How do I reset or change an email mailbox password?

For a separate email mailbox created in cPanel, open Email Accounts, choose Manage beside its full address and enter a New Password under Security. Save it with Update Email Settings, then update the password in every app or website using that mailbox. This changes that mailbox's password, not your account sign-in or cPanel password.

Before changing your mailbox password

Sign in to your account, find the hosting service for the email domain in Services and choose Log in to cPanel. On a phone, choose cPanel.
Open Email Accounts and find the full address whose password you want to change. Check both the name before @ and the domain after it before choosing Manage.
These steps apply to a mailbox hosted in cPanel. If Microsoft 365, Google Workspace or another provider hosts your email, change its password with that provider instead. Registering the domain with us does not mean cPanel hosts its email.
If the mailbox is marked System, it uses the cPanel password. Follow our cPanel-password guide for that account. A normal mailbox you created separately has its own password.

Save the new password

Plan the change with anyone else who uses this address. Apps and website mail senders using the old password can stop signing in until you update them. The password change does not require you to delete and recreate their mailbox or remove their email account from the device.
Beside the intended address, choose Manage. Under Security, enter a strong, unique New Password, or choose Generate. Save the new password securely before continuing.
Leave the other storage and restriction settings unchanged. Review the full address again, then choose Update Email Settings once. Check the confirmation before moving on. Do not use Delete Email Account to fix a forgotten password; deleting the mailbox can remove its mail.

Update apps and check access

In each phone or computer mail app using this mailbox, update its saved password for both incoming mail and outgoing mail. Some apps store the SMTP password separately, so receiving mail may work while sending still fails.
If your website sends through this mailbox, update its saved mail-sending password too. Use the website's existing mail settings or ask its maintainer to do this. Do not paste the new password into a support ticket or a public form.
Use our email-app guide to check the full username, server names and secure connection settings. The username is the full email address. Changing a password does not require changing your domain's MX records.
Test sign-in using the Webmail address supplied for your hosting account, with the full address and new mailbox password. Check Email opened from cPanel signs you into the mailbox without entering its password, so that shortcut alone does not test whether the new password works.
Send a message to another address you control and reply to it. Confirm both sending and receiving before assuming every app is updated. A password reset keeps the mailbox in place; it does not recover messages that were already deleted.

If you still cannot sign in

Check the full address, the correct hosting service and the password saved in the app. If the error is a certificate warning, stop and use the server details in Email Accounts → Connect Devices rather than disabling secure connections.
Open Support → New Ticket and set Department to Tech/Server. Include the affected email address, app or device, time and exact error. Never include the old or new password. For messages that still fail after sign-in works, use our email-delivery guide.