This guide explains which protocols and ports can be used with Infomaniak's email services (including the Mail Service).

Recommended ports and settings for client configuration

When prompted during the configuration of software/email client (Outlook, Thunderbird, mobile, etc.), use the settings below.

Settings common to all accounts

• Server name: mail.infomaniak.com
• Authentication: required (username = full email address)

Technical note: port 587 with STARTTLS is the IETF standard practice for secure email submission. Port 465 is a secure alternative using implicit encryption.

If you specify other settings or disable encryption, email errors may occur.

Other supported ports (unencrypted or for backward compatibility)

Alternative ports:

• Port 143: standard port for IMAP reception (unencrypted, use 993 instead).
• Port 110: standard port for POP3 reception (unencrypted, use 995 instead).
• Port 995: secure port for POP3s reception (secure POP3 option).
• Port 25: standard port for server-to-server transfer (can support STARTTLS for submission, but port 587 remains the standard for clients).

Authentication and encryption compatibility:

• STARTTLS authentication is supported on unencrypted ports (143, 110, 25) to enable TLS encryption.
• SMTP authentication is supported via the LOGIN or PLAIN methods.

Using the API and securing transfers

The Infomaniak API does not offer direct connections to the email service, as IMAP and SMTP already serve as interfaces ("APIs"). To interact with the email service programmatically, use a dedicated library (for example, in Python: email.examples and imaplib).

Example of how to display emails from PHP:
imap_open("{mail.infomaniak.com:993/imap/ssl}", $email, $password);

The MTA-STS mechanism is not implemented or verified; Infomaniak uses DANE (DNS-based Authentication of Named Entities) instead to guarantee an encrypted connection between servers when the following conditions are met:

• The client sends an email to a domain that has configured DANE.
• The client receives an email from an SMTP server that uses DANE.

In all other cases (in the absence of DANE), the encrypted connection remains opportunistic.