UnderHost
Knowledgebase Docs

Email encryption with TLS-secure SMTP, POP3, IMAP

Enable TLS encryption for email servers (SMTP, IMAP, POP3) to protect messages in transit.

On this page

Email TLS encrypts messages between email clients and servers. Without TLS, email passwords and content transmit in plain text over the internet.

Email TLS ports

ServicePortEncryption
SMTP587 (STARTTLS) / 465 (SSL)TLS
IMAP143 (STARTTLS) / 993 (SSL)TLS
POP3110 (STARTTLS) / 995 (SSL)TLS

Configure TLS on server

# Postfix SMTP TLS
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/ssl/certs/mail.crt
smtpd_tls_key_file = /etc/ssl/private/mail.key

Client setup (Outlook, Thunderbird)

  1. SMTP: server.com, port 587, TLS/STARTTLS
  2. IMAP/POP3: server.com, port 993 (IMAP) or 995 (POP3), SSL/TLS
  3. Use your email address and password
Always use TLS for email

Unencrypted email (port 25, 110, 143) sends passwords in plain text. Always use TLS.

Related: TLS versions | SSL errors

Was this article helpful?

Need security-focused hosting?

UnderHost services include DDoS-aware infrastructure, SSL support, account isolation, backups, and security guidance.

Related articles

Back to Security