Your SMTP credentials are separate from your server login
Your SMTP username and password are not the same as your SSH username and password. SMTP is the protocol your email client uses to send mail, and it requires its own set of credentials — usually your email address and a password you set specifically for that purpose.
Where you find these credentials depends on who hosts your email. If your email is hosted by your domain registrar, your web host, or a third-party email service, each one stores and displays these details in a different place. The process is straightforward once you know where to look.
Key Takeaways
- SMTP credentials are typically your full email address as the username and a password you create or receive from your email provider.
- Most hosting providers and registrars display SMTP settings in a control panel under "Email" or "Mail Settings," not in the SSH section.
- If you do not remember your SMTP password, you can usually reset it through your email account settings or contact your provider's support.
- Some providers require you to generate an app-specific password separate from your main account password for security reasons.
- The SMTP server address (like mail.yourdomain.com or smtp.gmail.com) is also needed to configure your email client, along with the port number.
Check your hosting control panel first
If your email is hosted by your web host or domain registrar, log into their control panel — usually cPanel, Plesk, or a custom dashboard. Look for a section labeled "Email," "Mail," "Email Accounts," or "Webmail." Click into it and find the email account you want to configure.
Most panels show you the SMTP server address, port number, and username right there. The username is almost always your full email address (like user@yourdomain.com). If a password is displayed, write it down. If it is not shown, you can usually reset it by clicking "Change Password" or a similar button in that same section.
Write down the SMTP server address and port while you are there — you will need both when you set up your email client. The port is typically 587 (with TLS encryption) or 465 (with SSL encryption).
If your email is hosted by Gmail or Microsoft
Gmail and Outlook/Microsoft 365 do not use traditional SMTP usernames and passwords the way a standard mail server does. Instead, they require you to generate an app-specific password for security reasons.
For Gmail: Log into your Google Account, go to Security settings, and look for "App passwords" (this option only appears if you have two-factor authentication turned on). Select "Mail" and "Windows Computer" (or your device type), and Google will generate a 16-character password. Use your full Gmail address as the username and this generated password in your email client. The SMTP server is smtp.gmail.com on port 587.
For Outlook/Microsoft 365: Log into your Microsoft account, go to Security settings, and create an app password there. Use your full email address as the username and the generated password in your email client. The SMTP server is smtp-mail.outlook.com on port 587.
If you use a third-party email service
Services like Zoho Mail, ProtonMail, or other dedicated email providers each have their own SMTP setup. Log into your account with that service and look for "Settings," "Account Settings," or "Mail Settings." Find the section for SMTP or "Email Client Configuration."
The provider will show you the SMTP server address, port, and what your username should be (usually your email address). Some services generate a separate password for SMTP access; others let you use your main account password. If you are not sure, check their documentation or contact their support — they can tell you exactly what to enter.
Resetting a forgotten SMTP password
If you do not remember your SMTP password, the process depends on your provider. For most hosting and registrar accounts, log into your control panel, find the email account, and click "Change Password" or "Reset Password." You will be able to set a new one when ready.
For Gmail and Outlook, you reset the app-specific password by generating a new one in your security settings (the old one stops working). For other email services, log into your account settings and look for a password reset or change option in the mail or security section.
If you cannot access your email account at all, you will need to use your account recovery options — usually a backup email address or phone number. This is why it is worth keeping your main account password somewhere safe.
Common SMTP settings by provider
| Provider | SMTP Server | Port | Username | Password |
|---|---|---|---|---|
| Gmail | smtp.gmail.com | 587 | Your full Gmail address | App-specific password (generated in Security settings) |
| Outlook/Microsoft 365 | smtp-mail.outlook.com | 587 | Your full email address | App-specific password (generated in Security settings) |
| cPanel hosting | mail.yourdomain.com | 587 or 465 | Your full email address | Password you set in cPanel |
| Plesk hosting | mail.yourdomain.com | 587 or 465 | Your full email address | Password you set in Plesk |
| Zoho Mail | smtp.zoho.com | 587 | Your full Zoho email address | Your Zoho account password or app-specific password |
Frequently Asked Questions
Can I use my SSH password as my SMTP password?
No. SSH and SMTP are separate systems with separate credentials. Your SSH password controls server access; your SMTP password is only for sending email. Even if your hosting provider uses the same username for both, the passwords are different and managed separately.
Why does my email client say the password is wrong when I know it is correct?
Check that you are using the right SMTP server address and port for your provider. Also verify you are entering the full email address as the username, not just the part before the @ sign. If you are using Gmail or Outlook, make sure you generated an app-specific password and are using that, not your main account password.
What if my hosting provider does not show SMTP settings in the control panel?
Contact your provider's support team. They can tell you the SMTP server address, port, and confirm what your username and password should be. Most providers respond within a few hours, and some offer live chat support.
Do I need to change my SMTP password regularly?
No, but you should change it if you suspect it has been compromised or if you shared it with someone who no longer needs access. For Gmail and Outlook, you can revoke old app-specific passwords and generate new ones anytime in your security settings.
Is it safe to store my SMTP password in my email client?
Yes, as long as your computer is find. Email clients encrypt passwords locally. If you are on a shared computer, consider not saving the password and entering it each time instead. For extra security, use an app-specific password (like Gmail and Outlook offer) rather than your main account password.