Most major email providers support IMAP, but the details matter more than the checkmark. Zoho Mail removed IMAP from its free plan. Proton Mail only offers it through a bridge application on paid plans. Tuta doesn’t support it at all, by design. And Google now requires OAuth sign-in, which older mail clients can’t do. If you want your email in Outlook, Apple Mail or Thunderbird, those distinctions decide whether it works.
This comparison looks at what each provider actually gives you — full IMAP, restricted IMAP, or none — so you can pick one that fits how you want to read your mail.
For free webmail with IMAP, Gmail and Outlook.com both work well, provided your client supports modern OAuth sign-in. For privacy with standard IMAP, Fastmail and Mailfence give direct access; Proton requires its Bridge app on a paid plan, and Tuta offers no IMAP at all. For email at your own domain, a hosting plan with a control panel like DirectAdmin or cPanel gives you unrestricted IMAP on as many mailboxes as you need, with no per-user pricing and no authentication hoops.
What “IMAP support” actually means in practice
Nearly every provider lists IMAP as a feature, but that single word hides four very different realities:
- Full, unrestricted IMAP. Standard hostname, port 993, works in any client. This is what most hosting-based email and providers like Fastmail offer.
- IMAP behind a paywall. The protocol exists, but only if you pay. Zoho Mail is the notable case here.
- IMAP through a bridge. A local application decrypts your mail and presents it to your client as if it were a normal IMAP server. Proton Mail works this way.
- No IMAP. Some encrypted providers reject the protocol entirely, because handing decrypted mail to a third-party client breaks their security model. Tuta takes this position.
There’s a fifth wrinkle that cuts across all of them: authentication. Google, Microsoft and others now require OAuth for third-party apps, and app passwords are being phased out in places. A provider can support IMAP perfectly while still refusing to connect to an older client.
What IMAP doesn’t do
Worth knowing before you choose: IMAP synchronizes email only. It doesn’t carry calendars, contacts or tasks. Those travel over separate protocols — CalDAV and CardDAV on standards-based services, or Exchange ActiveSync in the Microsoft world.
That’s a large part of what you’re paying for with Google Workspace or Microsoft 365: not better email delivery, but calendars, contacts and tasks synced across the organisation alongside it. If all you need is mail in a mail client, IMAP alone is enough. If your team schedules together, factor that in.
Before you choose: where IMAP is limited or missing
These are the cases that catch people out, and most comparison articles get them wrong:
- Zoho Mail free plan: no IMAP. Zoho restricted IMAP, POP and Active Sync to paid plans. New free accounts are webmail and mobile app only. Existing users from before the change kept access, which is why you’ll still find guides saying it works.
- Proton Mail: IMAP only via Bridge, paid plans only. Bridge is a desktop app for macOS, Windows and Linux that acts as a local IMAP server. It doesn’t cover mobile, and Proton offers no POP3.
- Tuta: no IMAP, POP3 or SMTP. This is deliberate, and it follows from the encryption model. With ordinary providers, mail is encrypted in transit (TLS) but readable on the server, so handing it to a client over IMAP is straightforward. With end-to-end encryption, only your device holds the keys — so serving plain IMAP would mean decrypting somewhere in the middle. Proton solves this with Bridge, which decrypts locally on your computer. Tuta declines to solve it at all, and keeps you in its own apps.
- Google Workspace: no plain passwords. Since March 14, 2025, work and school accounts no longer accept a regular password in mail clients. They need OAuth sign-in — or an app password, which Google still allows unless the administrator has disabled it. Clients that support neither can no longer connect.
Free webmail providers with IMAP
Gmail offers full IMAP at imap.gmail.com on port 993, and since January 2025 the enable/disable toggle is gone — IMAP is permanently on for personal accounts. The catch is authentication: Google expects OAuth. Modern clients handle it seamlessly; older ones need an app password with two-step verification, and Workspace accounts need OAuth or an app password — a regular password no longer works. If a Gmail account won’t connect, our guide on imap.gmail.com not responding covers why.
Outlook.com (including @hotmail.com and @live.com) supports IMAP at outlook.office365.com on port 993. IMAP must be switched on in the account settings, and Microsoft has been retiring basic authentication, so a current client using OAuth is the safest setup. See our Hotmail IMAP settings guide for the full configuration.
Yahoo Mail and iCloud Mail both offer IMAP, and both require an app-specific password generated in the account’s security settings — your normal password won’t work in a mail client.
mail.com and GMX provide free IMAP access with fewer authentication hurdles, though with smaller storage and a more basic feature set than the big three.
Paid providers with strong IMAP support
Fastmail is the strongest all-round option for people who specifically want a mail client. It offers full IMAP, POP and SMTP, custom domain support, shared folders and large mailboxes, with no bridge and no protocol restrictions. It’s paid-only, with no free tier.
Mailfence offers end-to-end encryption via OpenPGP with native IMAP and SMTP — no intermediary application. For anyone who wants encryption and a normal mail client, this avoids the compromise Proton’s Bridge requires.
Proton Mail is the best-known private provider, and its Bridge app does let you use Outlook, Apple Mail or Thunderbird — but only on a paid plan, and only on desktop. If your priority is encryption and you accept the trade-off, it’s excellent; if your priority is IMAP everywhere, it isn’t the natural fit.
StartMail offers PGP encryption with IMAP and SMTP compatibility under Dutch privacy law, in a similar bracket.
Business suites
Google Workspace and Microsoft 365 both support IMAP and are the default for organizations that want mail bundled with documents, calendars and conferencing. Both charge per user per month, which is the main consideration: ten mailboxes cost ten subscriptions. Both have moved mail clients to OAuth, with app passwords as the remaining fallback where the administrator allows them, and administrators can disable IMAP organisation-wide. Our guide to IMAP pricing breaks down how the billing models compare and what to check before committing.
Watch the fine print on any per-mailbox plan: minimum seat counts, annual-only billing and setup fees are common, and they change the real cost more than the headline price does.
Zoho Mail paid plans include IMAP and are among the cheapest per user, with a well-regarded webmail interface. Just be clear that the free tier will not connect to a mail client.
IMAP email hosting: email at your own domain
This is a distinct category that comparison articles often skip, and it’s worth understanding because the economics are completely different.
It isn’t only for businesses. Personal IMAP email hosting — an address like you@yourname.com — is the one email address you truly own. If you ever change providers, you move the domain’s mail to the new host and keep the same address, instead of telling everyone you’ve switched from Gmail to something else.
With a web hosting plan that includes email, you get plain, unrestricted IMAP on mail.yourdomain.com, port 993. Mailboxes are created and managed from the hosting control panel — usually DirectAdmin or cPanel, which offer the same email features through different interfaces.
There’s no per-user pricing: you create as many mailboxes as your plan allows for one flat — and usually cheap — monthly cost. Authentication is a simple password you set and reset yourself in the control panel, with no OAuth flows, no app passwords, and no policy changes deciding whether your mail client still works next year.
The trade-offs are real and worth stating. Hosting-based email typically doesn’t include the collaboration suite that Google Workspace or Microsoft 365 bundles, and the very large providers invest more heavily in spam filtering infrastructure. If your organisation lives inside shared documents and video calls, a suite makes sense. If what you need is professional addresses at your domain that work reliably in any mail client, hosting email does it for a fraction of the per-user cost.
Our guide on what an email domain is explains the concept, and how to get a domain name for email walks through setting one up.
Comparison at a glance
| Provider | IMAP access | Best for |
|---|---|---|
| Gmail | Full, always on — OAuth required | Free personal email with a modern client |
| Outlook.com | Full — must be enabled; OAuth preferred | Free email in the Microsoft ecosystem |
| Yahoo / iCloud | Full — app password required | Existing accounts on those platforms |
| Fastmail | Full, unrestricted | Power users who live in a mail client |
| Mailfence | Full, native — with OpenPGP | Encryption without a bridge app |
| Proton Mail | Via Bridge app — paid plans, desktop only | Maximum privacy, desktop workflow |
| Tuta | None — by design | Encryption purists using Tuta’s apps |
| Zoho Mail | Paid plans only — not on free tier | Low-cost business suite |
| Google Workspace / Microsoft 365 | Full — OAuth or app password; admin can disable | Teams needing a full collaboration suite |
| IMAP email hosting (DirectAdmin / cPanel) | Full, unrestricted — simple password auth | Custom domain, many mailboxes, flat cost |
IMAP access is one part of the comparison; attachment size and daily sending caps are the other. Our comparison of email limits by provider puts those side by side.
IMAP server settings for popular providers
| Provider | IMAP server | Port | SMTP server | Port |
|---|---|---|---|---|
| Gmail | imap.gmail.com | 993 | smtp.gmail.com | 465 or 587 |
| Outlook.com / Hotmail | outlook.office365.com | 993 | smtp-mail.outlook.com | 587 |
| Yahoo Mail | imap.mail.yahoo.com | 993 | smtp.mail.yahoo.com | 465 or 587 |
| iCloud Mail | imap.mail.me.com | 993 | smtp.mail.me.com | 587 |
| Fastmail | imap.fastmail.com | 993 | smtp.fastmail.com | 465 |
| Zoho Mail (paid) | imap.zoho.com | 993 | smtp.zoho.com | 465 |
| GMX | imap.gmx.com | 993 | mail.gmx.com | 587 |
| Proton Mail (via Bridge) | 127.0.0.1 | 1143 | 127.0.0.1 | 1025 |
| Web hosting email | mail.yourdomain.com | 993 | mail.yourdomain.com | 465 or 587 |
Port 993 uses SSL/TLS from the start; 587 uses STARTTLS. Zoho uses regional servers — imap.zoho.eu for EU accounts, for example — so check which one your account belongs to. And the Proton addresses only work while the Bridge app is running on the same computer.
Which email client to use with IMAP
Any modern client works with the providers above. What differs is platform, price, and whether it handles OAuth sign-in for Gmail and Outlook.com:
- Thunderbird — free and open source, on Windows, macOS and Linux, with an Android version. Handles OAuth for Gmail and Outlook.com.
- Apple Mail — built into macOS and iOS, and the simplest option on Apple devices.
- Outlook — the natural choice on Windows if you already use Microsoft 365, and it works with any IMAP account.
- eM Client — a polished desktop client for Windows and macOS, with a free tier for personal use.
- Mailspring and BlueMail — lighter cross-platform clients that support Gmail, Outlook, Yahoo, iCloud and any standard IMAP server.
If a client connects to your hosting email but refuses Gmail, it almost always means it doesn’t support OAuth — the provider isn’t the problem.
How to choose
Work backwards from your constraint:
- You want a free personal address that works in your mail app → Gmail or Outlook.com, with a current client that supports OAuth.
- You want privacy and a normal mail client → Mailfence for native IMAP, or Proton if you accept Bridge on desktop.
- You want the best mail-client experience overall → Fastmail.
- You need documents, calendars and video calls bundled → Google Workspace or Microsoft 365, accepting per-user pricing.
- You want professional addresses at your own domain, several mailboxes, and no authentication surprises → email through a web hosting plan.
- You want maximum encryption and don’t need a mail client → Tuta, understanding IMAP isn’t coming.
Whichever you pick, the setup is the same idea everywhere: incoming server on port 993 with SSL/TLS, outgoing on 587, and your full address as the username. Our guide on what an IMAP account is covers the fundamentals.
Copahost hosting plans include email at your domain with standard IMAP, POP3 and SMTP — as many mailboxes as you need for one flat price, passwords you control yourself in the hosting control panel, and a free domain for the first year on yearly plans.
See hosting plans with emailFrequently asked questions
Which email providers support IMAP?
Gmail, Outlook.com, Yahoo, iCloud, Fastmail, Mailfence, StartMail, Google Workspace, Microsoft 365 and virtually all web hosting email services support IMAP. Zoho Mail supports it only on paid plans, Proton Mail only through its Bridge application on paid plans, and Tuta does not support it at all.
What is the best free email provider with IMAP?
Gmail and Outlook.com are the strongest free options, both offering full IMAP with generous storage. The main requirement is a mail client that supports OAuth sign-in, since both providers have moved away from plain password authentication.
What is IMAP email hosting?
Email hosted at your own domain — like you@yourcompany.com — with standard IMAP access, so it works in any mail client. It’s usually included in web hosting plans, with mailboxes created in the control panel, a flat price instead of per-user fees, and passwords you manage yourself.
Is email from a web hosting plan good enough for business?
For most small and medium businesses, yes. You get addresses at your own domain with full IMAP, POP3 and SMTP, multiple mailboxes at a flat cost rather than per user, and direct control over passwords. Larger organisations that depend on integrated documents, calendars and conferencing may still prefer a full suite.
Do I need to pay for IMAP access?
Not necessarily. Gmail, Outlook.com, Yahoo, iCloud and hosting-based email all provide IMAP without a separate charge. Zoho is the main provider that puts it behind a paid plan, and Proton requires a paid plan for Bridge.
Does Zoho Mail free include IMAP?
No. Zoho restricted IMAP, POP and Active Sync to paid plans, so newly created free accounts can only use webmail and Zoho’s own mobile apps. Users who had free accounts before the change kept their access, which is why some older guides still describe it as available.
Can I use Proton Mail with Outlook or Thunderbird?
Yes, but only with a paid plan and the Proton Mail Bridge application, which runs on macOS, Windows and Linux and presents your mailbox to the client as a local IMAP server. Bridge does not cover mobile devices, and Proton does not offer POP3.
Does Tuta support IMAP?
No. Tuta deliberately does not support IMAP, POP3 or SMTP, on the basis that passing decrypted messages to third-party clients would weaken its encryption model. You access a Tuta mailbox through Tuta’s own web, desktop and mobile apps.
Can I still use an app password with Google Workspace?
Yes, unless your administrator has disabled them. Since March 14, 2025, Workspace accounts no longer accept a regular password in mail clients, but Google still allows app passwords as an alternative to OAuth sign-in. If your client supports neither, it can no longer connect.
Which email client is best for IMAP?
Thunderbird is the best free option across Windows, macOS and Linux, and it handles OAuth sign-in for Gmail and Outlook.com. On Apple devices, the built-in Mail app is the simplest choice. Any modern client works with standard IMAP — the main thing to check is OAuth support if you use Gmail or Outlook.com.
Conclusion
“Supports IMAP” turns out to be a spectrum rather than a yes or no. Gmail and Outlook.com give you full access but expect modern authentication. Fastmail and Mailfence give you IMAP with no asterisks. Proton gives it to you through a bridge, on desktop, if you pay. Zoho gives it to you only if you pay. Tuta doesn’t give it to you at all, and says so plainly. And email at your own domain through a hosting plan gives you the plainest version of all — a hostname, port 993, and a password you control. The right choice depends less on which provider is “best” and more on which of those realities matches how you actually read your mail.
