How to Set Up a Catch-All Email Address in cPanel

A catch-all address — cPanel calls it the "Default Address" — decides what happens to email sent to any mailbox on your domain that does not exist. Someone writes to saels@yourdomain.com by mistake instead of sales@; a catch-all can quietly forward that stray message to a real inbox instead of bouncing it.

It is genuinely useful, but it comes with a spam trade-off worth understanding first.

Step 1: Open Default Address

Log in to cPanel.
Under the Email section, click Default Address.
If you have several domains, pick the one you want from the drop-down.

Step 2: Choose what happens to unrouted mail

You will see two main options:

Discard the message (with or without a bounce reply) — the default, and the tidiest.
Forward to an email address — this is the catch-all. Enter the real inbox that should receive everything sent to non-existent addresses.

Pick Forward to, type your chosen inbox, and click Change.

The spam trade-off

Because a catch-all accepts mail to every possible address, spammers who guess random names (info@, admin@, john@) all land in your one inbox. On a domain that gets targeted, this can be a flood. If that happens, switch back to Discard and instead create the specific email accounts and forwarders you actually need.

Frequently asked questions

Catch-all or individual forwarders — which is better?

For most people, a handful of real accounts plus a few forwarders beats a catch-all, because it avoids the spam magnet. Use a catch-all only when you genuinely cannot predict which addresses people might use.

Will a catch-all fill up my disk space?

If it forwards to a mailbox you monitor, yes, junk can accumulate. Pair it with a good spam filter — see enabling SpamAssassin — or use Discard.

Does discard send a bounce to the sender?

You can choose. "Discard with error to sender" tells them the address does not exist; plain discard silently drops it. For legitimate typos, a bounce is kinder because the sender learns to correct the address.