Restrict cPanel Mailbox Login, Receiving or Sending Safely

cPanel can restrict a mailbox’s login, incoming delivery or outgoing sending without deleting its stored contents. These capabilities are separate. Restricting login alone is not a complete response to unauthorized mail sent by a website script or another compromised credential.

Choose the restriction by task

Control	Effect and caution
Logging In	Allow or suspend mailbox login. Do not assume this also rejects every incoming message or stops every application sending path.
Receiving Incoming Mail	Allow acceptance or reject incoming mail for the account. A rejected message is not a retained copy to recover later.
Sending Outgoing Mail	Allow, reject, or hold outgoing messages in a queue where those options are offered. Hold is not the same as deletion or indefinite safe storage.

Change the selected mailbox

1. Enter the verified HTTPS cPanel service and open Email > Email Accounts.
2. Locate the exact full address and choose Manage. Older cPanel screenshots used a separate Manage Suspension action; do not expect the version-70 layout on a current server.
3. Record the current restrictions. In the Restrictions section, change only the capability required by the approved task.
4. Save with the interface’s update action, reopen the entry and verify the effective restriction.

Protect the hosting account and choose a certificate-valid hostname; do not bypass a browser warning by using an arbitrary server IP. Feature availability and permitted changes depend on your hosting role.

Review held messages before re-enabling sending

cPanel documents that changing outgoing mail from Hold to Allow releases queued messages for delivery. If the hold followed an abuse incident, inspect and resolve that queue with the administrator before restoring sending. Do not release it blindly or delete unrelated customers’ mail.

Suspension can also affect aliases or forwarders redirecting to the account. Check the intended mail path rather than promising that all alternate routes remain unchanged. Existing clients may show different errors for authentication and SMTP rejection; preserve the exact redacted error for diagnosis.

Restore access with verification

After the reason for the restriction is resolved, set only the intended capabilities back to Allow. Verify new login, incoming delivery and outgoing sending separately using authorized harmless traffic. Check the actual queue and delivery result, not only the saved switch. Suspension is not backup, message recovery, malware removal or a substitute for fixing compromised access.

Reference: cPanel restrictions, forwarding impact and held-mail release.

Reviewed October 15, 2026. Documentation review only; no mailbox restriction, queue or customer delivery was changed or tested.