Innovate | Connect | Transform
ContactService statusUSD $

GICT knowledge base

Import cPanel Mailbox Accounts Without Exposing Credentials

Published

cPanelEmail

cPanel Address Importer can create mailbox accounts from a structured file. It does not copy existing messages, folders, calendars, contacts or an entire hosting account. Plan data transfer and validation separately; creating the same address on another server is not a completed migration.

Prepare an authorized account inventory

Use only addresses in the domain you manage. The old examples containing Gmail source accounts and five-digit passwords were not suitable provisioning instructions. Generate a different strong secret for each real mailbox and use the account’s supported password rules. Do not reuse existing panel credentials or send the completed file through unprotected email.

This is a structural template only. Replace each password placeholder independently with an approved unique secret before any real import; the template is not ready to upload:

Email,Password,Quota
person1@example.com,REPLACE_WITH_UNIQUE_SECRET_1,250
person2@example.com,REPLACE_WITH_UNIQUE_SECRET_2,500

Quota values here illustrate the importer’s documented megabyte convention, not an InterServer plan entitlement. Keep values within the actual account’s permitted limits. Preserve CSV quoting when secrets contain delimiters or quotes, and protect the completed plaintext file like a credential store. Do not place it in a public web directory or source repository.

Import with explicit column mapping

  1. Enter the verified HTTPS cPanel interface and open Email > Address Importer.
  2. Select Email Accounts, not Forwarders. Choose the authorized file; the documented formats are CSV and legacy Excel .xls, not every spreadsheet extension.
  3. For CSV, choose the actual delimiter. Mark the first-row-as-headers option only if the file has headers.
  4. Review the preview and map Email, Password and Quota correctly. Select the intended domain and check existing-address conflicts and account-count/storage limits.
  5. Start with a small approved subset, review the final confirmation and finish. Inspect per-row results instead of assuming a batch is wholly successful or automatically rolled back.

Verify accounts, mail and file disposal

Compare the resulting account list and quotas with the intended inventory. Use an authorized test for authentication and incoming/outgoing delivery, without exposing credentials in screenshots or tickets. Inventory any partial creation before removing or changing anything; deleting a mailbox can remove mail already delivered to it.

After credentials are securely handed over and recovery requirements met, remove unneeded plaintext copies through your organization’s approved process. Do not claim a normal file deletion proves secure erasure on every device or cloud-synced folder.

InterServer-assisted web-hosting migration scope is matching-panel cPanel-to-cPanel or DirectAdmin-to-DirectAdmin only; VPS and dedicated-server migrations are not offered. This importer is not a broader migration-service promise.

Reference: cPanel Address Importer formats, mapping and quota fields.

Reviewed October 15, 2026. The placeholder CSV received structural checks only. No passwords were generated for customers, accounts imported, mailbox data moved or delivery tests executed.

Related guides

Account services are unavailable until the production backend is configured.