Terminal, SFTP, and SSH access

Web terminal

The Terminal tab appears when the primary site account has SSH terminal access enabled. It opens an interactive Bash shell as the unprivileged site user and starts in the website root.

The browser does not receive the Linux account password. Closing or disconnecting the terminal ends the shell and its process group. Port, socket, agent, X11, and tunnel forwarding are disabled.

For Laravel, Core Panel installs art as a short form of php artisan .

Primary and additional accounts

Use Overview for the primary account and SFTP users for additional developer or collaborator accounts. Usernames are immutable and begin with cp_ .

Each account can use:

• An SSH public key.
• A password of at least 12 characters.
• Both methods as alternatives.
• Optional SSH terminal access.

SFTP-only accounts are confined to their assigned site. Terminal-enabled users are not chrooted because a shell needs system programs and libraries; Unix permissions still constrain writes, but normal world-readable server paths may be visible.

Example connections:

sftp -i ~/.ssh/id_ed25519 cp_developer@SERVER-IP
ssh -i ~/.ssh/id_ed25519 cp_developer@SERVER-IP

Disable an account to preserve its settings while blocking login. Delete an account only when it is no longer required. Core Panel can copy saved passwords when recoverable, rotate credentials, share access information, and retry or repair failed account provisioning.