Had a customer question us on the details sent to them. We use WHMCS, but use a template from CentovaCast.  It seems the system sends the user the admin password for both the source and control panel.

The system creates two different passwords. The encoder password is same as admin but adds dj at end.  You can actually use both passwords on the encoder in your software (i.e. SAM)

Hostname/IP Address: {$account.ipaddress}
Port Number: {$account.port}
Password: {$account.adminpassword}

Admin Username: admin
Admin Password: {$account.adminpassword}
Admin URL: http://{$account.ipaddress}:{$account.port}

Is there something we can use to give the buyer the source password (the one that ends with dj). should the code for this be {$account.sourcepassword} ??

Thanks!

Your assumption to use {$account.sourcepassword} is entirely correct.