Identify the full username, assigned directory and any automated tools using it. Back up the directory before making destructive changes. Confirm that another authorised access method will remain available for future maintenance.

1. Open FTP Accounts in cPanel and find the intended additional user. Choose its Delete action.
2. Read the deletion options carefully. Choose the option that removes the FTP account only when the goal is to revoke access.
3. Do not select a home-directory deletion option unless you have independently confirmed that all files there should be permanently removed and have a verified backup.
4. Confirm the account removal, then remove its stored credentials from authorised client profiles and automation.
5. If access was compromised, review separate FTP users, SSH keys and hosting credentials too. Revoking one login does not revoke every other access method.

Try a new connection with the retired username to confirm it fails. Visit the website and inspect its files to ensure the directory remains intact.

Identify the separate FTP username and assigned path before deletion. The purpose is to revoke a login, not to remove the website the contractor worked on.

Review any option that also deletes the user's home directory. If that directory contains live site files or shared project content, leave file deletion unselected unless you have a verified backup and deliberately intend that removal. Keep the login and data decisions separate.

How do I confirm access was removed?

Start a new connection using the retired login and verify that it is no longer accepted. Then use an authorised account to confirm that the website files remain available and the site still works. Review deployment jobs that may depend on the removed login.

Also consider other credentials the contractor held, such as WordPress, Git or API access. Removing one FTP user does not establish that those separate routes are closed. Contact our team before proceeding if the directory ownership is unclear. Provide the username, permitted path and intended result, but keep passwords and private keys out of the support message.

If the wrong directory was deleted, stop further uploads and restore from the verified backup or contact support. Do not recreate empty folders and assume the application is recovered. The main system FTP account may not be removable as an ordinary additional account.

• Creating a restricted FTP account in cPanel
• Changing a separate FTP account password in cPanel
• Creating and downloading a full cPanel account backup
• Adjusting an FTP account storage quota in cPanel

• cPanel documentation