Network ports · 995
995 — POP3S
Port 995 is POP3 over TLS, encrypted from the first byte.
Key facts
| Port | 995 |
|---|---|
| Transport | TCP |
| Service | POP3 over TLS |
| Encryption | Implicit TLS |
| Preference | Use instead of 110 where possible |
| Range | Well-known (0–1023) |
The encrypted POP3 port
Port 995 wraps POP3 in TLS from the start, so the username, password and message contents are protected before any protocol command is sent. It is the POP3 equivalent of IMAPS on 993 and the correct choice for any client that still uses POP3.
POP3 remains useful for a single device that downloads and archives mail. For multi-device use, IMAP keeps folders and read state in sync.
What to check
Verify that the certificate matches the mail hostname and that the client is not configured to ignore certificate errors. Some providers use a shared mail hostname across domains, which is fine as long as the certificate covers it.
If port 995 is blocked, the client may silently fall back to 110 without TLS. Check the connection settings rather than assuming the client is encrypting.
Frequently asked questions
Is POP3S the same as POP3 with STLS?
No. POP3S starts with TLS on 995; STLS upgrades a connection that began on 110.
Does POP3S delete mail from the server?
Only if the client is configured to delete after download. The TLS layer does not change the mailbox model.