Change any password securely, change access details via admin from whmcs and allow handling of it in admin area, and send notifications.
When registering a new account, WHMCS would normally allow the customer to do anything, even without verifying their email address.