh
sudo sh ispconfig-install.sh --help
sudo sh ispconfig-install.sh

The autoinstaller support Debian 11 and 12 plus Ubuntu 22.04 and 24.04, but na x86_64 only. ARM no dey supported, so arm64 VPS rule out ISPConfig before you start. The installer go reconfigure the whole server, so you suppose use am for fresh operating system and nothing else.

The things wey e no do well: no cPanel importer dey, so you go move every site and mailbox by hand. The interface plain and dense, and e assume say you already know wetin vhost, jailed shell user, and DNS zone mean.

CyberPanel: OpenLiteSpeed, and security record wey worth reading

CyberPanel dey built around OpenLiteSpeed, and na the fastest among these panels to get cached WordPress site running. Install am as root.

sudo su -
sh <(curl https://cyberpanel.net/install.sh || wget -O - https://cyberpanel.net/install.sh)

Run that line from bash. The <(...) form na process substitution, wey be bash feature, so plain sh or dash shell go reject the line with syntax error before anything download. Supported systems na Ubuntu 24.04, 22.04 and 20.04, AlmaLinux 8, 9 and 10, Rocky Linux 8 and 9, RHEL 8 and 9, CloudLinux 8 and CentOS 9, for x86_64.

E get cPanel importer. Put the account archives for one directory, then point the importer go there.

/usr/local/CyberCP/bin/python /usr/local/CyberCP/plogical/cPanelImporter.py --path /home/backup

The importer first dey print the path of its log file. If site no show for the panel afterwards, that log go name the account and the step wey fail.

The serious problem no be interface taste. For October 2024, attackers mass exploited unauthenticated remote code execution flaw for CyberPanel 2.3.6 and 2.3.7, wey dem track as CVE-2024-51378. Attackers run commands as root over the network and encrypt the servers with PSAUX ransomware. Reports for that time count more than 22,000 exposed instances, and the flaw enter CISA catalogue of known exploited vulnerabilities. The lesson apply to every panel here: control panel na root shell wey get login form for front. No leave its port open to the whole internet. Restrict am to your own address with ufw rule for the VPS, or reach am through WireGuard tunnel wey you host yourself, and patch am the week wey release land. OpenLiteSpeed also dey treat .htaccess differently from Apache. E apply rewrite changes when server restart, instead of for each request, so application wey rewrite that file at runtime go behave differently from how e behave on cPanel.

HestiaCP: the simplest full stack

HestiaCP na maintained fork of VestaCP, and e na the shortest way to get working web, mail and DNS box wey get clean interface. Run the installer as root for fresh system.

sudo -i
wget https://raw.githubusercontent.com/hestiacp/hestiacp/release/install/hst-install.sh
bash hst-install.sh

The script go ask the questions interactively, then e go print the panel URL and admin login for the end, and offer reboot. HestiaCP support Debian 11 and 12 and Ubuntu 22.04 and 24.04, for x86_64 and arm64. The stated minimum na 1 core, 1 GB of RAM and 10 GB of disk when SpamAssassin and ClamAV dey off. That arm64 support important if your VPS na ARM instance, because e remove ISPConfig and CyberPanel from the options and leave Hestia.

Wetin e no do well: no documented cPanel importer dey, so you go move sites and mailboxes by hand. E manage one server, no be fleet. The default layout put Nginx in front of Apache. This dey okay until you dey debug redirect loop and need find out which one of the two create am.

CloudPanel: fast, and e no dey do mail

CloudPanel na Nginx only, with short interface and sensible PHP defaults. Check the licence before you commit. E free of charge and dem publish the code, but na source available rather than open source under OSI approved licence, and na one company dey develop am. This na real difference between am and the others for this page.

curl -sS https://installer.cloudpanel.io/ce/v2/install.sh -o install.sh
echo "8146dbe0a488e7088b04071b0c34d59aa0ab1fe9dcec382d395fd155c9e6c476 install.sh" | sha256sum -c
sudo DB_ENGINE=MYSQL_8.4 bash install.sh

The checksum line must print install.sh: OK before you run anything. That hash dey change with every installer release, so copy the current one from CloudPanel own installation page on the day you install, no be from any article, including this one. Use DB_ENGINE=MARIADB_11.4 if you prefer MariaDB. Supported systems na Ubuntu 22.04, 24.04 and 26.04 and Debian 11, 12 and 13, for x86 and ARM64, with stated minimum of 1 core, 2 GB of RAM and 10 GB of disk.

Wetin e no do well: no mail server and no DNS server. If you dey comot from cPanel and your users get mailboxes for there, CloudPanel no replace wetin you get before. Mail go then become separate machine, like self-hosted Mailcow mail server, and DNS go move to your registrar or DNS provider.

Froxlor: light, and e expect make you sabi your stack

Froxlor na the smallest among dem. E dey manage customers, domains, PHP-FPM pools and quotas, and e dey write configuration for services wey you install and tune by yourself. Install am from the project's apt repository.

sudo apt -y install apt-transport-https lsb-release ca-certificates curl gnupg
sudo curl -sSLo /usr/share/keyrings/deb.froxlor.org-froxlor.gpg https://deb.froxlor.org/froxlor.gpg
sudo sh -c 'echo "deb [signed-by=/usr/share/keyrings/deb.froxlor.org-froxlor.gpg] https://deb.froxlor.org/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/froxlor.list'
sudo apt update && sudo apt install froxlor

For Ubuntu, change deb.froxlor.org/debian to deb.froxlor.org/ubuntu for that source line. Froxlor documentation cover Debian 11, 12 and 13 plus Ubuntu 22.04 and 24.04, with PHP 7.4 up to 8.5 and MySQL 8.4 or MariaDB 11.7 for the current documentation. After the package install, finish setup for browser, then point Froxlor to Apache or Nginx.

Wetin e no do well: e give you the least help. No importer dey, and no bundled mail stack wey you no install dey. If you dey comfortable building LAMP stack for Ubuntu 24.04 by hand, Froxlor na customer-facing layer on top of that work. If you no dey, e go feel unfinished.

The two honest answers wey no be panel

The first one na reverse proxy plus compose files. Each application dey run as container, one file for each app, while proxy wey dey front dey terminate TLS (transport layer security) and route traffic based on hostname. Na Traefik wey dey front several Docker Compose apps, built on the Compose basics for VPS. E good for one operator wey dey run their own applications. E no good for customers wey need log in and change their own PHP version.

The second one na platform as a service (PaaS) style panel. Coolify dey deploy from git repository, build the image, and manage the proxy for you.

curl -fsSL https://cdn.coollabs.io/coolify/install.sh | sudo bash

Coolify need 2 cores, 2 GB of RAM, and 30 GB free disk. After the script finish, na port 8000 the interface dey listen on. Na deployment tool e be, so e no get mailboxes and e no get per-customer hosting accounts for the cPanel meaning. The comparison of Cloudron, CasaOS and Coolify explain where each one dey fit.

If na because other people dey log in and manage their own site and mailbox you get cPanel, neither answer fit. For that case, your options na Virtualmin, ISPConfig, or HestiaCP.

Questions about migration wey go decide whether you fit really switch

E dey import cPanel backups? Virtualmin and CyberPanel get documented importers. ISPConfig, HestiaCP, CloudPanel and Froxlor no get them, so you go move files, databases and mailboxes by hand. Even clean import dey carry content, no be configuration: document roots, databases and mail accounts go come across, but PHP handler settings, custom Apache directives and anything wey you tune for WHM no go come.

E dey handle mail? Virtualmin for full install, ISPConfig, HestiaCP, CyberPanel and Froxlor all dey manage mailboxes. CloudPanel and Coolify no dey. Mail na the expensive part of any migration. Dem store mailbox passwords as hashes, so dem no dey transfer as plain text and every user go need reset password. You need copy messages with IMAP (internet message access protocol) sync tool like imapsync. Mail authentication records, SPF, DKIM and DMARC, must correct for the new server before you switch over. Otherwise your mail fit land for spam folders from day one.

E dey handle DNS? Virtualmin, ISPConfig, HestiaCP and CyberPanel dey run authoritative nameserver for you. CloudPanel and Coolify no dey. Plenty people wey dey run small number of sites keep DNS for their registrar or DNS provider. That one remove the question and one more listening service from the server.

Wetin go happen to your existing vhosts? Dem dey at risk, na why every installer here dey recommend fresh operating system. These scripts dey write inside web server, database and mail configuration directories, then restart those services. So if you run one for server wey already dey host sites, e fit overwrite the configuration wey those sites depend on. Build am for second VPS, move the sites, test with hosts file entry, then move DNS. Reduce the time to live (TTL) for your records to 300 seconds one day before the switch, and keep the old server running for one week after the switch.

How certificates go be? Every panel here dey automate Let's Encrypt issuance and renewal. If you remove the panel, that work become your responsibility. You go need Certbot with Nginx on Ubuntu 24.04 and renewal timer wey you check once every quarter.

Cost wey nobody dey write down

Licence na the small number. The move na the big one. For one WordPress site, the work fit be one evening: copy files, dump and import the database, reissue the certificate, then change DNS. For twenty customer accounts with mailboxes, na one week of evenings, and the work wey remain after the move go last pass the move itself. You go handle the support questions wey cPanel interface used to absorb. You go answer “where my email password dey” for everybody wey their mail client stop connecting. From that time, na you own the panel security updates, and CVE-2024-51378 show wetin that ownership fit look like for one bad week.

Two habits fit make the remaining work shorter. Give every site its own system user instead of running everything under one account. Na the practice for least privilege users for VPS, and every panel here dey do am by default. Also restore one site from your new backups before you switch DNS, no be after.

None of this mean say cPanel na bad software. E mean say the licence buy support contract and twenty years of hosting industry defaults. If na your own sites you dey run for your own server, na that support desk you don already dey act as.

FAQ

Which free cPanel alternative fit import cPanel backup?

Virtualmin and CyberPanel na the two wey get documented importers. For Virtualmin, you run virtualmin migrate-domain --source /root/backup/example.com.tgz --type cpanel --domain example.com, and the same tool fit accept Plesk and DirectAdmin archives. For CyberPanel, you put the archives for one directory, then run the bundled importer for /usr/local/CyberCP/plogical/cPanelImporter.py with the --path flag. Both fit restore content, but dem no restore configuration. So you still need redo PHP handler settings, custom Apache directives and WHM tuning by hand.

How much RAM control panel need for VPS?

The panel process small, around 30 MB according to Virtualmin own estimate. Na the stack underneath am dey use the memory, and mail filtering dey take the most. ClamAV dey published at around 2 GB, while SpamAssassin dey around 1 GB. Panel wey no get mail server, like CloudPanel, fit run for 2 GB VPS. Full hosting stack with mailboxes, spam filtering and virus scanning need 4 GB. For 1 GB, you either run mini install with mail turned off, or add swap and accept say the machine go use am.

I need control panel for VPS at all?

No. If na only you dey log in, panel mostly just add attack surface because na privileged web application wey dey listen on a port. Reverse proxy with one Compose file for each application fit do the same work with less exposed software. Panel make sense when other people need manage their own sites, mailboxes and databases without shell access. Building that kind interface by yourself go take much more work than running one.

I fit install panel for server wey already dey host sites?

Treat am as unsupported. Virtualmin, ISPConfig, CyberPanel and HestiaCP all tell you make you start with fresh operating system because their installers write web server, database and mail configuration, then restart those services. If you install am for live server, e fit overwrite the configuration wey your sites depend on, and you no get undo. Build the panel for new VPS, migrate sites one by one, then move DNS after the new server dey serve the same pages.

Which cPanel alternatives dey handle email?

Virtualmin for full install, ISPConfig, HestiaCP, CyberPanel and Froxlor all manage mailboxes and the DNS records wey go with dem. CloudPanel and Coolify no dey handle mail. Decide this first if na mailboxes make you dey use cPanel, because e remove two of the seven options here. Mail na the part of migration wey dey take the longest.