Setting Up Business Email on Your Phone and Computer: IMAP, POP3 and SMTP

After you create an email account in cPanel, you can read messages in webmail in the browser. Most people, though, want their email on their phone and in a desktop program. That needs the right server name, port and security setting.

IMAP or POP3?

IMAP keeps messages on the server and syncs all your devices. A message you read on your phone shows as read on your computer; a message you move to a folder is moved everywhere. If you use more than one device, IMAP is the right choice.

POP3 downloads messages to a single device and usually deletes them from the server. It saves server space, but if the device breaks the messages are gone, and nothing syncs with your other devices. Today it is rarely the better option.

Where to find the right settings

In cPanel go to Email › Email Accounts and click Connect Devices next to the account. This screen shows the server name and ports for your account. For some programs you can also download an automatic configuration file there.

Standard secure ports

The username is always the full email address ([email protected]), and the password is the one you set for that account in cPanel. The outgoing server also needs authentication; in most programs you just tick "outgoing server requires authentication".

Common problems

I get a certificate warning

If you entered mail.example.com as the server and no SSL certificate exists for that name yet, you'll see a warning. Use the server name suggested on the Connect Devices screen, or get the certificate issued with the steps in the AutoSSL guide.

I can receive but not send

Some internet providers and corporate networks block port 25. Use port 465 or 587 for the outgoing server and make sure outgoing authentication is switched on.

My messages go to spam

That isn't related to the client settings; it depends on your domain's DNS records and sending habits. See why emails land in spam.

One last security tip

Use a separate, strong password for each email account. If one account's password is stolen, it can be used to send spam, which damages your domain's reputation. Our password and 2FA guide has practical advice.