Changing an email mailbox password in cPanel

Identify the full email address and check which phones, computers and website SMTP integrations use it. Generate a unique password and plan to update legitimate clients promptly so they do not keep retrying the old password.

1. Open Email Accounts in cPanel and locate the exact address. Select Manage beside it.
2. Enter a strong new password in the password section, using the generator if helpful. Save through the displayed email-settings update control.
3. Sign in to webmail with the full address and new password to confirm it works before changing every mail client.
4. Update incoming and outgoing authentication in the authorised mail applications and any application SMTP settings that use this mailbox.
5. If compromise is suspected, inspect forwarders, filters, sent mail and account restrictions for unauthorised changes. A password change alone does not undo a malicious forwarding rule.

Send and receive a test message and confirm each intended client reconnects. Verify that outgoing authentication uses the new credential as well as incoming mail.

List the devices and services that use the mailbox before changing its password. These can include Outlook, phones, website forms, scanners and scheduled applications. A forgotten device may continue retrying the old credential after the change.

Set a unique password through the supported cPanel mailbox control, then update the legitimate clients privately. Test webmail first, followed by one mail application, so you can distinguish a password problem from an application's connection settings.

What if I changed the password because of suspicious activity?

Review forwarding rules, filters and other access paths as well. A password change alone does not prove an attacker did not leave an unwanted rule or compromise another connected account. Follow the relevant incident-response procedure and preserve useful evidence.

Send a harmless external test in each direction after updating the clients. If authentication still fails, contact us with the mailbox address, application and exact error. Do not include the new password or a screenshot of the password field. We can guide you through the settings without needing it in the ticket.

If one device still fails, remove its saved old password or update both protocol settings. Repeated attempts can trigger protective blocks, so pause retries while correcting the configuration. Never put the new password into a support ticket; provide the address and exact error instead.

• Creating a business email account in cPanel
• Opening cPanel webmail securely
• Forwarding a cPanel email address to another inbox
• Changing a mailbox quota without deleting messages

• cPanel documentation