What to update.
WHERE TO CHANGE IT
cPanel, Email Accounts.
Or webmail, in some configurations.
WHAT BREAKS AFTERWARDS
Every device using the old password Any application sending through that account Any service configured with it
WHAT TO UPDATE
Every phone Every computer Your website's SMTP configuration, if it uses that account Any other service
THE WEBSITE POINT
If your site sends mail through that account, form notifications stop until it is updated.
Frequently overlooked.
WHAT HAPPENS IF YOU DO NOT UPDATE A DEVICE
Repeated failed attempts, which may block your address temporarily.
That affects other devices on the same connection.
WHEN TO CHANGE IT
If you suspect compromise If it was reused elsewhere If someone with access has left
WHAT ELSE TO DO AFTER A SUSPECTED COMPROMISE
Check for mail rules you did not create Check what was sent
WHAT TO USE
A strong unique password, from a password manager.