How to Change or Reset a Business Email Password (and What Breaks)

Changing an email password takes ten seconds. The next two hours are spent finding every device and plugin that stored the old one. This guide covers how to change or reset the password on a business mailbox, then gives the checklist of everything that will silently stop working until it is updated.

Quick summary

• Sign in to webmail. If you are already signed in on the phone, this is the moment to make sure you can also sign in on a computer.
• Open Settings (often a gear icon), then Account, Security or Password.
• Choose a new password of at least 14 characters, or let a password manager generate one. Do not reuse a password from any other service.
• Save, then sign out and back in to confirm it works before touching any other device.
• Immediately update the password in your mail apps, in the order below, starting with the phone so you do not miss urgent mail while you work through the rest.

Change vs reset

Change is what you do when you know the current password: sign in to webmail, open Settings or Account, and enter the old and new password. Reset is what an administrator does when the password is lost: in the mail host's admin panel, select the mailbox and set a new one. On OquMail, the workspace admin manages mailbox credentials from the dashboard, so a locked-out teammate does not need a support ticket; the admin sets a new password and hands it over.

Step by step: change your own password

1. Sign in to webmail. If you are already signed in on the phone, this is the moment to make sure you can also sign in on a computer.
2. Open Settings (often a gear icon), then Account, Security or Password.
3. Choose a new password of at least 14 characters, or let a password manager generate one. Do not reuse a password from any other service.
4. Save, then sign out and back in to confirm it works before touching any other device.
5. Immediately update the password in your mail apps, in the order below, starting with the phone so you do not miss urgent mail while you work through the rest.

What breaks: the checklist

• Phone mail apps (iOS Mail, Gmail app, Outlook mobile). They usually prompt for the new password within minutes; if not, open the account in Settings and re-enter it.
• Desktop apps (Outlook, Apple Mail, Thunderbird). Outlook and Apple Mail sometimes keep the old IMAP password and only prompt for SMTP, or the reverse. Update both incoming and outgoing entries.
• Website contact forms and WordPress SMTP plugins (WP Mail SMTP, FluentSMTP, Post SMTP) that send through your mailbox on mail.oqumail.com port 587. These fail silently; forms appear to submit but nothing arrives.
• Scanners, printers and alarm panels configured to email documents or alerts.
• Accounting, CRM and booking tools set up to send from your address via SMTP.
• Shared mailboxes: every colleague who added support@ to their app needs the new password too. Tell them before you change it.

A cleaner approach for tools and devices

Anything that is not a person should not use a person's mailbox password. Give the website form its own mailbox such as noreply@ or forms@ with its own password, so rotating your personal password never breaks the site. For applications you build, use an API key rather than SMTP credentials: OquMail's send API authenticates with a Bearer key (Authorization: Bearer oqm_live_...), which you can revoke and reissue without touching any mailbox password.

Signs that the old password is still in use somewhere

• Repeated "authentication failed" or "454 4.7.0" notices in a mail app you forgot about.
• A lockout or rate limit on the mailbox, because an old device keeps retrying the wrong password every minute.
• Website form submissions stopping the same day you changed the password.
• A printer's "scan to email" queue backing up.

Common questions

I changed the password and Outlook keeps asking for it. Why?

Outlook caches credentials in Windows Credential Manager. Open Control Panel, Credential Manager, Windows Credentials, remove entries for your mail server, then restart Outlook and enter the new password. Also confirm the outgoing server is set to STARTTLS on port 587; On port 587 choose STARTTLS, not SSL/TLS. Picking SSL on 587 is the single most common setup mistake and it makes sending silently fail.

How often should a business email password be changed?

Current guidance from most security bodies is: not on a schedule, but immediately after any suspected compromise, any phishing incident, or when a person who knew it leaves. Pair a long unique password with two-factor authentication rather than frequent changes.

Can the admin see my current password?

On well-designed systems the admin can set a new password but not read the existing one. If a colleague needs access to a mailbox, the admin sets a new password and shares it once, ideally through a password manager rather than chat.