How to Programmatically Update Password & 2FA Settings in Latest WHMCS Versions?

[Dust Tsad]

Hello everyone,

I’m building a custom client area for a hosting project, using the WHMCS API from the official documentation:
https://developers.whmcs.com/api-reference/

Everything works fine except for one major issue: User security management.

It appears that in recent WHMCS versions, the API no longer provides any parameters or endpoints to:

• Update a client/user password

• Enable/disable Two-Factor Authentication (2FA)

• Modify any security-related user settings

I’ve confirmed that UpdateClient and other related APIs no longer accept password fields, and I can’t find any API method for managing 2FA status either.

My questions:

1. Is there an official or recommended way (API or internal function) to allow a client to update their own password from a custom front-end?

2. Is 2FA status manageable programmatically at all, or only through the built-in WHMCS interface?

3. If the solution must be implemented inside WHMCS using internal models (e.g., WHMCS\User\User), what should I be looking for?

4. If support needs to be contacted, what exactly should I ask them regarding password/2FA programmatic updates?

Any direction, keywords, or examples from developers who already implemented a custom client panel would be extremely helpful.

Thank you!