One SMTP credential per program: naming, organising and revoking only the one you stop using

E-mail·· 7 views· 3 min read

The short answer: create one SMTP credential for each program (the website, the ERP, the front desk printer) and give it a name that says where it lives. When one of them is retired, or ends up in the wrong hands, you revoke only that credential and the others keep sending without anyone touching them.

Why not use the same one everywhere

What happens With one shared credential With one per program
You move to a new website or server You must change the password everywhere at once. Revoke the old website one. Nothing else stops.
A printer is sold or breaks down The password leaves with it, and it is the same as the website one. Revoke only the printer one.
The developer or agency leaves the project They keep the password to everything. Revoke only the one they used.
Spam starts going out through the relay You have no idea where from. The name and the last use point straight at the culprit.

Names you will still understand in a year

The name is only for you, but it is what tells you what to revoke. Say what and where: Main website (WordPress), ERP invoicing, Front desk printer, Developer staging site. Avoid names like «test» or «new»: in a few months nobody will know what they were.

What the list shows

Column What it is for
Name The name you typed when you created it.
Username The username the program logs in with. The password never appears here.
Status Active or Revoked.
Created When you created it.
Last used The last time a program logged in with it. An active credential that has not been used for a long time is a candidate for revoking.

Revoking a credential

1 In the SMTP Relay tab of the Email Center, find the credential by its name.
2 Click Revoke and confirm. The warning is clear: programs that use it stop sending.
3 If the program is still needed, first create a new credential and swap it in: see replacing a credential without stopping your e-mails.
Revoking cannot be undone. A revoked credential never becomes active again: if you made a mistake, create a new one and put it in the program.
Does the Email Center say you already have the maximum number of credentials? Look at the Last used column, revoke the ones you no longer need and create the new one.

Not sure which credentials to keep? Open a ticket and we will help you tidy up the list.

Open a support ticket

SEE ALSO

SMTP credential password lost or leaked: revoke it, create a new one and update the program

Getting started with SMTP Relay: verify the domain, create a credential, connect your program

SMTP Relay for agencies and developers: many client sites, each with its own credential

The program says sent, the customer got nothing: finding SMTP e-mails in the Email Center log

An API key or token has leaked: what to do, in the right order

RECOMMENDED PRODUCT

Professional e-mail on your domain

Mailboxes in your company name, no adverts, with spam filtering. from $6.60/mo (3-year plan, with coupon)

See plans
Was this answer helpful? Your answer helps us improve this article.