cPanel SEO: the settings in a hosting control panel that touch search, and where each one lives

cPanel has no button that improves rankings. What it gives you is the server side of SEO: the settings that decide whether search engines reach your pages over HTTPS, follow your redirects the way you meant, find your robots.txt and sitemap, get a fast response and receive honest error codes. Seven areas of the control panel do that work: Domains, SSL/TLS Status, Redirects, File Manager, Optimize Website, Error Pages and Raw Access. A newer eighth, Site Quality Monitoring, appears only when your hosting provider switches it on. Set those correctly once, check them after every change, and your content and links do the rest.

cPanel's documentation notes that your hosting provider can enable or disable each interface in WHM's Feature Manager. If a menu item below is missing, ask the host to turn it on.

The cPanel settings that touch search, in one table

cPanel interface	What it controls	What to check
Domains	Force HTTPS Redirect toggle per domain	On for every domain with a valid certificate
SSL/TLS Status	Certificates, including free AutoSSL ones	No domain listed as Expired, Expiring Soon or Unsecured
Redirects	301 and 302 redirects, www handling, wildcards	Permanent moves use 301
File Manager	robots.txt, sitemap and verification files	Files sit in the web root of the right domain
Optimize Website	Compression of text content	Compression on for HTML, CSS and JavaScript
Error Pages	Custom pages for status codes such as 404	The page still returns a 404 status
Raw Access	Download of server access logs	Which crawlers visit and what they get back

HTTPS: SSL/TLS Status and the Force HTTPS Redirect toggle

cPanel's AutoSSL issues Domain-Validated (DV) certificates for the domains on your account. The SSL/TLS Status interface lists every domain on your account with a filter for its state: Active, Expired, Expiring Soon, Unsecured, and Has AutoSSL Problems. The last one catches the common fault where a domain does not resolve to the server, so the certificate cannot be issued. Check it whenever you add a domain or move DNS.

A certificate alone does not move visitors or crawlers to HTTPS. That is the job of the Force HTTPS Redirect toggle in the Domains interface (cPanel, Home, Domains, Domains). cPanel's documentation says you can only enable it on a domain that has a valid SSL certificate, and that the toggle does not appear for aliases. Switch it on after the certificate shows as Active, then load the http:// version of a few pages and confirm they land on https://. For what HTTPS does and does not do for rankings, and how to move a site without losing its URLs, see our guide to Google, SEO and SSL.

Redirects: pick 301 for anything permanent

The Redirects interface (cPanel, Home, Domains, Redirects) offers two types. cPanel describes Permanent (301) as telling search engines a site has moved for good so they update their records, and Temporary (302) as a temporary move, for example during maintenance. Google's own redirect documentation explains the difference in the same terms: with a permanent redirect Google shows the new target in search results, and with a temporary one it keeps showing the source page, because the indexing pipeline does not treat a temporary redirect as a signal that the target should be the canonical URL.

So: a moved page, a renamed URL or an old domain gets a 301. A short outage gets a 302.

A few details in the interface trip people up:

• You cannot edit a redirect. cPanel says you must delete it and create it again.
• The destination needs a protocol. Enter https:// in full, or the redirect will not save as you expect.
• The www setting matters. "Redirect with or without www." catches both forms. "Only redirect with www." leaves the bare domain unredirected.
• Wild Card Redirect sends every file in a folder to the same file name in the new location. It is the right choice when you move a whole folder and keep the file names.
• HTTP to HTTPS is not done here. cPanel's own documentation points you to Force HTTPS Redirect in the Domains interface for that.

Test each redirect with a header checker or your browser's network panel, and confirm you see a single 301 hop to the final URL rather than a chain. Our page on the 301 permanent redirect covers the mistakes that cost the most.

robots.txt, sitemaps and verification files through File Manager

File Manager is where the small text files that search engines read actually live. cPanel calls the main document root public_html (sometimes www), and each addon domain has its own document root, which File Manager lets you choose under "Document Root for". Put each file in the root of the domain it belongs to.

• robots.txt. Google's documentation says the file must be named robots.txt, a site can have only one, and it must sit at the root of the host it applies to, for example https://www.example.com/robots.txt. A copy inside a subfolder is ignored. Turn on "Show Hidden Files (dotfiles)" in File Manager settings when you also need to see .htaccess.
• Sitemap. Google says you can host a sitemap anywhere, but unless you submit it in Search Console it only covers files under its own folder, which is why Google recommends the site root.
• Search Console verification. The HTML file upload method is the natural fit for cPanel: you upload the file Google gives you to the web root. Google notes that removing the file later removes your verification, so leave it in place. To verify a Domain property, which covers http, https and every subdomain, you add a TXT record instead, and cPanel's Zone Editor creates TXT records.

Speed: the Optimize Website interface

Optimize Website (cPanel, Home, Software) switches on compression through the Apache mod_deflate module. You can compress all content or only the MIME types you list, such as text/html text/plain text/xml, and cPanel saves the setting to a .htaccess file. Its documentation adds two useful notes: leave image formats out of the list, because JPG and PNG are already compressed, and PHP output is compressed through the zlib.output_compression setting in the MultiPHP INI Editor. If the interface is missing, your administrator has not enabled mod_deflate.

Compression is one piece of page speed. Caching, image sizes and the theme or plugins you run also shape speed, and those sit outside cPanel.

Error pages that still return the right status

The Error Pages interface lets you design a custom page for any HTTP status code, with your navigation and a search box, which is good for visitors who land on a dead link. The part that matters for search is the status code. Google's documentation says that when a page returns a 200 success code but shows an error message or an empty page, Search Console reports it as a soft 404. Keep the custom page served as a real 404, and check it with a header tool after you save.

Raw Access logs: see what crawlers actually get

Search Console tells you what Google reports. Raw Access logs show what your server did. The Raw Access interface lets you download each domain's current log as a .gz file and keep monthly archives, with a retention period you can set. Search the log for Googlebot and Bingbot, and look at the status codes they received. A run of 403, 404 or 5xx responses on pages you care about is a server problem to fix before any content work.

Site Quality Monitoring, where your host offers it

cPanel's Site Quality Monitoring watches a site for problems including low SEO scores and performance issues. It has tabs for crawling (dead links, missing images and files, oversize files) and monitoring (availability, performance, SEO, content, technical and security), scores each area from 0 to 100, and colours issues green, yellow or red. cPanel's requirements: version 110 or 116 and later, a sign-up and subscription, and the host must enable it. Treat its SEO score as a to-do list rather than a target.

Questions about cPanel SEO

Does cPanel have an SEO tool?

Not a ranking tool. cPanel gives you the server settings search engines depend on, and some hosts add Site Quality Monitoring, which includes SEO checks. Keyword research, content and links happen in your CMS and in Search Console.

Should I use a 301 or 302 redirect in cPanel?

Use 301 for any permanent move. Google treats a 301 as a sign to show the new URL in results. Keep 302 for genuinely temporary situations, such as maintenance.

Where do I put robots.txt in cPanel?

In the document root of the domain, usually public_html for the main domain, so it loads at yourdomain.com/robots.txt. Addon domains have their own document root.

Why can I not switch on Force HTTPS Redirect?

cPanel only allows it on a domain with a valid SSL certificate, and not on aliases. Check SSL/TLS Status for AutoSSL problems first, most often a domain that does not point at the server.

The same log file shows a new kind of visitor

When you open a Raw Access log you will see more than Googlebot. AI crawlers such as OpenAI's GPTBot and Apple's Applebot also request pages, and the robots.txt you keep in File Manager is the file that tells them what they may read. Whether an assistant then names your business when someone asks for a recommendation is a separate question from whether its crawler got a 200. AI Knows Us tracks that second question: which assistants mention a business, and which pages they draw on when they do.