Skip to content
RU

Port 993: IMAPS — Complete Guide

Laptop with a blurred email inbox, racks of mail servers behind a glass partition
TL;DR:

Port 993 (TCP) is IMAPS — IMAP over implicit TLS, where encryption starts before any data is exchanged. Gmail, Outlook, Apple Mail and Thunderbird read mail on 993; plain IMAP on 143 relies on STARTTLS, which RFC 8314 discourages. Check that 993 answers with a valid certificate: openssl s_client -connect mail.example.com:993.

Check your host & ports →

What is port 993

Port 993 is reserved by IANA for the IMAPS service. IMAP over TLS. Secure email retrieval — standard for all modern clients.

Check if the port is open online

To find out if port 993 is open on your host (or a third-party's — for diagnostics), use our port checker. Enter a domain and a port number — results arrive in 1-2 seconds.

Check port 993 →

Security

An open port is a potential attack vector. General rules:

  • Close everything you don't use (firewall default-deny)
  • For admin ports (22 SSH, 3389 RDP, 3306 MySQL) — IP whitelist or VPN
  • Base cases: 80+443 open for web; 22 — from work/VPN only; DB ports — loopback only
  • Use fail2ban for SSH/admin panels

Understanding IMAPS: How It Works

IMAPS, or Internet Message Access Protocol Secure, is an extension of the IMAP protocol that utilizes SSL/TLS to secure the communication between email clients and servers. It operates over TCP port 993, ensuring that email data is encrypted during transmission, which is crucial for protecting sensitive information.

The process begins when an email client connects to the IMAPS server on port 993. The client initiates a handshake process, where it verifies the server's SSL certificate. Once the connection is established, all email retrieval actions, such as fetching, deleting, or marking messages, occur over this secure channel.

IMAPS allows users to manage their emails directly on the server, providing the ability to access the same mailbox from multiple devices. This synchronization is vital for users who need to maintain consistency across their email applications. Additionally, IMAPS supports advanced features like folder management and message flags, enhancing the overall email experience.

How to Check if Port 993 is Open

Checking if port 993 is open on your server is crucial for troubleshooting email connectivity issues. Here are several methods to verify the status of port 993:

  • Using Telnet: You can use the Telnet command to check connectivity to the IMAPS server. Open your terminal or command prompt and type:
telnet your-email-server.com 993
  • If the connection is successful, you will see a response indicating that you are connected to the server. If it fails, you may receive a connection refused message.
  • Using Netcat (nc): Another tool to check open ports is Netcat. Use the following command:
nc -zv your-email-server.com 993
  • This command will attempt to connect and will report if the port is open or closed.
  • Using Nmap: For a more comprehensive scan, you can use Nmap:
nmap -p 993 your-email-server.com
  • This will provide detailed information about the port status and any services running on it.

By using these methods, you can quickly determine whether your IMAPS service is accessible and troubleshoot accordingly.

Configuring IMAPS on Your Email Server

To enable IMAPS on your email server, you need to ensure that the necessary software is installed and configured correctly. Below are the steps to configure IMAPS on a typical mail server, such as Postfix with Dovecot.

Step 1: Install Dovecot

First, ensure that Dovecot is installed on your server. You can do this using the package manager:

sudo apt-get install dovecot-core dovecot-imapd

Step 2: Configure Dovecot for IMAPS

Edit the Dovecot configuration file, typically located at /etc/dovecot/dovecot.conf. Make sure to include the following settings:

protocols = imapssl = requiredssl_cert = /etc/ssl/certs/your_cert.pemssl_key = /etc/ssl/private/your_key.pem

Replace your_cert.pem and your_key.pem with the actual paths to your SSL certificate and private key.

Step 3: Set Up Port 993

Next, ensure that the service is listening on port 993. In the /etc/dovecot/conf.d/10-listen.conf file, specify:

listen = *, ::

Step 4: Restart Dovecot

After making these changes, restart the Dovecot service to apply the configuration:

sudo systemctl restart dovecot

After completing these steps, your IMAPS service should be operational on port 993, allowing secure email retrieval for your users.

Learn more

Sources

Frequently Asked Questions

Why close port 993?

Every open port is an attacker's entry point. If the service is not used (or uses a different port), close it to minimise attack surface.

How to check port 993 without Enterno.io?

From a local machine: nc -zv hostname 993 or telnet hostname 993. The online checker is simpler — from different IPs, one click.

Try the live tool that powered this guide

Free plan — 10 monitors, checks every 5 min, no card required. Upgrade for 1-minute interval and multi-region monitoring.