phpMyAdmin separate from cPanel

The recommended way to manage databases is the phpMyAdmin built into cPanel, because it avoids publishing a second admin console and keeps access behind the panel's authentication. To work with a third party, create a separate MySQL user with minimal privileges; do not share general cPanel access.

Only if the built-in access does not cover a specific need and you cannot use a client over an SSH tunnel or VPN, install a second copy of phpMyAdmin temporarily:

• Log in to the cPanel control panel, Softaculous section
• Find phpMyAdmin, if it is available in your service's catalogue
• Check compatibility with PHP and MySQL and install a maintained version in a protected subdirectory. If it does not appear in Softaculous, use the built-in access, or follow the official installation only if you can maintain it.
• Publish access over HTTPS only and also protect it with an IP restriction or additional authentication on the web server.
• Keep phpMyAdmin updated for as long as it stays installed.

With these steps you have a copy of phpMyAdmin available at:

https://www.tudominio.com/phpmyadmin

Check that the form uses MySQL user authentication, for example cookie mode, and not a configuration that stores a privileged user and lets people in without a password. To create a separate login:

• Go to cPanel, Manage My Databases section (formerly MySQL Databases).
• At the bottom of that same page you will find a form to Create a New User.
• Go back to the same section after creating the user and, under Add User to Database, assign the new user to the databases it should access, with the privileges you want on each.

After this, the new user can access only the databases and operations essential to its task. Do not grant it global privileges or reuse an application user.

When the work is finished, delete the separate phpMyAdmin installation, remove its configuration and revoke the temporary MySQL user. Do not leave this tool exposed permanently.

Check the access and remove it

Test with the temporary user that you can only read or change what you intended. From a private browsing session, confirm that the additional protection is requested and that an unauthorised IP is kept out when you have set up that restriction. A folder name that is hard to guess is no substitute for authentication.

When uninstalling, review the Softaculous selection: remove the tool and its files, but not the database of the website you were managing. Revoke only the temporary user and its authorisations; then check that the application still works with its own credentials.