When a new hosting account is created, WHMCS generates just a 10-character alphanumeric password that is no longer strong enough these days. We've seen a huge increase of distributed brute force attacks this year and many cPanel accounts were hacked because of their weak passwords.