OpenSRS has updated the password requirements for hosted email accounts. If you have received a notice that your password is weak, you have 30 days to update it before your email service is suspended. This FAQ answers the most common questions end users ask about resetting their mailbox password.
Why password requirements changed
Stronger passwords protect your mailbox from unauthorized access. OpenSRS periodically reviews mailbox passwords against current security requirements; mailboxes with weak passwords are flagged and given 30 days to update. If you do not update your password within that window, your mailbox will be suspended for outbound mail until you do.
How do I reset my password?
- Log in to Webmail at https://mail.tucows.com/.
- Go to Settings > Password.
- Select Change password.
- Enter your current password, enter your new password, and confirm the new password.
- Click Save.
Tip: Choose a password you do not use on any other service. Reusing passwords across sites is the most common way mailboxes get compromised.
What are the new password requirements?
To meet OpenSRS mail security requirements, your password must contain all of the following:
- A minimum of ten characters
- At least one number
- At least one capital letter
- At least one symbol or special character (for example, !@#$)
Is my password safe? What else is OpenSRS doing to protect my services?
Your password is encrypted and stored securely. OpenSRS regularly updates its security methods to safeguard accounts against unauthorized access.
How do you know my password is weak?
OpenSRS does not have visibility into your actual password. For security reasons, no one at OpenSRS can view the passwords for mailboxes on the email service. Credentials are cross-referenced against the password requirements in an encrypted format and assigned a value that identifies the password as strong or weak.
Why is my email service suspended?
If your service is suspended, you did not reset your password within the 30-day window. You can still receive mail through webmail or a mail client and use other features, but you cannot send mail until you update your password to meet the requirements.
To restore sending, follow the steps in How do I reset my password? above.
How do I stop being redirected to the password reset page?
Webmail keeps redirecting you to the password reset page until your password meets the current requirements. Once you update your password successfully, the redirect stops.
Next steps
- Update your password now. Do not wait until the 30-day window closes and your service is suspended.
- Set up password recovery. If your provider has enabled it, configure SMS, alternate email, or security questions so you can recover your password later. See Email Password Recovery System.
- Learn why resets are required. See Required Email Password Reset FAQ for background on the program.
Questions? Contact OpenSRS Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.