Full guide
Email remains the backbone of business communication, and a misconfigured account quietly causes more disruption than most people realise: messages that never arrive, replies stuck in the outbox, a phone that shows different mail to the laptop, and the nagging worry that credentials are travelling unprotected. Getting the configuration right once means you stop firefighting and start trusting your inbox again. This guide walks through the handful of settings that genuinely matter, in plain language, so you can set up or repair any account with confidence.
The good news is that email has not changed its fundamentals. The same protocols, ports and encryption standards apply whether you are on a personal account or running mail for a growing Australian business. Learn them once and the knowledge carries across every provider and every device you will ever set up.
Why does email configuration matter so much?
A correctly configured account does three jobs at once: it delivers your mail reliably, it keeps your communication secure, and it presents the same view on every device you own. When any one of those breaks, the cost is real. Email is still the workhorse of professional communication, with the number of users worldwide climbing past 4.6 billion in recent years, which means a single setup mistake can sit between you and almost everyone you need to reach. The risk is not only inconvenience. Insecure settings expose login details, and email remains one of the most exploited channels in cybercrime, so encryption is not optional.
What do IMAP, POP3 and SMTP actually mean?
Three protocols handle the movement of your mail, and understanding them removes most of the confusion. SMTP, the Simple Mail Transfer Protocol, is the only one that sends mail out. The other two handle incoming mail and you choose between them:
- IMAP keeps messages on the provider server and mirrors them to every device. Read, file or delete a message anywhere and the change appears everywhere. This is the right choice for almost everyone today.
- POP3 downloads messages to one device and, by default, removes them from the server. It suits a single computer with limited connectivity, but it does not sync, so it rarely fits modern, multi-device life.
Alongside the protocols sit two more terms. SSL and TLS are the encryption layers that scramble your login and your messages so nobody can read them in transit. STARTTLS is a method that upgrades an ordinary connection to an encrypted one. When a setup screen asks for an encryption type, these are the words you are looking for.
Which ports and encryption settings should you use?
Ports are the numbered doors your mail travels through, and using the secure ones is the single most important security decision in email setup. Match each protocol to its encrypted port and you are protected by default:
- Incoming IMAP: port 993 with SSL or TLS.
- Incoming POP3: port 995 with SSL or TLS.
- Outgoing SMTP: port 465 with SSL, or port 587 with STARTTLS.
Steer clear of the older unencrypted ports, namely 143 for IMAP, 110 for POP3 and 25 for SMTP. These send your credentials in plain text and are routinely blocked by internet providers anyway. If your outgoing mail will not send, switching from port 25 to 587 with STARTTLS resolves the problem more often than any other single change.
Laid out side by side, the correct settings are easy to copy across to any mail client. Use this as a quick reference whenever you set up or repair an account.
| Purpose | Protocol | Secure port | Encryption | Avoid |
|---|---|---|---|---|
| Incoming, synced | IMAP | 993 | SSL or TLS | 143 (unencrypted) |
| Incoming, single device | POP3 | 995 | SSL or TLS | 110 (unencrypted) |
| Outgoing | SMTP | 465 | SSL | 25 (unencrypted) |
| Outgoing, alternative | SMTP | 587 | STARTTLS | 25 (unencrypted) |
How do app passwords and two-factor authentication fit in?
Two-factor authentication is one of the most effective protections you can switch on, and you should. Microsoft has reported that multi-factor authentication blocks the overwhelming majority of automated account-compromise attempts, which is why providers push you towards it. There is one catch for email setup: once the second factor is on, many providers will no longer accept your normal password inside a desktop or mobile mail app. Instead you generate an app password, a long one-off code created in your account security settings, and paste that into the client in place of your usual password. Your main login stays protected by the second factor, and your trusted apps keep working without weakening anything.
Do you still need to configure email by hand?
For most mainstream accounts, the answer is increasingly no. Major providers support autodiscover, where typing your address and password is enough for the client to detect the correct servers and ports automatically. That is a genuine convenience, and you should let it do the work when it can.
Manual configuration still earns its place in a few situations: custom domains and business mail where autodiscover records may be missing or wrong, older or specialised clients that do not support it, and any time you are troubleshooting. When automatic setup fails or quietly chooses POP3 over IMAP, knowing the exact servers, ports and encryption to enter is what gets you back to a working inbox in minutes rather than hours. For a business, this is also where a managed setup pays off, because consistent, secure configuration across a whole team removes a steady stream of small support headaches.
How do you troubleshoot common email problems?
When something breaks, work through the settings in order rather than guessing. If mail will not send, the fault is in the outgoing SMTP details, so check the server name, the port (try 587 with STARTTLS), the encryption type and that your username is your full email address. If mail will not arrive, check the incoming server and confirm you are on port 993 for IMAP. If the client keeps rejecting a correct password, two-factor authentication is likely on and you need an app password instead. And if one device shows different mail to another, you are probably on POP3 and should switch that account to IMAP.
Configure it carefully once and email returns to being what it should be: invisible, reliable infrastructure that you never have to think about. Get the protocol, the ports, the encryption and the password method right, test it on every device, and your inbox quietly does its job while you get on with yours.
In short
How do you configure an email account correctly?
Key takeaways
- IMAP keeps every device in sync, while POP3 downloads to one device. For modern use, pick IMAP.
- Always use secure ports: 993 for IMAP, 995 for POP3, and 465 or 587 for outgoing SMTP.
- SSL and TLS encryption protects your password and messages, so never use the old unencrypted ports.
- With two-factor authentication on, generate an app password rather than using your main login.