DreamHost Orders Mandatory Password Changes After File Manager Outage

DreamHost, one of the longer‑standing web‑hosting providers, has announced that all customers with email, FTP or SFTP accounts must reset their passwords immediately. The directive follows an internal incident that temporarily broke connections to the company’s File Manager interface, a web‑based tool used by thousands of users to upload and organize website files.

The disruption, first reported by security news outlet BleepingComputer, manifested as intermittent failures when users attempted to open the File Manager console. DreamHost’s technical team traced the problem to a backend service that handles authentication tokens for the interface, prompting a shutdown of the feature while the issue was examined.

Because the same authentication subsystem also supports email and FTP/SFTP services, DreamHost decided that a universal password reset was the safest mitigation. By invalidating existing credentials, the company aims to prevent any potential exposure of login data that could have been logged or intercepted during the outage. The reset applies to all affected accounts regardless of plan type.

Customers will receive an automated email prompting them to create new passwords for their email and FTP/SFTP accounts. The communication includes step‑by‑step instructions and a link to a secure password‑reset portal. DreamHost has warned that until the reset is completed, users may experience brief login failures, but normal service should resume once the new passwords are in place. Support channels remain open for users encountering difficulties.

Founded in 1997, DreamHost operates a diverse portfolio of shared, VPS, dedicated and cloud hosting solutions and has built a reputation for emphasizing privacy and open‑source technologies. The company’s response aligns with industry best practices, where swift credential rotation is standard after any suspected breach or technical fault that could affect authentication mechanisms.

Looking ahead, DreamHost says it is monitoring the environment for any residual issues and will restore full File Manager functionality as soon as stability is confirmed. Users are encouraged to enable two‑factor authentication where available and to follow general security hygiene, such as using unique, strong passwords across services. The incident serves as a reminder that even well‑established hosting platforms can experience technical glitches that necessitate rapid security actions.