Most major email providers support IMAP, but the details matter more than the checkmark. Zoho Mail removed IMAP from its free plan. Proton Mail only offers it through a bridge application on paid plans. Tuta doesn’t support it at all, by design. And Google now requires OAuth sign-in, which older mail clients can’t do. If you want your email in Outlook, Apple Mail or Thunderbird, those distinctions decide whether it works.
This comparison looks at what each provider actually gives you — full IMAP, restricted IMAP, or none — so you can pick one that fits how you want to read your mail.
For free webmail with IMAP, Gmail and Outlook.com both work well, provided your client supports modern OAuth sign-in. For privacy with standard IMAP, Fastmail and Mailfence give direct access; Proton requires its Bridge app on a paid plan, and Tuta offers no IMAP at all. For email at your own domain, a hosting plan with a control panel like DirectAdmin or cPanel gives you unrestricted IMAP on as many mailboxes as you need, with no per-user pricing and no authentication hoops.
What “IMAP support” actually means in practice
Nearly every provider lists IMAP as a feature, but that single word hides four very different realities:
- Full, unrestricted IMAP. Standard hostname, port 993, works in any client. This is what most hosting-based email and providers like Fastmail offer.
- IMAP behind a paywall. The protocol exists, but only if you pay. Zoho Mail is the notable case here.
- IMAP through a bridge. A local application decrypts your mail and presents it to your client as if it were a normal IMAP server. Proton Mail works this way.
- No IMAP. Some encrypted providers reject the protocol entirely, because handing decrypted mail to a third-party client breaks their security model. Tuta takes this position.
There’s a fifth wrinkle that cuts across all of them: authentication. Google, Microsoft and others now require OAuth for third-party apps, and app passwords are being phased out in places. A provider can support IMAP perfectly while still refusing to connect to an older client.
What IMAP doesn’t do
Worth knowing before you choose: IMAP synchronizes email only. It doesn’t carry calendars, contacts or tasks. Those travel over separate protocols — CalDAV and CardDAV on standards-based services, or Exchange ActiveSync in the Microsoft world.
That’s a large part of what you’re paying for with Google Workspace or Microsoft 365: not better email delivery, but calendars, contacts and tasks synced across the organisation alongside it. If all you need is mail in a mail client, IMAP alone is enough. If your team schedules together, factor that in.
Before you choose: where IMAP is limited or missing
These are the cases that catch people out, and most comparison articles get them wrong:
- Zoho Mail free plan: no IMAP. Zoho restricted IMAP, POP and Active Sync to paid plans. New free accounts are webmail and mobile app only. Existing users from before the change kept access, which is why you’ll still find guides saying it works.
- Proton Mail: IMAP only via Bridge, paid plans only. Bridge is a desktop app for macOS, Windows and Linux that acts as a local IMAP server. It doesn’t cover mobile, and Proton offers no POP3.
- Tuta: no IMAP, POP3 or SMTP. This is deliberate, and it follows from the encryption model. With ordinary providers, mail is encrypted in transit (TLS) but readable on the server, so handing it to a client over IMAP is straightforward. With end-to-end encryption, only your device holds the keys — so serving plain IMAP would mean decrypting somewhere in the middle. Proton solves this with Bridge, which decrypts locally on your computer. Tuta declines to solve it at all, and keeps you in its own apps.
- Google Workspace: OAuth only. Since May 2025, work and school accounts no longer accept plain passwords or app passwords for mail clients. Older clients simply cannot connect.
Free webmail providers with IMAP
Gmail offers full IMAP at imap.gmail.com on port 993, and since January 2025 the enable/disable toggle is gone — IMAP is permanently on for personal accounts. The catch is authentication: Google expects OAuth. Modern clients handle it seamlessly; older ones need an app password with two-step verification, and Workspace accounts can’t use passwords at all. If a Gmail account won’t connect, our guide on imap.gmail.com not responding covers why.
Outlook.com (including @hotmail.com and @live.com) supports IMAP at outlook.office365.com on port 993. IMAP must be switched on in the account settings, and Microsoft has been retiring basic authentication, so a current client using OAuth is the safest setup. See our Hotmail IMAP settings guide for the full configuration.
Yahoo Mail and iCloud Mail both offer IMAP, and both require an app-specific password generated in the account’s security settings — your normal password won’t work in a mail client.
mail.com and GMX provide free IMAP access with fewer authentication hurdles, though with smaller storage and a more basic feature set than the big three.
Paid providers with strong IMAP support
Fastmail is the strongest all-round option for people who specifically want a mail client. It offers full IMAP, POP and SMTP, custom domain support, shared folders and large mailboxes, with no bridge and no protocol restrictions. It’s paid-only, with no free tier.
Mailfence offers end-to-end encryption via OpenPGP with native IMAP and SMTP — no intermediary application. For anyone who wants encryption and a normal mail client, this avoids the compromise Proton’s Bridge requires.
Proton Mail is the best-known private provider, and its Bridge app does let you use Outlook, Apple Mail or Thunderbird — but only on a paid plan, and only on desktop. If your priority is encryption and you accept the trade-off, it’s excellent; if your priority is IMAP everywhere, it isn’t the natural fit.
StartMail offers PGP encryption with IMAP and SMTP compatibility under Dutch privacy law, in a similar bracket.
Business suites
Google Workspace and Microsoft 365 both support IMAP and are the default for organizations that want mail bundled with documents, calendars and conferencing. Both charge per user per month, which is the main consideration: ten mailboxes cost ten subscriptions. Both now require OAuth for mail clients, and administrators can disable IMAP organisation-wide. Our guide to IMAP pricing breaks down how the billing models compare and what to check before committing.
Watch the fine print on any per-mailbox plan: minimum seat counts, annual-only billing and setup fees are common, and they change the real cost more than the headline price does.
Zoho Mail paid plans include IMAP and are among the cheapest per user, with a well-regarded webmail interface. Just be clear that the free tier will not connect to a mail client.
Email at your own domain, through web hosting
This is a distinct category that comparison articles often skip, and it’s worth understanding because the economics are completely different.
With a web hosting plan that includes email, you get plain, unrestricted IMAP on mail.yourdomain.com, port 993. Mailboxes are created and managed from the hosting control panel — usually DirectAdmin or cPanel, which offer the same email features through different interfaces.
There’s no per-user pricing: you create as many mailboxes as your plan allows for one flat cost. Authentication is a simple password you set and reset yourself in the control panel, with no OAuth flows, no app passwords, and no policy changes deciding whether your mail client still works next year.
The trade-offs are real and worth stating. Hosting-based email typically doesn’t include the collaboration suite that Google Workspace or Microsoft 365 bundles, and the very large providers invest more heavily in spam filtering infrastructure. If your organisation lives inside shared documents and video calls, a suite makes sense. If what you need is professional addresses at your domain that work reliably in any mail client, hosting email does it for a fraction of the per-user cost.
Our guide on what an email domain is explains the concept, and how to get a domain name for email walks through setting one up.
Comparison at a glance
| Provider | IMAP access | Best for |
|---|---|---|
| Gmail | Full, always on — OAuth required | Free personal email with a modern client |
| Outlook.com | Full — must be enabled; OAuth preferred | Free email in the Microsoft ecosystem |
| Yahoo / iCloud | Full — app password required | Existing accounts on those platforms |
| Fastmail | Full, unrestricted | Power users who live in a mail client |
| Mailfence | Full, native — with OpenPGP | Encryption without a bridge app |
| Proton Mail | Via Bridge app — paid plans, desktop only | Maximum privacy, desktop workflow |
| Tuta | None — by design | Encryption purists using Tuta’s apps |
| Zoho Mail | Paid plans only — not on free tier | Low-cost business suite |
| Google Workspace / Microsoft 365 | Full — OAuth mandatory, admin can disable | Teams needing a full collaboration suite |
| Web hosting email (DirectAdmin / cPanel) | Full, unrestricted — simple password auth | Custom domain, many mailboxes, flat cost |
How to choose
Work backwards from your constraint:
- You want a free personal address that works in your mail app → Gmail or Outlook.com, with a current client that supports OAuth.
- You want privacy and a normal mail client → Mailfence for native IMAP, or Proton if you accept Bridge on desktop.
- You want the best mail-client experience overall → Fastmail.
- You need documents, calendars and video calls bundled → Google Workspace or Microsoft 365, accepting per-user pricing.
- You want professional addresses at your own domain, several mailboxes, and no authentication surprises → email through a web hosting plan.
- You want maximum encryption and don’t need a mail client → Tuta, understanding IMAP isn’t coming.
Whichever you pick, the setup is the same idea everywhere: incoming server on port 993 with SSL/TLS, outgoing on 587, and your full address as the username. Our guide on what an IMAP account is covers the fundamentals.
Copahost hosting plans include email at your domain with standard IMAP, POP3 and SMTP — as many mailboxes as you need for one flat price, passwords you control yourself in the hosting control panel, and a free domain for the first year on yearly plans.
See hosting plans with emailFrequently asked questions
Which email providers support IMAP?
Gmail, Outlook.com, Yahoo, iCloud, Fastmail, Mailfence, StartMail, Google Workspace, Microsoft 365 and virtually all web hosting email services support IMAP. Zoho Mail supports it only on paid plans, Proton Mail only through its Bridge application on paid plans, and Tuta does not support it at all.
What is the best free email provider with IMAP?
Gmail and Outlook.com are the strongest free options, both offering full IMAP with generous storage. The main requirement is a mail client that supports OAuth sign-in, since both providers have moved away from plain password authentication.
Does Zoho Mail free include IMAP?
No. Zoho restricted IMAP, POP and Active Sync to paid plans, so newly created free accounts can only use webmail and Zoho’s own mobile apps. Users who had free accounts before the change kept their access, which is why some older guides still describe it as available.
Can I use Proton Mail with Outlook or Thunderbird?
Yes, but only with a paid plan and the Proton Mail Bridge application, which runs on macOS, Windows and Linux and presents your mailbox to the client as a local IMAP server. Bridge does not cover mobile devices, and Proton does not offer POP3.
Does Tuta support IMAP?
No. Tuta deliberately does not support IMAP, POP3 or SMTP, on the basis that passing decrypted messages to third-party clients would weaken its encryption model. You access a Tuta mailbox through Tuta’s own web, desktop and mobile apps.
Is email from a web hosting plan good enough for business?
For most small and medium businesses, yes. You get addresses at your own domain with full IMAP, POP3 and SMTP, multiple mailboxes at a flat cost rather than per user, and direct control over passwords. Larger organisations that depend on integrated documents, calendars and conferencing may still prefer a full suite.
Do I need to pay for IMAP access?
Not necessarily. Gmail, Outlook.com, Yahoo, iCloud and hosting-based email all provide IMAP without a separate charge. Zoho is the main provider that puts it behind a paid plan, and Proton requires a paid plan for Bridge.
Conclusion
“Supports IMAP” turns out to be a spectrum rather than a yes or no. Gmail and Outlook.com give you full access but expect modern authentication. Fastmail and Mailfence give you IMAP with no asterisks. Proton gives it to you through a bridge, on desktop, if you pay. Zoho gives it to you only if you pay. Tuta doesn’t give it to you at all, and says so plainly. And email at your own domain through a hosting plan gives you the plainest version of all — a hostname, port 993, and a password you control. The right choice depends less on which provider is “best” and more on which of those realities matches how you actually read your mail.
