Sometimes you need to let a developer or agency work directly on your hosting account, and that means giving them SSH (secure shell) access. SSH is powerful: whoever holds the key can reach every file, database, and mailbox in the account from the command line. This guide explains what that access really means, how Ultra Web Hosting keeps it contained with an IP lock, an automatic expiry, and instant revocation, and how to request it in a couple of minutes using our access request form.
Request It, We Set It Up, It Expires On Its Own
You do not hand over your password. You tell us who needs access and for how long, and we issue a separate key that only works for that person and only for that window.
- Fill in the short form on the SSH access request page
- Give the account username, the person's email, their IP address, and a duration
- We generate a key, lock it to that IP, set it to expire, and email it to them
- Revoke it any time, and it removes itself automatically when the time is up
SSH Is Full Access to Your Account
An SSH key gives the holder complete command-line control of this one hosting account. They can read, change, download, or delete any file, database, or email in it. The safeguards below limit where and how long the key works, but they do not limit what the holder can do inside your account while it is active. Only grant access to someone you trust.
- It reaches every site, database, and mailbox on the account
- It is isolated to your account and cannot touch other customers or the server
- It is still full access to your own data, so choose who you trust carefully
This process is for shared and reseller hosting accounts. Full root access on a VPS or dedicated server is a separate, higher level of access: complete the Shell Access Request Form and submit it with a support ticket.
01. What Temporary SSH Access Is
SSH, short for secure shell, is a way to log in to your hosting account from a command line instead of a control panel or an FTP program. Developers use it to run commands, manage files in bulk, use Git, run Composer or npm, and work far faster than clicking through a dashboard. For more on connecting over SSH in general, see our SSH access article.
Temporary SSH access is the same thing with three limits added on top: it only works from one IP address, it stops working on a date you choose, and you can switch it off at any moment. That makes it a safe way to let an outside developer help without giving them your login or leaving a door open forever.
02. When You Might Need It
Common reasons customers request temporary SSH access:
- You hired a freelance developer or agency to build or fix something
- A plugin or theme author needs to debug an issue on the live site
- You are moving a site in or out and the other party needs shell access
- You personally want command-line access to your own account
If the work is only for yourself, you can request access for your own IP address in the same form. You do not need a separate developer to use this.
03. How We Keep It Contained
Every key we issue for temporary access comes with four safeguards built in:
- Locked to one IP address. The key only works when the connection comes from the exact address you specify. A copy of the key is useless to anyone connecting from anywhere else.
- Automatic expiry. You choose the duration, and the key stops working on that date on its own, even if nobody removes it.
- Instant revocation. Ask us to cut it off at any time and the key stops working immediately.
- Isolated to your account. Our servers run CloudLinux CageFS, which walls each account off from the others. The key can never see or reach other customers or the underlying server.
These safeguards protect other customers and the server, and they shrink the damage a leaked key could do. They do not stop the person you authorize from changing or deleting your own account's data while the access is live. That is why the only real control is trusting who you grant access to.
04. How to Request Access
Use the SSH access request page. It is a short wizard that stays in your browser and builds a ready-to-send support ticket. You will provide:
- Who it is for. Yourself, or a developer or contractor you are authorizing.
- Your name and an email. The email is where the key and connection details are sent, so use the inbox of whoever will connect.
- The hosting account username. Your cPanel username.
- The connect-from IP address. The single address the key will work from. If it is for a developer, use their IP. They can find it at tools.ultrawebhosting.com/my-ip.
- How long access is needed. A day, a week, a month, or a custom window.
- A risk confirmation. A box confirming you understand this grants full access to the account.
When you finish, the page shows the ticket text and a button that opens our support form with your name, email, and subject already filled in. Paste the text into the message and submit it. Nothing is sent to us until you open that ticket yourself.
05. What Happens After You Submit
Our support team reviews the request, confirms the account, and sets up the access. We generate a fresh key for that specific request, lock it to the IP you gave, and set it to expire at the end of the window. We then email the key to the address on the request, along with the exact command to connect, already filled in with the server name, port, and key file. The person just saves the key and pastes the command from the email.
We do not keep a copy of the private key after it is sent. If it is ever lost, we issue a new one rather than resending the old.
For more on connecting and moving files once access is set up, see SSH access: how to connect to your hosting account and using Linux to SSH and SCP files over to your hosting account.
06. Sharing and Protecting the Key
Because the key is locked to a single IP address, a stolen copy will not work from anywhere else. Even so, treat it like a password:
- Do not post it in a public chat, forum, or a ticket with a third party
- Keep the key file on the machine that will connect, with restricted permissions
- If the developer's IP address changes, let us know so we can update the lock
- When the work is done, ask us to revoke it rather than waiting for expiry
07. Ending Access Early
You are never locked into the full window. Open a ticket and ask us to revoke the access, and the key stops working right away. This is the right move the moment a project wraps up, a contract ends, or you simply change your mind. If you do nothing, the access still removes itself automatically when the time you chose runs out.
Request the shortest window that fits the job. You can always ask for an extension, and a short window means less time for a forgotten key to sit around.
08. Frequently Asked Questions
Do I have to give the developer my cPanel password?
No. That is the point of this process. We issue a separate SSH key for the developer, so your own password is never shared and stays under your control. You can revoke the developer's key later without changing anything about your own login.
What can someone do with SSH access to my account?
Everything you can do from the command line: read, edit, upload, download, or delete any file, run scripts, and reach the databases and email in the account. It is full control of your account, which is why you should only grant it to someone you trust. It cannot reach other customers or the server itself.
How do I find the IP address to enter?
If the access is for you, the request form can fill in your current address automatically. If it is for a developer, ask them to visit tools.ultrawebhosting.com/my-ip and send you the address it shows. That is the single address the key will be allowed to connect from.
What happens when the time runs out?
The key stops working on its own at the end of the window you chose, with no action needed from you. You can also ask us to revoke it early at any time, or request an extension before it expires.
Is temporary SSH access safe?
The access is locked to one IP address, expires automatically, can be revoked instantly, and is isolated to your account by CloudLinux CageFS, so it cannot affect other customers or the server. Those limits make it much safer than sharing a password, but while it is active the holder still has full access to your own account data, so only grant it to someone you trust.
