Skip to main content
.com domains from $2.99 — WHOIS privacy at no extra charge

How-to · Intermediate · 5 minutes

How to Set Up a Catch-All Address

Everything you need to decide whether catching mistyped addresses is worth it, then set it up safely — the steps in order, the snag to watch, and the tip our support desk gives everybody.

Straight answer first

In a line: decide whether catching mistyped addresses is worth it, then set it up safely — a intermediate-level task that takes 5 minutes.

Below you get the exact steps, the classic snag, and a tip from the support desk. Where our platform handles a step for you, the guide says so rather than making you do the robot's work.

Written by the Hosting Seller staff · Checked 1 August 2026

Intermediate

Difficulty level

5 minutes

Time to allow

5

Stages

24/7

Help at any hour

This guide assumes no expertise at all — just a hosting account, a browser and 5 minutes of attention. Every instruction works on our platform exactly as written, and carries over to any standard cPanel host.

One promise before you start: nothing in this guide is irreversible. Where a step could bite, we say so and give you the undo.

The overview before the detail

The job breaks into a few clear stages: weigh up the trade-off first, set the default address route, point it at a box of its own, use named aliases wherever you possibly can and look at a whole month of it, then decide.

Each stage is a few minutes of steady clicking — the time it takes depends mostly on how familiar the control panel already feels. The detailed steps sit further down this page; skim the whole route once before you begin.

The mistake nearly everyone makes

A catch-all pointed at the primary inbox. Spammers spray dictionary lists at every domain going, and an open door turns the mailbox you actually work in into the collection bucket for all of it.

It is worth learning because it is not some rare edge case — it is the single most common reason this task turns into a support ticket. Knowing it up front turns the whole job from risky into routine.

The trick worth borrowing

Catch-alls earn their keep during migrations and rebrands, when old addresses are still in circulation and you cannot list them all. Switch it on for that period with a retirement date already written down.

Small habits like this are the real difference between people who find hosting easy and people who find it stressful. The tools are identical; the working method is not.

What runs by itself here

We have automated the steps that do not deserve your time: certificates issue and reissue themselves, the installer handles application setup, the daily backup covers the what-if, and per-site settings live in a panel instead of a config file. The guide above covers what remains — the part that is actually about your site.

And when a step misbehaves anyway, support answers at any hour with the actual fix, not a knowledge-base link and a shrug. Half our best guides began life as a pattern in the ticket queue.

A business mail inbox open on a laptop

Why the job is simpler on our plans

Every walkthrough on our how-to shelf is tested on the platform we actually run — cPanel, LiteSpeed, NVMe, one-click installs — so the instructions match your screen instead of gesturing vaguely at it.

Mailboxes on your own domain are part of the plan, never an add-on sold back to you at checkout.

  • Step by step, tested exactly as printed
  • The snag flagged before you reach it
  • The dull steps are already automated
  • People on hand at any hour if you stall

Why Hosting Seller

On every plan, as standard

Written from real tickets

Our guides come off the support desk, so the snags flagged here are the ones people genuinely hit.

Automation where it belongs

SSL, backups and installs run themselves here, so the guide covers only what is genuinely yours to do.

Help on the counter

Stuck on step three at midnight? Support answers at any hour, mid-guide included.

The undo is always named

Where a step could bite, the guide says so and tells you how to put it back again.

Scoped honestly

Decide whether catching mistyped addresses is worth it, then set it up safely is a intermediate-level task — this guide budgets 5 minutes and says which steps the platform absorbs.

5 steps, no filler

Each stage is a few minutes of steady clicking, with the fiddly parts marked as fiddly.

First Steps

From choosing to live

  1. 1

    Weigh up the trade-off first

    A catch-all accepts mail sent to any address at your domain. You recover typos and long-dead addresses, and in exchange you accept every dictionary-spam attempt aimed at anything@yourdomain.

  2. 2

    Set the default address route

    cPanel, then Default Address. Choose to send unrouted mail to a mailbox you nominate rather than leaving it to bounce or be discarded, which is the default behaviour.

  3. 3

    Point it at a box of its own

    Never aim a catch-all at your main inbox. A separate mailbox you skim once a week keeps the occasional recovered message without paying for it in daily noise.

  4. 4

    Use named aliases wherever you possibly can

    If you already know which variants people mistype, forwarders for those specific addresses give you the same recovery without leaving the door open to everything else.

  5. 5

    Look at a whole month of it, then decide

    A month of collected mail shows the real ratio of useful messages to rubbish. Keep it, narrow it or switch it off based on that evidence rather than on how it felt at the time.

In the Box

Packed with every plan

  • SSH, Git and Composer on the plans built for developers
  • A 99.9% uptime commitment, watched by monitoring day and night
  • A free SSL certificate on every plan, reissued before it lapses
  • WebP image optimisation built in and costing nothing
  • Site migration done for you by our staff, at no charge
  • NVMe SSD storage on every shelf, not just the top one
  • PHP versions picked per site from the panel
  • LiteSpeed caching running at the server, not bolted on by plugin
  • A backup taken daily, with restores you run yourself
  • One-click installs for WordPress and 400+ other applications

Across the Counter

The questions we get asked most

Is a catch-all a sensible idea for a small business?

Usually not. Named forwarders for the addresses you know about, and a bounce for everything else, keeps the economics against the spammer. The exceptions are transition periods and domains that genuinely collect ad-hoc addresses.

Will a catch-all hurt the deliverability of my real mail?

Not directly — it only governs inbound routing. The indirect risk is engagement: a mailbox drowning in spam is a mailbox you stop reading properly, and that changes how you handle real mail rather than how yours is received.

Does the price climb when the term is up?

No. What you pay to order is what you pay to renew, year after year. We do not run teaser rates, so there is no year-two ambush waiting in the calendar, and your bookkeeping can treat the hosting line as a fixed number.

Who actually runs the company?

Hosting Seller is a trading name of Bohzo Ltd, a company registered in England and Wales — a real business with a public record and terms published under English law. Looking that up is worth doing about any host before you hand over your domain.

How quickly can I be up and running?

Minutes, not days. The account opens the moment the order clears, the domain — free for year one on annual plans — attaches straight away, and the one-click installer puts WordPress or any of 400+ applications on the page before you leave your chair. Already have a site elsewhere? Hand it over and we move it free, usually inside a day.

Can I test changes somewhere safe first?

Yes — plans with staging let you clone the live site, work on the copy, then push it across when you are satisfied. It is the difference between hoping an update behaves and knowing that it does before any customer meets it.

Is the SSL certificate genuinely free?

On every plan, with nothing held back. The certificate is issued the moment your domain points here and reissues itself well before expiry. The encryption is the same as a paid DV certificate — paid tiers exist only for wildcard coverage or organisation validation, which most sites never need.

Packing up and moving host? Take our checklist.

A plain running order for a move nobody notices: what to copy first, how to carry email across without dropping a single message, when to point DNS, and the two slips behind nearly every hour of downtime we get called about.

One email carrying the checklist, then the odd note on running a site well. Step off the list whenever you like — our privacy policy spells out the rest.

Give your website a proper home.

From a first website to a rack of servers, moving up is a change to your account rather than a migration.

See the plans