Accessing Account Preferences in Webmail generates deferred login errors with missing security tokens.

Symptoms

When accessing "Account Preferences" in Webmail, you may note the following errors in the login_log:

CONFIG_TEXT: [2026-01-29 18:04:12 -0500] info [webmaild] 203.0.113.2 - cptest@cptest.tld "GET /cPanel_magic_revision_0/webmail/jupiter/account_preferences/index.min.css HTTP/1.1" DEFERRED LOGIN webmaild: security token missing

Cause

This error occurs when the security token is missing from the request.

Resolution

There are no known workarounds at this time, but the error can generally be ignored. If you experience any blocks in any brute-force protection software as a result, you may need to remove those blocks and whitelist the affected IPs.

We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-51331. Follow this article to receive an email notification when a solution is published in the product.