2026-10-31
DreamHost incident (October 2026): passwords of some email, FTP and SFTP users reset, and what account owners should do
From October 23, 2026, DreamHost took its File Manager (files.dreamhost.com) offline, signed some webmail users out, and, as a precaution, reset the passwords of some email, FTP and SFTP users. Those users cannot log in until the DreamHost account owner sets new passwords in the panel. DreamHost emailed affected account owners step-by-step instructions, restored File Manager on October 26 and marked the status post resolved on October 27, but said password resets are still required for a subset of accounts. Its help article asks owners to review the forwarding settings on each email address and remove any forward they do not recognise. DreamHost has not said what caused the incident, how many customers are affected, or whether any mail, files or passwords were accessed. This site's take: if you host with DreamHost, set new unique passwords for every mail and SFTP user from panel.dreamhost.com, check every forward, update saved passwords in mail apps and upload tools, and tell your users through a channel other than their DreamHost mailbox.