Do only shell and ftp passwords need to be reset or does the main account web panel password need to be reset as well?

Ask because, we don't use shell/ftp passwords and I'm not sure if we are affected or not.