MDaemon includes a built-in password recovery feature that can be enabled by the administrator. Once enabled, users who forget their passwords can use this feature to reset them independently.
Don't use "admin@yourdomain.com." Using a unique name makes it harder for brute-force attacks to guess the username. Restrict IP Access: MDaemon Security Settings