Webmail logins fail for a handful of predictable reasons: the wrong username format, an old password, a network that blocks the webmail port, or a temporary block after too many attempts. Work through the checks below in order; most problems are solved in the first two.
Before you start
- Know the exact email address of the mailbox.
- If possible, have access to cPanel (or the person who manages it) so you can reset the password.
Use the right address and username
| Address | Notes |
|---|---|
https://yourdomain.com:2096 | Standard secure webmail login |
https://webmail.yourdomain.com | Same login on the normal HTTPS port 443 |
https://yourdomain.com/webmail | Redirects to webmail; useful on restricted networks |
https://server-hostname:2096 | Works before your domain's DNS or SSL is ready |
The username is always the full email address, for example sara@example.com, not just sara and not your cPanel username. Passwords are case sensitive; check Caps Lock.
Reset the mailbox password
- Log in to cPanel (one click from Services in the MdmHost dashboard).
- Open cPanel → Email → Email Accounts.
- Click Manage next to the address.
- Under Security, enter a new password (or click Generate) and click Update Email Settings.
- Log in to webmail with the new password, then update it on your phone and desktop email apps, otherwise they keep trying the old one and can get your IP blocked.
Account owners can also click Check Email on the Email Accounts page to open webmail without the password.
Port 2096 is blocked
If the page never loads (timeout) but your website works, your network probably blocks port 2096. This is common on office, hotel and school networks. Use https://webmail.yourdomain.com instead, or test from mobile data.
Your IP is blocked after failed logins
Repeated wrong passwords, often from an old phone or Outlook profile, trigger the server's brute-force protection. Webmail, cPanel, FTP and even the website may stop responding from your IP for a while.
- Fix or remove the device that uses the old password.
- Find your public IP with the IP checker.
- Open a support ticket with the IP and the email address; we will unblock it and check the logs.
Tip: A password manager prevents most lockouts: one strong password per mailbox, updated in one place.
Browser and session errors
- "Your session is invalid or expired" or a login loop: clear cookies for your domain, or try a private window. Disable browser extensions that block cookies.
- Certificate warning: your domain's SSL is not issued yet. Use the hostname URL until AutoSSL completes.
- Blank page after login: pick the app again at
https://yourdomain.com:2096/?forget_default=1or try another browser.
The mailbox itself has a problem
- Login suspended: the owner may have suspended logins in Email Accounts → Manage. Re-enable Allow under Logins.
- Quota exceeded: webmail may open but fail to load. Free space; see fix a full mailbox.
- Account suspended: if the whole hosting account is suspended, nothing will log in. See account suspended.