Skip to content
Look up and open a port

Port 143: Understand the IMAP port for retrieving mail

Port 143 (TCP) is the default port for IMAP, which mail clients use to access mailboxes on a server. The tool shows you the details and generates firewall commands for the port.

Built by Justin Schuessler

Try the commands on your own VPS, with root access and your own firewall.

Add multiple ports one at a time, up to 12.

Or choose a preset

Ports

143/TCPIMAP

Email · Well-known port · OSI layer 7

Read and manage mail in your mailbox on the server. Without TLS, passwords and emails are sent in plain text.

IANA: officially registered as imap

Unencrypted: passwords and data travel across the network in plain text. Use the encrypted alternative or restrict access to the port to a specific IP address.

Firewall rule (inbound)

Firewall commands

Open port

sudo ufw allow 143/tcp
Check port
Notes on ufw

For Ubuntu and Debian. ufw creates the rule for both IPv4 and IPv6. If ufw is disabled, allow SSH first (sudo ufw allow 22/tcp), then enable it with sudo ufw enable, or you'll lock yourself out.

On a ZAP-Hosting VPS with an active network firewall, you also need to allow the port in the Customer Panel.

Port 143 explained

What is port 143 used for?

Purpose

Email clients access a mailbox via IMAP on port 143. Emails remain on the server, while folders and read status are synchronized across all devices. That's why IMAP is now the standard when you read your emails on both a computer and a smartphone. Without additional measures, the connection on port 143 is unencrypted, but it can be upgraded to TLS using STARTTLS.

Origin and standard

IMAP emerged in the 1980s as an alternative to POP3, which downloads mail and usually deletes it from the server. IMAP4rev1 in RFC 3501 was the standard for a long time; today it is IMAP4rev2 in RFC 9051. IANA lists port 143 as “imap”. RFC 8314 now recommends implicit TLS on port 993 instead of STARTTLS on port 143 for mail clients.

Typical use

  • Retrieving mail with Thunderbird, Outlook, or Apple Mail on multiple devices
  • Access from webmail interfaces to a mail server on the same network
  • Mailbox migration between two mail servers using tools such as imapsync

Security

Without encryption, port 143 transmits usernames, passwords and all emails in plain text. Prefer port 993 with implicit TLS. If you must continue offering port 143, require STARTTLS and prevent login without encryption. Also protect logins against password attacks, for example with Fail2ban.

More ports

Related ports

These ports are often part of the same setup. Click one to see its explanation and firewall commands.

View all well-known ports and the complete IANA list

Port list source: IANA Service Name and Transport Protocol Port Number Registry, as of October 22, 2026. iana.org

Discover more

More tools

FAQ

Frequently asked questions

Quick answers about port 143.

Both use IMAP. Port 143 starts unencrypted and can be encrypted with STARTTLS; port 993 is encrypted with TLS from the start. For new setups, use port 993.

Only if STARTTLS is required. Without encryption, anyone intercepting the traffic can read your password and mail. Port 993 is safer and simpler.

IMAP keeps mail on the server and syncs it across all devices. POP3 downloads mail to one device and usually deletes it from the server. If you use multiple devices, IMAP is the better choice.

With ufw, sudo ufw allow 143/tcp is enough. With firewalld, run sudo firewall-cmd --permanent --add-port=143/tcp followed by sudo firewall-cmd --reload. First, consider whether port 993 alone would be enough.

Any more questions?

Contact Support
Your own server?

Try the commands on your own VPS

With a ZAP-Hosting VPS, you have root access, can set up services and firewall rules yourself, and can immediately see which ports are open.

4.4/5 Trustpilot32,000+ Active serversSince 2010

No setup. No risk. Online in seconds.

Flexible TermCancel anytimeOnline in 60 seconds

Looking for more tools? View all network tools