mailtag
Blog / Guides
IMAP settings for Gmail, Outlook, iCloud, Yahoo and more
- Almost every provider uses port 993 with SSL/TLS for IMAP, and 465 or 587 for sending mail (SMTP).
- Gmail, iCloud, Yahoo, AOL and Fastmail need an app password in any app that asks for a password. Your normal password won't work there.
- Outlook.com, Hotmail and Microsoft 365 only accept signing in with Microsoft. Proton Mail only works through its Bridge app.
Your mail app, phone or backup tool asks for the "incoming server". Lists online are often years old: Outlook's server changed, Gmail lost its IMAP switch, and most providers now refuse your normal password. They ask for an app password instead: a separate code your provider creates for one app, so it never sees your real password (what are app passwords).
IMAP and SMTP settings by provider
Checked on 26 October 2026 in each provider's official help (linked in the last column).
| Provider | IMAP server | IMAP port | SMTP server and port | Username | Password |
|---|---|---|---|---|---|
| Gmail / Google Workspace | imap.gmail.com | 993 SSL/TLS | smtp.gmail.com, 465 SSL or 587 STARTTLS | Full address | App password, or Sign in with Google (Google) |
| iCloud Mail | imap.mail.me.com | 993 SSL | smtp.mail.me.com, 587 SSL or STARTTLS | iCloud name or address | App-specific password (Apple) |
| Yahoo Mail | imap.mail.yahoo.com | 993 SSL | smtp.mail.yahoo.com, 465 or 587 SSL | Full address | App password (Yahoo) |
| AOL Mail | imap.aol.com | 993 SSL | smtp.aol.com, 465 SSL | Full address | App password (AOL) |
| Fastmail | imap.fastmail.com | 993 SSL/TLS | smtp.fastmail.com, 465 SSL/TLS (587 STARTTLS) | Signup username with domain | App password; no IMAP on the Basic plan (Fastmail) |
| Outlook.com / Hotmail | outlook.office365.com | 993 SSL/TLS | smtp-mail.outlook.com, 587 STARTTLS | Full address | OAuth2 only (Microsoft) |
| Microsoft 365 | outlook.office365.com | 993 SSL/TLS | smtp.office365.com, 587 STARTTLS | Full address | OAuth2 only (Microsoft) |
| GMX (gmx.com) | imap.gmx.com | 993 SSL/TLS | mail.gmx.com, 587 STARTTLS or 465 SSL/TLS | Full address | Turn on POP3/IMAP first; app password if 2FA is on (GMX) |
| GMX (gmx.net, gmx.de) | imap.gmx.net | 993 SSL | mail.gmx.net, 587 STARTTLS or 465 SSL | Full address | Turn on "POP3/IMAP-Abruf" first; app password if 2FA is on (GMX) |
| IONOS (US) | imap.ionos.com | 993 SSL | smtp.ionos.com, 465 SSL/TLS | Full address | Mailbox password (IONOS) |
| Zoho Mail (personal or free organization) | imap.zoho.com | 993 SSL | smtp.zoho.com, 465 SSL or 587 TLS | Zoho address | Turn on IMAP first; app-specific password if 2FA is on (Zoho) |
| Zoho Mail (paid organization, own domain) | imappro.zoho.com | 993 SSL | smtppro.zoho.com, 465 SSL or 587 TLS | Your address | Same as above |
| Proton Mail | Shown in Bridge | 1143 by default | Shown in Bridge (1025 by default) | Shown in Bridge | Bridge password; paid plans only (Proton) |
| Own domain (cPanel) | mail.yourdomain.com or your host's server | 993 SSL/TLS | Same server, 465 SSL/TLS | Full address | Mailbox password (cPanel) |
SSL/TLS or STARTTLS?
Both encrypt the connection. SSL/TLS (sometimes called "implicit TLS") encrypts from the first byte, on port 993 for IMAP and 465 for SMTP. STARTTLS starts plain and switches to encryption, on port 143 for IMAP and 587 for SMTP. If your app offers both, pick the one the table shows. Avoid "None": it sends your password unencrypted.
Things that changed and old lists get wrong
- Google stopped accepting normal passwords over IMAP, SMTP and POP on 14 March 2025, except app passwords (Workspace help). See Gmail app password.
- Outlook's IMAP server is outlook.office365.com. Older lists give imap-mail.outlook.com and an app password, which no longer works. See Outlook app password.
Per-provider notes
iCloud, Yahoo, AOL and Fastmail
All four need an app password. Yahoo and AOL only create one from a browser you've used for several days. Steps and common snags: iCloud app password, Yahoo app password and Fastmail app password.
Outlook.com and Microsoft 365
On Outlook.com, IMAP can be off: Settings → Mail → Forwarding and IMAP → Let devices and apps use IMAP. On Microsoft 365, your admin or Microsoft's Security Defaults can turn it off (Microsoft Learn).
GMX
IMAP is off by default. Turn it on under Settings → POP3 & IMAP (GMX). GMX switches it off again after a long time unused, so check there first if a working account stops. Outgoing mail goes through mail.gmx.com or mail.gmx.net, not smtp.gmx.com. With two-factor authentication on, mail apps need an app password (GMX).
IONOS
The server depends on the country where you signed up. The table shows the US servers. In the UK it's imap.ionos.co.uk and smtp.ionos.co.uk (IONOS UK); in Germany, imap.ionos.de; in Spain, imap.ionos.es. Ports are the same.
Zoho Mail
Turn on IMAP Access in Zoho Mail's settings first; your organization's admin can block it. Accounts created with Google or another sign-in need a Zoho password first. The Forever Free plan doesn't include IMAP (Zoho pricing).
The host's ending follows your account's data center: imap.zoho.eu or imappro.zoho.eu in Europe; .in, .com.au, .jp, .sa or .com.cn elsewhere; zohocloud.ca (not zoho.ca) in Canada. Zoho shows your exact host under Server Configuration Details.
Proton Mail
Proton Mail Bridge is a desktop app that runs on your own computer and gives your mail app a local server, port and password. Online services can't reach it (Proton).
Own domain
Your host decides. On cPanel, the exact values are under Email Accounts → Connect Devices. If your domain's mail is handled by Google, iCloud, Fastmail, Zoho or Microsoft, use that provider's row instead.
IMAP settings in MailTag
MailTag sorts each new email into your own categories over IMAP. Under Settings → Mailboxes → Connect mailbox, you type your address and it fills in the server for you. It recognizes Gmail, Google Workspace, iCloud, Yahoo, AOL and Fastmail, also on your own domain, and shows the steps for their app password. It also fills in the right server for Zoho and IONOS. For any other provider it suggests imap.yourdomain and port 993, and you correct them from the table above. There's a field for the username if it isn't your address. If your provider has no app passwords, your normal mailbox password may work.
It can't connect Outlook.com, Hotmail or Microsoft 365 yet (they need Microsoft sign-in), nor Proton Mail (Bridge only runs on your computer).
FAQ
What port does IMAP use?
993 with SSL/TLS at almost every provider. Port 143 with STARTTLS is the fallback some providers still allow.
Do I need to enable IMAP in Gmail?
No. Since January 2025 IMAP is always on in Gmail (Gmail help). You only need an app password or an app that signs in with Google.
What is the IMAP server for Outlook.com and Hotmail?
outlook.office365.com, port 993, SSL/TLS. It only accepts apps that sign in through Microsoft's own page (OAuth2).
What's the difference between IMAP and POP?
IMAP keeps mail on the server and syncs folders and read status across devices. POP downloads mail to one device. For anything that needs to see your folders, use IMAP.
Why does my app say the password is wrong when it's right?
Most providers here refuse your normal password over IMAP. Create an app password, or use an app that signs in through the provider's page.
Can I use Proton Mail with IMAP?
Only through Proton Mail Bridge on a computer, with a paid plan. Web services can't reach it.