GICT knowledge base
Import cPanel Mailbox Accounts Without Exposing Credentials
Published
cPanel Address Importer can create mailbox accounts from a structured file. It does not copy existing messages, folders, calendars, contacts or an entire hosting account. Plan data transfer and validation separately; creating the same address on another server is not a completed migration.
Prepare an authorized account inventory
Use only addresses in the domain you manage. The old examples containing Gmail source accounts and five-digit passwords were not suitable provisioning instructions. Generate a different strong secret for each real mailbox and use the account’s supported password rules. Do not reuse existing panel credentials or send the completed file through unprotected email.
This is a structural template only. Replace each password placeholder independently with an approved unique secret before any real import; the template is not ready to upload:
Email,Password,Quota
person1@example.com,REPLACE_WITH_UNIQUE_SECRET_1,250
person2@example.com,REPLACE_WITH_UNIQUE_SECRET_2,500
Quota values here illustrate the importer’s documented megabyte convention, not an InterServer plan entitlement. Keep values within the actual account’s permitted limits. Preserve CSV quoting when secrets contain delimiters or quotes, and protect the completed plaintext file like a credential store. Do not place it in a public web directory or source repository.
Import with explicit column mapping
- Enter the verified HTTPS cPanel interface and open Email > Address Importer.
- Select Email Accounts, not Forwarders. Choose the authorized file; the documented formats are CSV and legacy Excel .xls, not every spreadsheet extension.
- For CSV, choose the actual delimiter. Mark the first-row-as-headers option only if the file has headers.
- Review the preview and map Email, Password and Quota correctly. Select the intended domain and check existing-address conflicts and account-count/storage limits.
- Start with a small approved subset, review the final confirmation and finish. Inspect per-row results instead of assuming a batch is wholly successful or automatically rolled back.
Verify accounts, mail and file disposal
Compare the resulting account list and quotas with the intended inventory. Use an authorized test for authentication and incoming/outgoing delivery, without exposing credentials in screenshots or tickets. Inventory any partial creation before removing or changing anything; deleting a mailbox can remove mail already delivered to it.
After credentials are securely handed over and recovery requirements met, remove unneeded plaintext copies through your organization’s approved process. Do not claim a normal file deletion proves secure erasure on every device or cloud-synced folder.
InterServer-assisted web-hosting migration scope is matching-panel cPanel-to-cPanel or DirectAdmin-to-DirectAdmin only; VPS and dedicated-server migrations are not offered. This importer is not a broader migration-service promise.
Reference: cPanel Address Importer formats, mapping and quota fields.
Reviewed October 15, 2026. The placeholder CSV received structural checks only. No passwords were generated for customers, accounts imported, mailbox data moved or delivery tests executed.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
