A great security practice to follow is to issue password changes on your users. This feature allows users to update their cPanel password if you believe there is a need to do so in favour of security.
To do so navigate to the following page:
WHM >> Account Functions >> Force Password Change
Then select the users you wish to force a password change upon and submit.
Next time the specified users log in, they will be prompted to update their passwords.