GICT knowledge base
Find Verified Mail Client Settings in cPanel and Webmail
Published
A mail client needs the correct incoming server, outgoing SMTP server, authentication method and encryption settings for an existing mailbox. cPanel’s account-specific configuration page supplies those details. It does not reveal the mailbox’s current plaintext password or require a root login.
Find the account-specific settings
- Open your normal verified HTTPS cPanel account and select Email > Email Accounts.
- Find the intended full address and choose Connect Devices or Set Up Mail Client. Older skins used More > Configure Email Client.
- Record the displayed secure hostname, incoming protocol/port, outgoing SMTP port, encryption mode and username. Use the known mailbox password or the provider’s authorized authentication method; reset a forgotten password through the proper account process rather than looking for it in this page.
- For mailbox-only access, open Webmail’s account/home settings and its mail-client configuration controls where offered. This is separate from Roundcube’s preferences.
Match the protocol and encryption mode
| Connection | Common secure pairing, not an account guarantee |
|---|---|
| IMAP | 993 with implicit TLS, commonly labelled SSL/TLS. Synchronizes server folders and changes across clients. |
| POP3 | 995 with implicit TLS. Download/removal behavior depends on client settings; choose retention deliberately. |
| SMTP submission | 465 with implicit TLS or 587 with required STARTTLS where the provider offers that mode. Authenticate using the supplied account policy. |
Port 993 is not a POP3 port. A port number does not establish that a connection is encrypted: use the exact supported pairing and validate the server certificate. Do not use plaintext or an unverified certificate as a fallback. Avoid guessing that the web domain or mail. prefix is the correct certificate-valid mail endpoint.
Configure automatically or manually
A supported client may discover settings, but review the selected server, protocol, encryption and authentication before trusting them. For manual configuration, copy the account-specific values into the incoming and outgoing sections separately. Automatic configuration files should come only from the authenticated provider page, be appropriate for the installed client and be inspected/handled as configuration that can change settings; do not run an arbitrary downloaded script.
If no mailbox exists, create it through the permitted account-level Email Accounts controls first. Do not create a server root session merely to add a normal mailbox. For application-specific steps, see the Thunderbird guide or Outlook guide. Use a maintained client and keep saved secrets protected.
Verify both directions
Test receiving and sending separately, including the sent-message folder and replies. Confirm that the intended mailbox identity is used and that a POP client will not remove the only server copy unexpectedly. Client synchronization and “leave a copy” settings do not provide an independent backup. For failures, share redacted error details, never passwords or generated configuration containing secrets.
References: cPanel mail-client setup and TLS use for email submission and access.
Reviewed October 15, 2026. Documentation review only; no client profile, mailbox, certificate exception or customer connection was created or tested.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
