Is DreamHost down?

We're performing rolling restarts across our shared hosting servers. Websites and services host on a Shared or WebHosting plan may be briefly unavailable while their host restarts. No action is needed on your end. We'll update this post once the restarts are complete.

The rolling restarts across our shared hosting servers are complete. Websites and services on Shared and WebHosting plans are back online. We're monitoring to confirm everything stays stable. No action is needed on your end.

We're investigating elevated load on a number of our Shared Hosting web servers, which may cause slow page loads and intermittent errors for websites hosted on the affected servers. Our team is actively working on this issue, and we'll post an update here as soon as we have more to share.

We've identified the cause of the slow loading and intermittent errors on some websites hosted on Shared Hosting, and we've applied a fix across our servers. Some websites may still load slowly while our team works on the remaining affected servers. We'll post an update here as soon as we have more to share.

Our Operations team is currently investigating connectivity issues affecting the File Manager interface. We’re working to identify the cause and will share updates as soon as we have more information. We’re sorry for the disruption and appreciate your patience.

We are investigating an incident affecting several of our services. While we work on it, the panel File Manager (files.dreamhost.com) is offline, and some webmail users have been signed out or may see an error when logging in. As a precaution, we are resetting the passwords of some email accounts. If yours was reset, webmail and your email apps (Outlook, Apple Mail, your phone) will stop accepting the old password. The account owner can set a new one from the Manage Email page in the DreamHost panel: https://help.dreamhost.com/hc/en-us/articles/216479177-Change-password-Mail-users We will never email you asking for your password. To change a password, log in to the DreamHost panel directly at panel.dreamhost.com rather than following a link in an email. If you receive a password reset email you did not request, you can ignore it. We will post our next update here by 8pm Pacific, sooner if we have more to share.

We are continuing our investigation and will be sending updates shortly. Thank you for your patience.

We're working on an issue affecting some of our systems, including FTP/SFTP access and webmail. As a precaution, we are resetting passwords for some email and FTP/SFTP users. If you're affected, we will email you with the steps to set new passwords in the DreamHost panel. Please wait for that email before changing any passwords yourself, since changes made before our reset is complete will be overwritten. If you haven't heard from us, no action is needed right now. A reminder: we will never email you asking for your password, and our notification won't ask you to log in through a link. To change any password, go directly to panel.dreamhost.com. If you receive a password reset email you didn't request, you can ignore it.

Our team is continuing to work on this overnight. Password resets for affected email and FTP/SFTP users are in progress, and we will email affected account owners with the steps to set new passwords as each group is completed. Please continue to wait for that email before changing passwords yourself. If you haven't heard from us, no action is needed.

The password reset for affected email and FTP/SFTP users is complete. Account owners can set new passwords now in the DreamHost control panel at panel.dreamhost.com; there is no need to wait for our email. Please allow up to 15 minutes for a new password to take effect before the user signs in. We are also emailing affected account owners with step-by-step instructions. Those emails are being sent in batches and may take a few hours to arrive. As a reminder, we will never email you asking for your password, and our notification will not ask you to log in through a link. To change any password, go directly to panel.dreamhost.com. If you receive a password reset email you did not request, you can ignore it.

Emails to affected account owners with step-by-step instructions have began going out and will continue in batches over the next few hours. You do not need to wait for the email: if you are the DreamHost account owner, you can set new passwords now in the DreamHost control panel at panel.dreamhost.com under Mail > Manage Email or Websites > SFTP Users & Files. Please allow up to 15 minutes for a new password to take effect. If you are an email or FTP user, please contact your account owner, who can set a new password for you. We will never email you asking for your password, and our notification will not ask you to log in through a link. If you receive a password reset email you did not request, please ignore it.

The majority of emails to affected account owners with step-by-step instructions to reset passwords have been sent, and we are actively sending the remaining emails, with completion expected today. You do not need to wait for the email to reset your password. If you are the DreamHost account owner, you can set new passwords now in the DreamHost control panel at panel.dreamhost.com under “Mail > Manage Email” or “Websites > SFTP Users & Files”. Please allow up to 15 minutes for a new password to take effect. If you are an email or FTP user, please contact your account owner, who can set a new password for you. Some customers on our Professional Email service received a “Failed to edit” error when setting a new email password in the panel. That issue has been fixed. If you saw this error, please try setting a new password again. The File Manager at files.dreamhost.com remains unavailable while we continue to work on this issue. We will post an update here when it is restored. Reminder: DreamHost will never email you asking for your password. Go directly to panel.dreamhost.com to make any changes.

All impacted DreamHost account holders have now been emailed step-by-step instructions to reset passwords for mail and FTP/SFTP users on their accounts. These users will be unable to log in until the owner of their DreamHost account resets their passwords and shares the new credentials with them. Work on restoring the File Manager at files.dreamhost.com continues. We will post an update here when it is restored. DreamHost will never email you asking for your password. Go directly to panel.dreamhost.com to make any changes.

Our engineers have pushed out a fix to the File Manager, and http://files.dreamhost.com is now back online. We are monitoring the situation to ensure that the File Manager is back in a fully operational state. We'll update this post when we're all clear.  Password resets are still required for a subset of email and FTP/SFTP user accounts. For more information, please see the DreamHost Knowledge Base: https://help.dreamhost.com/hc/en-us/articles/360020918452-Current-Status-Notifications .

Our Operations team has implemented protections against the PHP remote code execution vulnerability across all our hosting platforms, including shared, VPS, DreamPress, and dedicated. These protections are active now, and we have not observed any attack traffic related to this issue to date. Patched PHP versions are being released today. Our Technical Operations team is ready to deploy updated PHP builds as soon as they are available. We'll share another update once the patched builds are available.

We are currently rolling out PHP's upstream fix fleet-wide. Known attack vectors and confirmed exploit paths across all PHP versions remain closed. Additionally, our Web Application Firewall (WAF) is actively blocking any incoming exploit attempts. We will continue to monitor systems closely as the final upstream fixes finish deploying. The next update will be provided once the fleet-wide deployment is fully complete.

We are continuing to roll out PHP updates across all servers and PHP versions. Our systems remain closely monitored as the final updates finish deploying, and we will share our next update once the deployment is complete.

We're continuing to roll out PHP's official fix across all servers and expect it to be complete soon. Sites on PHP 8.1 and older are protected by the mitigations we deployed early, before the details were public. Security fixes for these versions, provided under our PHP Extended Support program, are being built and are expected to roll out within the next day. No action is needed on your end. We'll keep you posted and share another update as soon as the rollout is complete.

We have successfully completed the deployment of the official PHP security fixes across a large portion of our hosting infrastructure. For our remaining environments, our Operations Team is currently staging packages and running final stability tests to ensure a smooth transition. The mitigations we deployed earlier remains enforced, keeping your sites secure while we complete this final phase. No action is required on your end. We will provide another update once the full rollout has concluded.

The official PHP security updates have been applied across the bulk of our network. Operations is currently executing final staging tests and stability checks for the remaining server groups before completing the final deployment phase. All active threat mitigations implemented previously remain live, maintaining full coverage for your application environment. No intervention is needed on your end, and we will send out a notification upon final rollout completion.

PHP Security Vulnerability: Protections Are In Place - The official PHP security updates have been applied across the entirety of our network. All active threat mitigations implemented previously remain live, maintaining full coverage for your application environment. No intervention is needed on your end.

We have identified an issue where some customers are not receiving emails from the DreamHost panel. This includes login verification emails, which are sent when signing in from a new device or location, and password reset emails. Our team is investigating and working to restore email delivery as quickly as possible. We apologize for the inconvenience and will continue to provide updates.

Our team has resolved the issue delaying DreamHost Web Panel emails, including login verification and password reset emails. We're now monitoring to make sure delivery stays stable. Some customers may still receive delayed emails, and expired links can be requested again. We’ll share another update once we’re confident everything is fully resolved.