What this means
What this means
An app password is a separate credential you generate for a single integration — an AI agent, an automation like n8n or Zapier, or a mail client. It authenticates over IMAP and SMTP exactly like your mailbox login, but you never hand over your real password. Each app password can be revoked on its own, so a leaked or retired integration never exposes your mailbox or forces you to reset your main password.
Before you start
Before you start
Open your portal, go to Services, and select your email service. Every mailbox card has a '🔑 App passwords' section. Decide a clear name for the integration so you can recognise it later, and have a password manager or secure note ready — the generated password is shown only once.
Step-by-step guidance
Step-by-step guidance
- Open your portal and go to Services, then select your email service.
- Find the mailbox you want to connect and expand its '🔑 App passwords' section.
- Type a descriptive name for the integration (for example 'n8n agent' or 'Apple Mail iPhone').
- Click 'Create app password' — the password is generated and shown once.
- Copy it immediately and paste it into your app — it is never shown again after you close the panel.
- Configure your app with: IMAP host mail.cmcloudhosting.com port 993 SSL/TLS (incoming), SMTP host mail.cmcloudhosting.com port 465 SSL/TLS or 587 STARTTLS (outgoing), username your full email address, password the app password you just created.
- To remove access later, return to the same 'App passwords' list and revoke that entry — only that integration stops working.
What CM Cloud support will review
What CM Cloud support will review
Support can help if the 'Create app password' button fails, if a mailbox does not show the App passwords section, or if an integration cannot authenticate over IMAP or SMTP.
What is not automated yet
What is not automated yet
Creating an app password only issues a new credential. It does not email the password to you, change your webmail login, or affect any other mailbox or app password on your account.
Safety note
Safety note
Never share your real mailbox login with third-party tools — give each integration its own app password. Because the password is shown only once, store it in a password manager. Revoke any app password the moment an integration is retired or a credential may have leaked; your mailbox and every other integration keep working.
Safe next action
Safe next action
Open your email service in the portal, expand a mailbox's 'App passwords' section, and create one named for the app you are connecting.