DreamHost has reset passwords for affected email and FTP/SFTP users during a service incident first reported on October 23, 2026. Its October 25 update says account owners can set replacements without waiting for an email. The incident notice gives no cause or count of affected users.
The latest update, posted at 18:43 UTC on October 25, says File Manager remains unavailable. DreamHost describes the resets as a precaution. The notice does not establish whether credentials were stolen.
The instruction to wait has changed
Earlier notices told customers to wait because password changes could be overwritten. DreamHost now says owners can proceed, allowing up to 15 minutes for changes to take effect. Email or FTP users without account access should contact their account owner.
Choose the password for the affected service
For email, DreamHost's mail password instructions direct account owners to Mail > Manage Email in the control panel. Find the affected address, click Manage, then use Change Password and save the change. The panel can generate a password, or you can enter one yourself.
A user who has lost their mail password needs the account owner or someone with panel privileges to create a replacement. Webmail itself cannot change passwords. The separate mailboxes interface requires the current password, according to the same documentation.
For file access, follow the website-user instructions: open Websites > SFTP Users & Files, select Login info for the user, then Change password. Generate or enter the replacement and click Reset Password. DreamHost distinguishes this login, which provides access to website files, from a WordPress or other content-management login. Changing a CMS password would address a different account.
Recovery is still incomplete
DreamHost says it will post another update when File Manager is restored. Watch for that confirmation and an explanation of the incident's cause and scope. For password changes, the company says to go directly to panel.dreamhost.com and warns that it will never email asking for your password.