GICT knowledge base
Access Hosted Webmail Securely Through cPanel or a Browser
Published
Webmail lets you read and send hosted email through a browser. It uses an existing mailbox; opening Webmail does not create that mailbox or change where the domain’s public MX records deliver mail.
Use a verified encrypted entry point
Start with the Webmail link supplied in your hosting account or by support. For a cPanel installation, the HTTPS Webmail service commonly uses port 2096, and the domain’s /webmail shortcut may redirect there. Use the hostname covered by the service certificate. Do not enter credentials into the old plaintext HTTP/2095 route or click through an unexpected certificate warning.
If a network blocks the service port, ask for the supported HTTPS access method. You do not need to open an insecure port, disable a firewall globally or expose the hosting panel publicly to troubleshoot one Webmail session.
Log in as the intended mailbox
- Confirm the login page’s hostname and HTTPS connection.
- Enter the mailbox username, normally its complete email address, and that mailbox’s password. Use the account’s exact documented identity rather than assuming a hosting-panel password.
- Open the available mail client, commonly Roundcube on current cPanel servers. Historical Horde and SquirrelMail choices are not guaranteed or required.
- Confirm the displayed mailbox before reading or composing messages. Sign out on shared devices and do not save credentials there.
Access through cPanel
An authorized hosting-account owner can open Email > Email Accounts and choose Check Email or the corresponding mail-access action beside the exact account. An authenticated owner session may open Webmail without another password prompt. Treat that privilege as sensitive access, not a reason to share the hosting login with every mailbox user.
The Webmail home/settings page differs from Roundcube’s own application settings. Use the supplied return/home control when managing account-level autoresponders, forwarding or client configuration. If offered, automatic opening of a preferred client is a convenience preference, not a fix for slow mail or a security requirement.
Separate login from delivery problems
If login fails, verify credentials, restrictions, account existence and service status. If the inbox is empty, inspect folders, filters, quota, public MX routing and any POP client that may remove downloaded mail. Test incoming and outgoing mail separately with harmless authorized content. Do not delete and recreate a mailbox or blindly restart shared mail services to investigate a single error.
For self-managed Roundcube installation rather than access to an existing service, use the separate Roundcube deployment guide.
Reference: cPanel Webmail interface.
Reviewed October 15, 2026. Documentation review only; no customer login, mail read or delivery test was performed.
Related guides
End of TLS1 and TLS 1.1 support in cPanel as of version 132
The End of an Era: Why TLS 1.0 and 1.1 Are Gone, and What it Means for cPanel Users * Update: If Dovecot settings under Web Host Manager >> mailserver configuration is...
Email Client / WebmailRemove Your IP from the Hotmail/Outlook Blacklist
Remove Your IP from the Hotmail/Outlook Blacklist. A suspicious or wrong email practice can lead o serious deliverability problems, such as spam placements
Email Client / WebmailcPanel Horde Data Conversion from MySQL to SQLite
The horde_mysqltosqlite ScriptThe horde_mysqltosqlite script in cPanel is used to transfer and convert Horde user data from a single shared MySQL
Email Client / WebmailFind Verified Mail Client Settings in cPanel and Webmail
Find mailbox-specific IMAP, POP and SMTP settings, pair ports with TLS correctly and configure clients without exposing passwords or using root access.
