Port 995: POP3S

Port 995 is POP3S, POP3 over implicit TLS, on TCP. It secures the login and message download that plain POP3 on port 110 sends in clear text.

TCPEmail EncryptedIANA assigned
Port number995
ServicePOP3 over TLS
ProtocolTCP
CategoryEmail
Default encryptionYes (TLS/SSH)
IANA service namepop3s
IANA transportsTCP, UDP
Used in practiceTCP
Registry versus reality. IANA lists pop3s on both TCP and UDP at 995, noting the UDP entry was formerly spop3. Only TCP is used. Checked against the IANA port number registry on 26 July 2026.

Which ports are related to port 995?

The port a reader usually needs next is the encrypted or plaintext twin of this one, so those are listed first rather than buried in a generic list.

PortRelationshipWhy it matters
110plaintextPlain POP3, unencrypted unless upgraded with STLS.
993companionIMAPS, the encrypted version of the keep-mail-on-the-server model, which is what most people should use instead.

What commonly listens on port 995?

  • Dovecot and Courier POP3 listeners
  • Hosting control panels offering legacy mail access

How do I check whether port 995 is open?

Port 995 carries TCP, so a connection either completes its handshake or it does not, which makes the check definitive.

QuestionCommandWhat to know
Is it open on a remote host?nc -vz example.com 995A TCP handshake either completes or it does not, so netcat gives a definitive answer in one line.
Same check on WindowsTest-NetConnection example.com -Port 995Built into PowerShell. TcpTestSucceeded in the output is the answer; telnet is not installed by default on modern Windows.
What is listening locally?ss -tlnp | grep ':995 'Lists the process bound to port 995 on Linux. On macOS use lsof -nP -iTCP:995 -sTCP:LISTEN, on Windows netstat -ano | findstr :995

Replace example.com with the host you are testing. A blocked port and a port with nothing listening on it look identical from the outside, so if a service should be running, check locally before blaming the firewall.

Frequently asked questions

What is the difference between port 995 and port 993?

Both are encrypted mail access, but different protocols. Port 995 is POP3S, which downloads messages to one device and by default deletes the server copy. Port 993 is IMAPS, which leaves mail on the server and syncs it to every device. For anything with more than one device, 993 is the right choice.

Is port 995 secure?

Yes, in the sense that traffic on it is TLS-encrypted from the moment the connection opens, unlike plain POP3 on port 110. The weakness of POP3 is its model rather than its transport: mail deleted from the server is gone if the device holding it fails.

What is port 995 used for?

Port 995 is POP3S, POP3 over implicit TLS, on TCP. It secures the login and message download that plain POP3 on port 110 sends in clear text.

Is port 995 TCP or UDP?

IANA assigns port 995 on TCP, UDP. In practice it carries TCP. IANA lists pop3s on both TCP and UDP at 995, noting the UDP entry was formerly spop3. Only TCP is used.

Should I open port 995 on my firewall?

Only if you specifically need POP3S. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.

Sources