whatportis.com
suggest an edit →

Port 993IMAPS

IMAPS (Internet Message Access Protocol Secure) is the encrypted version of IMAP that enables secure retrieval of email messages from a mail server over SSL/TLS. It protects the confidentiality and integrity of email content during transit, ensuring user credentials and emails remain private against eavesdropping and tampering..

inEmailSecurityCloud
transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
4/10

caution

lookups
14,509

rank 234 of 993 · top 23%

Technical Details

what runs on :993

Overview

IMAPS stands for Internet Message Access Protocol Secure, operating over port 993 using SSL/TLS encryption. It is an established protocol supported by nearly all modern email clients and servers, allowing encrypted retrieval and management of email messages. Unlike POP3, IMAPS synchronizes mail in real-time, enabling users to access messages from multiple devices while maintaining message status.

Protocol Details

IMAPS begins with a TLS handshake over port 993, establishing an encrypted connection before any IMAP commands are sent. This protects authentication credentials and subsequent data exchange. IMAP supports advanced mailbox management features, such as folder creation, message flagging, and search, made secure through encryption. The protocol is text-based and stateful, allowing complex interactions within secured sessions.

Operational Context

Because IMAPS maintains persistent server-side mail storage, it enables continuous synchronization across multiple devices. Many enterprise and cloud email services, including Microsoft Exchange, Google Workspace, and custom mail services, leverage IMAPS for secure access. Its encrypted nature makes it suitable for environments requiring confidentiality, such as finance, healthcare, and personal communication.

Security Information

exposure of :993

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

email averages 3.9 across 42 ports — this one sits 0.1 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Common Vulnerabilities:

  • Weak cipher suites: Use of outdated SSL/TLS versions (e.g., SSLv3) or weak cipher suites can expose the connection to eavesdropping or downgrade attacks.
  • Credential compromise: If weak passwords are used, brute-force attacks can result in unauthorized mailbox access.
  • Implementation bugs: Mail server software bugs or misconfigurations could be exploited to bypass authentication or leak data.
  • Man-in-the-middle (MITM) attacks: Without proper certificate validation, users might connect to malicious servers impersonating legitimate ones.

Common Mitigations:

  • Enforce strong TLS protocols and cipher suites, disabling outdated versions.
  • Employ multi-factor authentication (MFA) to reduce credential-based attack risks.
  • Regularly update mail server software and apply security patches.
  • Use valid, trusted certificates and configure clients to validate server identity strictly.
  • Implement rate-limiting and account lockouts to defend against brute-force attempts.
  • Monitor server logs for suspicious authentication or connection patterns.

Related Ports

all 42 in email →

the 8 most looked-up other ports in email — 42 ports carry that label.

portservicerisk
:143IMAPcaution
:995POP3Scaution
:109POP2caution
:2096cPanel SSL Webmailsafe
:110POP3caution
:1352Lotus Notes RPCcaution
:24Private Mailcaution
:7025Zimbra LMTPcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

2 of 8 encrypted