Changing your VNC console password

You change the Hostworld console VNC password in Virtualizor. Open Virtualizor from your Hostworld client area, set a new VNC password on your VPS management page, then stop and start the VPS from the panel for the change to take effect. If you run your own VNC server inside the OS, that uses its own password which you change with tigervncpasswd inside AlmaLinux 9 or Ubuntu 24.04.

Before you start

• Know which VNC you are changing. There are two distinct things:
  • Hostworld console VNC in Virtualizor. This is the out‑of‑band console provided by us for your VPS. Change this in the Virtualizor panel.
  • In‑guest VNC server that you install and run inside the OS, for example TigerVNC. Change this inside AlmaLinux or Ubuntu with tigervncpasswd, as the user who owns the VNC session.
• You must power cycle the VPS after changing the console password. Virtualizor applies the new VNC console password only after you stop, then start, the VPS from the panel. A soft reboot is not enough.
• Avoid the destructive action in Virtualizor. Do not click OS Re‑Install for any of this. Re‑install OS creates a fresh VPS with no data. Use the VNC Password function on the VPS management page.
• If you do not see a VNC option in Virtualizor, VNC is not enabled for that instance type. Virtualizor’s documentation notes that the VNC icon not appearing means it is disabled on the admin side, and that OpenVZ does not support VNC.
• Client‑area login is separate. Your WHMCS login at portal.hostworld.uk is not your VNC password. If you cannot reach the client area to open Virtualizor, use the Forgotten Password link on the WHMCS login page and complete the email verification step before setting a new password.
• Password rules that catch people out in TigerVNC. Only the first eight characters of a TigerVNC password are significant. Minimum length is six. The password file is obfuscated, not strongly encrypted, and vncpasswd sets strict owner‑only permissions for you.
• Transport security. Classic VNC is not always encrypted. Red Hat recommends tunnelling through SSH if your client lacks encryption. TigerVNC can enforce encrypted security types such as TLSVnc or X509Vnc in its server configuration.
• Ubuntu GNOME Remote Desktop is separate. On Ubuntu 24.04, GNOME Remote Desktop often uses RDP. Its credentials are set in Settings or with the grdctl command and are unrelated to any VNC password.

Step 1: Log in to your Hostworld account

Purpose: you need the Hostworld client area to open Virtualizor.

• Go to https://portal.hostworld.uk/ and sign in to your WHMCS account.
• If you have forgotten your password, click Forgotten Password on the WHMCS login page. WHMCS sends a verification email. Open that email and follow the link before setting a new password. Without completing the email step you will not be able to change the password.

Step 2: Open Virtualizor from the client area

Purpose: reach your VPS controls. Hostworld uses Virtualizor for VPS management.

• From the Hostworld client area, open the Virtualizor panel for your VPS. If you do not see the link, look for a button or link that opens the VPS control panel, then select the VPS you want to manage.

Step 3: Set a new VNC console password in Virtualizor

Purpose: change the out‑of‑band console password that Virtualizor prompts for when you launch the VNC console.

• Open your VPS management page in Virtualizor.
• Find and select the VNC Password option.
• Enter and save your new VNC password.

Do not use OS Re‑Install for this. Re‑install OS wipes the VPS and creates a fresh instance.

Step 4: Stop, then start the VPS in Virtualizor

Purpose: apply the new console password. Virtualizor only applies the change after a full power cycle from the panel.

• Stop the VPS from within Virtualizor. Wait until the status shows that it is powered off.
• Start the VPS from the same panel.

If you skip this step, the old password may still work in the console and cause confusion.

Step 5: Test the Hostworld console

Purpose: confirm you can access the console with the new password.

• Launch the VNC console from your VPS page in Virtualizor.
• Enter the new password you set in Step 3.

If you cannot see any VNC option on the VPS, VNC is not enabled for that instance type. See Step 6.

Step 6: If the VNC option is missing in Virtualizor

Purpose: confirm the limitation and request help if you need VNC console access.

• Virtualizor’s end‑user documentation states that if the VNC icon is not present, VNC is disabled on the admin side. It also notes that OpenVZ does not support VNC.
• If you require VNC console access for your Hostworld VPS and do not see it, open a support ticket. Tell us the VPS name and what you are trying to do so we can advise.

Step 7: Change the password for an in‑guest VNC server (TigerVNC)

Purpose: update the password used by a TigerVNC server that you installed inside AlmaLinux 9 or Ubuntu 24.04. This is separate from the Hostworld console in Virtualizor.

Run this as the user who owns the TigerVNC session. The command writes the password to that user’s configuration directory and sets strict permissions.

AlmaLinux 9 and Ubuntu 24.04: set or change a TigerVNC password

What this does: tigervncpasswd prompts for a new VNC password and writes it to $XDG_CONFIG_HOME/tigervnc/passwd. If XDG_CONFIG_HOME is not set, it writes to ~/.config/tigervnc/passwd. The password is obfuscated and only the first eight characters are significant. Minimum length is six.

tigervncpasswd

If your system provides the command under the older name, the equivalent is:

vncpasswd

• Run it as the intended desktop user, not as root, unless your VNC server runs as root.
• Repeat the command for each user that runs their own VNC session.

AlmaLinux 9: note on multi‑user server mapping

What this involves: with multi‑user TigerVNC on the RHEL 9 family, displays are mapped to users in /etc/tigervnc/vncserver.users. Each mapped user still needs to run vncpasswd or tigervncpasswd themselves to create their own password file under ~/.config/tigervnc/.

• Update /etc/tigervnc/vncserver.users to map display numbers to the correct usernames according to your setup.
• Ask each mapped user to run tigervncpasswd once they can log in.

Ubuntu 24.04: GNOME Remote Desktop (RDP) credentials are separate

What this does: on Ubuntu 24.04, GNOME Remote Desktop supports RDP and, in some builds, VNC. For RDP mode, you set credentials in Settings or with the grdctl tool. This has no effect on TigerVNC or the Hostworld console.

To set RDP credentials with grdctl:

grdctl rdp set-credentials USERNAME PASSWORD

• This command sets the username and password used for RDP connections to GNOME Remote Desktop.
• Replace USERNAME and PASSWORD with the values you want to use for RDP.

Step 8: Protect transport for in‑guest VNC

Purpose: prevent interception of your session and credentials.

• Tunnel VNC through SSH if your client does not support encryption. Red Hat’s guidance is to use an SSH tunnel so VNC traffic travels inside an encrypted channel.
• Use TigerVNC’s encrypted security types where possible. TigerVNC supports TLS‑based modes such as TLSVnc and X509Vnc. You can enforce these in the TigerVNC server configuration.

The above affects in‑guest VNC servers you run inside AlmaLinux or Ubuntu. It does not change how the Hostworld Virtualizor console works.

Step 9: Troubleshoot common problems

• The Virtualizor console still prompts for the old password. Go back to Virtualizor and stop the VPS, then start it. The new password takes effect only after a full power cycle from the panel.
• I clicked the wrong thing and reinstalled the OS. Virtualizor’s Re‑install OS action is destructive. If this has happened, the instance has been recreated and the data in the previous installation is not present. If you need help confirming what was done, open a support ticket.
• TigerVNC is rejecting my long password. Only the first eight characters are used. Ensure those eight characters are correct and strong enough. The minimum is six characters, so aim for eight unpredictable characters and then rely on transport encryption for strength.
• Where is my TigerVNC password file. It is stored per user at $XDG_CONFIG_HOME/tigervnc/passwd, or at ~/.config/tigervnc/passwd if the XDG variable is not set. The file is obfuscated and has strict, owner‑only permissions set by the password tool.
• I cannot see any VNC option in Virtualizor. That indicates VNC is disabled for your plan or instance type. Virtualizor also notes OpenVZ does not support VNC. If you need VNC console access for your Hostworld VPS, open a support ticket.
• I cannot reach the Hostworld client area to open Virtualizor. Use Forgotten Password on the WHMCS login page at portal.hostworld.uk. Check your email for the verification link and complete that step before you try to set a new password.

What next

• If your goal was emergency console access for recovery, plan how you will harden or automate access next time. Review in‑guest remote access, including RDP on Ubuntu or TigerVNC on AlmaLinux, and ensure you have encryption in place.
• For more VPS‑related tasks, browse our VPS guides.
• If you are choosing a new server location or plan, see our UK options at Linux VPS.
• If you want a click‑by‑click walkthrough in our panel for future changes, check our how‑to articles.
• If you need help at any point, open a support ticket so we can look at your VPS with you.