220-1202 · Operating Systems · Updated July 26, 2026
IMAP vs POP3: Email Protocols, Ports, and Multi-Device Sync
IMAP (Internet Message Access Protocol) and POP3 (Post Office Protocol version 3) are the two client protocols for retrieving email from a mail server. IMAP leaves messages on the server and mirrors their state — read, deleted, moved — to every connected device, which is why it is the right choice for anyone checking mail on both a phone and a computer. POP3 downloads messages to a single device and, by default, removes them from the server, so nothing stays in sync. The default ports to memorize: POP3 uses 110 unencrypted and 995 with SSL/TLS; IMAP uses 143 unencrypted and 993 with SSL/TLS.
The mailbox model: server-side vs. download-and-delete
The two protocols embody opposite ideas about where your mailbox lives.
IMAP treats the server as the mailbox. The client is a window onto it. When you open a message on your phone, the server marks it read, and your laptop shows it read seconds later. Delete it anywhere and it disappears everywhere. Folders you create in one client exist in all of them, because the folders themselves are server-side objects. Most clients cache copies locally for speed and offline reading, but the server copy remains the authoritative one. This is the model every modern webmail-backed account (Microsoft 365, Gmail via IMAP) assumes, and it is what a help-desk technician should configure by default when setting up a mail client.
POP3 treats the client as the mailbox. The client connects, downloads whatever is new, and — in the classic configuration — deletes the server copies. The server is just a temporary drop box. That design dates from the era of one household computer and metered dial-up, and it still has two legitimate upsides: mail is fully usable offline, and the server mailbox never fills up. But there is no synchronization of anything. Read status, deletions, sent mail, and folders live only on the device that created them.
Why POP3 breaks on two devices
Put the same POP3 account on a laptop and a phone and the cracks show immediately. Each device independently pulls its own copies of incoming mail. If the phone deletes messages, it deletes its local copies — the laptop’s copies are untouched and still show as unread, because neither device ever reports state back to the server or to each other. Many users first “fix” this by enabling the POP3 option to leave a copy of messages on the server, which at least lets both devices download everything — but it still does not synchronize read status or deletions, and the server mailbox now grows until it hits quota.
The real fix a technician should make: reconfigure the account to use IMAP (or a vendor sync protocol like Exchange ActiveSync) on both devices. Once both clients speak IMAP, deleting a message on the phone deletes it from the server, and the laptop reflects that automatically. When an exam scenario describes deletions or read status failing to carry between devices on POP3, the correct configuration change is switching the protocol, not tweaking download schedules.
Ports and encryption
Retrieval protocols only pull mail down. Sending is a separate protocol — SMTP (Simple Mail Transfer Protocol) — so a mail client always has two server entries: incoming (IMAP or POP3) and outgoing (SMTP). Setting up an account by hand — in Outlook, through the Mail applet covered in Control Panel applets — means entering the server hostnames, the ports, and the security type, and the exam expects you to know the defaults cold:
| Protocol | Role | Default port (unencrypted) | Default port (SSL/TLS) |
|---|---|---|---|
| POP3 | Retrieve mail (single device) | 110 | 995 (POP3S) |
| IMAP | Retrieve mail (synced) | 143 | 993 (IMAPS) |
| SMTP | Send mail | 25 (server-to-server) | 587 (STARTTLS submission) / 465 (implicit TLS) |
Two practical notes. First, production setups should always use the encrypted ports — credentials and message bodies travel in cleartext on 110 and 143. Second, a wrong port or wrong security type is the classic cause of “cannot connect to server” during manual account setup: a client pointed at 993 but set to “no encryption,” or at 143 expecting SSL, will fail even though every name and password is correct. Pairing the port with its matching security setting is the troubleshooting habit to build.
Memory hooks that hold up under exam pressure: the encrypted retrieval ports are the high 9xx pair — 995 goes with POP3, 993 with IMAP — while the low ports 110 and 143 are their plaintext originals.
Choosing between them on a real service call
Configure IMAP unless the user gives you a specific reason not to. The reasons that still favor POP3 are narrow: a single device only, a need to keep every message offline permanently, an ISP (Internet service provider) mailbox with a tiny quota, or an ancient client that speaks nothing else. In every multi-device scenario — which today means nearly everyone — IMAP is correct, and corporate environments typically go a step further to Exchange/ActiveSync or webmail, which add calendar and contact sync on top of mail. IMAP is also the natural companion to the cloud-productivity habits covered in cloud storage sync and collaboration: the authoritative copy lives server-side, and devices are synchronized views of it.
How the 220-1202 exam tests this
- Feature identification: a stem describes wanting messages viewable and managed on the server with state synchronized across a desktop and smartphone, and asks which protocol delivers that — the answer pattern is IMAP.
- The POP3 two-device symptom: mail deleted on one device still sits unread on another, and the question asks which configuration change prevents the mismatch — reconfigure the account from POP3 to IMAP.
- Straight port recall: which port is the default for unencrypted POP3 (110), or for IMAP over SSL/TLS (993). Expect both the plain and encrypted variants, and expect SMTP’s 25/587 as distractor options — the kind of recall that timed practice questions cement fastest.
- Setup troubleshooting: a manually configured account cannot connect, and the fault is a port/security-type mismatch rather than bad credentials.
Port memorization pays off across several objectives, not just email — the full 220-1202 study guide covers what else to drill before exam day.
Quick reference
- IMAP: mail lives on the server; read/delete/folder state syncs to all devices.
- POP3: mail downloads to one device; default behavior deletes server copies; no sync of any state.
- “Leave a copy on server” makes POP3 tolerable on multiple devices but still never syncs read status or deletions.
- Multi-device sync problems on POP3 are fixed by switching the account to IMAP.
- Ports — POP3: 110 plain, 995 SSL/TLS. IMAP: 143 plain, 993 SSL/TLS.
- SMTP sends mail: 25 server-to-server, 587 (or 465) for client submission.
- Always match the port to the security setting; a mismatch mimics a bad-password failure.
- Default recommendation on service calls: IMAP (or Exchange/ActiveSync), encrypted ports only.