# Updating existing email connections to use SSL > Update your email client to use secure SSL/TLS connections with the correct ports for IMAP, POP3, and SMTP. Source: https://www.kualo.com/knowledgebase/email-basics/updating-existing-email-connections-to-use-ssl Updated: 2026-06-04 --- Kualo requires all email connections to use SSL/TLS encryption. If your email client is still connecting over an insecure connection, or is using an older version of TLS, you will need to update your settings to continue sending and receiving email without interruption. ## Why secure connections matter Using an insecure connection for email is like sending a letter without an envelope - anyone who intercepts it can read your information. SSL/TLS wraps your email in a digital envelope so that only the intended recipient can read it. Within that, we require TLS 1.2 as a minimum. Older versions (TLS 1.0 and 1.1) are like worn-out locks that are easier for attackers to break. TLS 1.2 uses stronger encryption and more secure handshake methods, and is now the baseline standard across the internet. ## Important: TLS 1.2 support on older devices Most modern operating systems support TLS 1.2, but if you are using an older device you may need to check compatibility before updating your settings. | Platform | Minimum version for TLS 1.2 | |---|---| | Windows | Windows 7 (may need manual enabling; upgrade strongly recommended) | | macOS | OS X 10.9 (Mavericks) | | iOS | iOS 5 | | Android | Android 5.0 (Lollipop) | :::warning Windows 7 and 8 no longer receive security updates. Even if you can enable TLS 1.2 on these systems, upgrading to a supported version of Windows is strongly recommended. ::: If upgrading your operating system or device is not currently possible, consider these alternatives while you plan an upgrade: - **Webmail:** Runs in your browser, which handles its own security protocols independently of your operating system. - **Mozilla Thunderbird:** Includes its own TLS implementation, independent of the operating system, making it a practical option for older systems. This is not a Kualo-specific change. The wider internet is moving to require TLS 1.2 and above, so older devices will increasingly encounter problems accessing websites and online services over time. ## What you need to update If your operating system supports TLS 1.2, you only need to update your email client settings. This guide assumes your email account is already set up and you are switching from insecure to secure connections. You will need to make three changes: 1. **Check your account type** - note whether you are using IMAP or POP3 for incoming mail. 2. **Update to secure ports** - change the incoming and outgoing port numbers to their SSL/TLS equivalents. 3. **Enable SMTP authentication** - confirm that your outgoing mail server requires password authentication. In most cases you will not need to change your mail server hostname, only the ports. Your hostname will typically be **mail.yourdomain.com**, but may be something like **servername.ldn.kualo.net**. If you run into problems after switching to a secure connection, check the correct hostname for your account by following [this article](/knowledgebase/cpanel-how-tos/finding-the-email-client-configuration-details-in-cpanel). :::info If you are enabling SMTP authentication for the first time, you may be prompted for your email username and password. If you do not know these, you can [reset your mailbox password in cPanel](/knowledgebase/cpanel-how-tos/resetting-your-email-mailbox-password-in-cpanel). ::: ## Steps for common email clients ### Microsoft Outlook (2016, 2019, Microsoft 365) **Incoming mail (IMAP or POP3):** 1. Open Outlook and go to **File** > **Account Settings** > **Account Settings**. 2. Select your email account and click **Change**. 3. Under Server Information, note your account type (IMAP or POP3). 4. If **IMAP**, set the incoming server port to **993** and select **SSL/TLS**. 5. If **POP3**, set the incoming server port to **995** and select **SSL/TLS**. **Outgoing mail (SMTP):** 1. Click **More Settings** > **Outgoing Server**. 2. Tick **My outgoing server (SMTP) requires authentication**. 3. Select **Use same settings as my incoming mail server**. 4. Go to the **Advanced** tab, set the outgoing server (SMTP) port to **465**, and select **SSL/TLS**. --- ### Apple Mail (macOS) **Incoming mail (IMAP or POP3):** 1. Open Apple Mail and go to **Mail** > **Preferences** > **Accounts**. 2. Select your account and click **Server Settings**. 3. Set the port to **993** for IMAP or **995** for POP3, and enable **Use TLS/SSL**. **Outgoing mail (SMTP):** 1. In Server Settings, under **Outgoing Mail Server (SMTP)**, click **Edit SMTP Server List**. 2. Select your SMTP server, enable **Use TLS/SSL**, and set the port to **465**. 3. Set Authentication to **Password**. --- ### Apple Mail (iOS) **Incoming mail (IMAP or POP3):** 1. Open **Settings**, tap **Mail**, then **Accounts**. 2. Select your account, then tap **Account**. 3. Tap **Advanced**, set the port to **993** for IMAP or **995** for POP3, and toggle **Use SSL** to on. **Outgoing mail (SMTP):** 1. Go back and tap **SMTP** under **Outgoing Mail Server**, then tap **Primary Server**. 2. Toggle **Use SSL** to on, set the server port to **465**, and set Authentication to **Password**. --- ### Mozilla Thunderbird **Incoming mail (IMAP or POP3):** 1. Open Thunderbird and go to **Tools** > **Account Settings**. 2. Under **Server Settings**, note your account type (IMAP or POP3). 3. Set the port to **993** for IMAP or **995** for POP3, and set Connection Security to **SSL/TLS**. **Outgoing mail (SMTP):** 1. Go to **Outgoing Server (SMTP)**, select your server, and click **Edit**. 2. Set the port to **465**, Connection Security to **SSL/TLS**, and Authentication Method to **Normal Password**. --- ### Android email clients Android includes a range of different email apps, so the exact steps will vary. The general principle is the same across all of them. If you are unsure, search for instructions specific to your app, or [contact us](https://www.kualo.com/support) for help. **Incoming mail (IMAP or POP3):** 1. Open your email app, go to **Settings**, and select your account. 2. Under incoming settings, set the port to **993** for IMAP or **995** for POP3, and set the security type to **SSL/TLS**. **Outgoing mail (SMTP):** 1. Open the outgoing (SMTP) settings for your account. 2. Set the port to **465**, choose **SSL/TLS**, and make sure **Require sign-in** is enabled with **Password** authentication. --- _Source: Kualo Knowledgebase — https://www.kualo.com/knowledgebase/email-basics/updating-existing-email-connections-to-use-ssl · © Kualo Ltd._