Updating Email Connections to Use SSL

Update your email client to use secure SSL/TLS connections with the correct ports for IMAP, POP3, and SMTP.

Kualo requires all email connections to use SSL/TLS encryption. If your email client is still connecting over an insecure connection, or is using an older version of TLS, you will need to update your settings to continue sending and receiving email without interruption.

Why secure connections matter

Using an insecure connection for email is like sending a letter without an envelope - anyone who intercepts it can read your information. SSL/TLS wraps your email in a digital envelope so that only the intended recipient can read it.

Within that, we require TLS 1.2 as a minimum. Older versions (TLS 1.0 and 1.1) are like worn-out locks that are easier for attackers to break. TLS 1.2 uses stronger encryption and more secure handshake methods, and is now the baseline standard across the internet.

Important: TLS 1.2 support on older devices

Most modern operating systems support TLS 1.2, but if you are using an older device you may need to check compatibility before updating your settings.

Platform	Minimum version for TLS 1.2
Windows	Windows 7 (may need manual enabling; upgrade strongly recommended)
macOS	OS X 10.9 (Mavericks)
iOS	iOS 5
Android	Android 5.0 (Lollipop)

Windows 7 and 8 no longer receive security updates. Even if you can enable TLS 1.2 on these systems, upgrading to a supported version of Windows is strongly recommended.

If upgrading your operating system or device is not currently possible, consider these alternatives while you plan an upgrade:

Webmail: Runs in your browser, which handles its own security protocols independently of your operating system.
Mozilla Thunderbird: Includes its own TLS implementation, independent of the operating system, making it a practical option for older systems.

This is not a Kualo-specific change. The wider internet is moving to require TLS 1.2 and above, so older devices will increasingly encounter problems accessing websites and online services over time.

What you need to update

If your operating system supports TLS 1.2, you only need to update your email client settings. This guide assumes your email account is already set up and you are switching from insecure to secure connections.

You will need to make three changes:

Check your account type - note whether you are using IMAP or POP3 for incoming mail.
Update to secure ports - change the incoming and outgoing port numbers to their SSL/TLS equivalents.
Enable SMTP authentication - confirm that your outgoing mail server requires password authentication.

In most cases you will not need to change your mail server hostname, only the ports. Your hostname will typically be mail.yourdomain.com, but may be something like servername.ldn.kualo.net.

If you run into problems after switching to a secure connection, check the correct hostname for your account by following this article.

If you are enabling SMTP authentication for the first time, you may be prompted for your email username and password. If you do not know these, you can reset your mailbox password in cPanel.