Skip to content

Guide

Client Area Overview

Guide 3 min read

This page summarizes what customers can see and do in the WHMCS Client Area across all three Hetzner service families — Cloud, Storage Box, and Dedicated. It is written for administrators who want a cross-family picture before reading each family's detailed client-area guide, and for support staff answering client questions.

One consistent pane per service

Whichever family a customer's service belongs to, they manage it from the same place: their service detail page in the Client Area (clientarea.php?action=productdetails&id={serviceId}). Each family adds its own set of controls and management pages to that pane, but the surrounding experience — navigation, confirmation prompts, and security behavior — is consistent across Cloud, Storage Box, and Dedicated.

What customers can do, by family

Family Typical actions
Hetzner Cloud Power on/off/reboot, reset root password, rescue mode, snapshots, SSH keys, firewalls, floating IPs, rebuild, reverse DNS, ISO mount, private networks
Storage Box Reset password, lock/unlock, snapshots, subaccount enable/disable
Dedicated Servers Hardware reset, activate/deactivate rescue mode, reverse DNS, daily traffic monitoring

For the full list of actions, screens, and behavior per family, see:

Status gating

Management actions are only available while a service is Active in WHMCS. If a service is suspended, terminated, or pending, the client area hides or disables the action controls for that service, regardless of family. This prevents customers from attempting actions against a service that WHMCS does not currently consider live, and avoids sending mutating requests to Hetzner for a service that is no longer billed or provisioned.

Note

Status gating applies consistently to all three families. A customer with a suspended Cloud server, a locked Storage Box, or a terminated Dedicated server sees the same read-only, informational view rather than active management controls.

Security and interaction behavior

Across all families, the client area applies the same safeguards:

  • POST requests — every action that changes state (power actions, snapshots, SSH keys, reverse DNS, lock/unlock, and similar) is submitted via POST, not a plain link.
  • Explicit confirmation — irreversible or high-impact actions (hardware resets, deleting snapshots, deleting SSH keys, locking a Storage Box) prompt an explicit confirmation dialogue before proceeding.
  • Ownership verification — before acting on a resource such as a snapshot or SSH key, the addon verifies that the resource actually belongs to the logged-in customer's active service, so one customer cannot act on another customer's resources.

Next step

Continue to the family-specific client-area page that matches the customer's service, or see Hybrid Billing for how usage-based charges appear on the invoice.