Glonce

DreamHost resets some email and FTP passwords during File Manager and Webmail incident

infrastructureThe Glonce editorsHacker News🔥53Glonce rating53Impact45Novelty40Relevance70Surprise35Players25Credibility80

DreamHost's public status page lists an active incident titled "Investigating an incident affecting File Manager and Webmail", with the status Service Disruption. The affected components are Web Services and Email Services, specifically the File Manager interface, Email Hosting and the Webmail interface. Everything else on the page is shown as operational: web hosting, managed and self-managed VPS, DreamPress, dedicated servers, Remixer, database hosting, domain registrations, security certificates, PHPMyAdmin, the DreamHost web panel, billing, support, DreamCompute and DreamObjects.

The timeline runs in Pacific time, 2026. On Oct 23 at 2:20 PM DreamHost began investigating connectivity problems with the File Manager. By 5:20 PM the File Manager was offline, some webmail users had been signed out or were getting login errors, and some email account passwords had been reset as a precaution. At 10:13 PM the company said the issue was also affecting FTP/SFTP access, and told users to wait for a reset email before changing passwords themselves, because earlier changes would be overwritten.

On Oct 24 at 10:37 AM DreamHost said password resets for affected email and FTP/SFTP users were complete. From that point account owners could set new passwords in the control panel without waiting for the email, and changes may take up to 15 minutes to apply. At 6:09 PM step-by-step emails to account owners began going out in batches.

On Oct 25 at 11:43 AM most owner emails had been sent, and a "Failed to edit" error that some Professional Email customers had been seeing was fixed. The File Manager was still unavailable. In the latest update seen, at 9:32 PM on Oct 25, DreamHost said all affected owners had been emailed. Affected users cannot log in until the account owner resets their password and shares the new credentials. The File Manager is still being restored.

The guidance is specific. Account owners set passwords under "Mail > Manage Email" or "Websites > SFTP Users & Files" in the control panel. Email and FTP/SFTP users must get new credentials from their account owner. DreamHost states it will never email requests for passwords, and its notices won't ask you to log in through a link, so changes should be made only at the control panel directly. Any password reset email you did not request should be ignored.

Key facts

  • DreamHost's status page shows a Service Disruption affecting the File Manager interface, Email Hosting and the Webmail interface, with updates running from Oct 23 to Oct 25 (PDT, 2026).
  • Some email account passwords were reset as a precaution; on Oct 24 at 10:37 AM DreamHost said resets for affected email and FTP/SFTP users were complete.
  • As of the Oct 25, 9:32 PM update, all affected account owners have been emailed, and affected users cannot log in until the owner resets their password and shares the new credentials.
  • The File Manager was still being restored in the latest update; web hosting, databases, domains, certificates, the web panel and cloud services are listed as operational.
  • DreamHost says it will never email requests for passwords and that its notices won't ask you to log in through a link.

Why it matters

Hosting control panels, mailboxes and file access sit under a lot of small businesses and personal sites. This incident has lasted from Oct 23 to at least Oct 25 and has involved provider-initiated password resets, which turns an outage into a chore for every affected account owner. It is not AI news, but it is the kind of infrastructure failure that matters to anyone who relies on a hosting provider for mail and files.

Who it affects

Users of DreamHost Email Hosting, the Webmail interface and FTP/SFTP access whose accounts were reset, and the account owners who must now set new passwords and pass credentials to their email and FTP/SFTP users. Professional Email customers who saw a "Failed to edit" error are also covered; DreamHost says that error is fixed. The number of affected customers or accounts is not given. Customers of web hosting, VPS, databases, domains and cloud services are shown as operational.

How to use it

If you own an affected account, watch for DreamHost's reset email, then set new passwords in the control panel under "Mail > Manage Email" or "Websites > SFTP Users & Files"; changes may take up to 15 minutes to apply. Early on, DreamHost asked users to wait for the reset email because earlier changes would be overwritten; after Oct 24 at 10:37 AM owners no longer need to wait. Then pass the new credentials to your email and FTP/SFTP users. Make changes only in the control panel directly, not through a link in an email, and ignore reset emails you did not request.

How solid is it

The facts come from DreamHost's own status page, so the provider is the primary source. The page text we worked from was a summarised rendering rather than a raw copy, so exact wording of individual updates may differ slightly from the live page. The timeline and the Oct 25, 9:32 PM update are the latest seen.

Risks and caveats

No root cause is given, and no breach, attack or compromise is stated; the reset is described only as a precaution. No estimated time for restoring the File Manager is given. The page does not say whether main account passwords for web hosting customers were reset; it speaks of email and FTP/SFTP users. The headline phrase on Hacker News, "forcing password reset", is not DreamHost's wording. Until owners act, affected users stay locked out, and phishing emails imitating the reset are a risk, which is why DreamHost says it will never email requests for passwords.

“Investigating an incident affecting File Manager and Webmail”

— DreamHost status page, incident title