Settings by provider
Published settings as of 2026-08-22. These do change, so each row links to the provider’s own documentation, which is where your final answer should come from.
| Provider | IMAP | SMTP | Authentication |
|---|---|---|---|
| Gmail and Google Workspace | imap.gmail.com:993 | smtp.gmail.com:587 | App password. Requires 2-step verification to be on first. |
| iCloud Mail | imap.mail.me.com:993 | smtp.mail.me.com:587 | App-specific password from your Apple Account page. |
| Fastmail | imap.fastmail.com:993 | smtp.fastmail.com:465 | App password, scoped to mail. |
| Zoho Mail | imap.zoho.com:993 | smtp.zoho.com:465 | App password. Regional hosts differ, for example imap.zoho.eu. |
| Spacemail | mail.spacemail.com:993 | mail.spacemail.com:465 | Your mailbox password, or an app password if you have enabled 2FA. |
| Migadu | imap.migadu.com:993 | smtp.migadu.com:465 | The mailbox password you set in the Migadu admin. |
| Your own domain, generic | imap.yourdomain.com:993 | smtp.yourdomain.com:465 or :587 | Whatever your host issues. Ask them for IMAP and SMTP settings. |
Microsoft 365 and Outlook.com
Not supported, and not by choice. Microsoft has retired password-based authentication for IMAP and SMTP on both, so there is no app password to issue and no way for a third-party client to sign in with one. Any tool connecting this way is affected identically.
If your support address is on Microsoft, the options are a mail host that still supports IMAP, or a tool that has been through Microsoft’s OAuth application review.
Getting an app password
The wording differs, the shape does not.
- Turn on two-factor authentication first. Most providers hide app passwords until you do, which is the usual reason the setting appears to be missing.
- Generate one password per application. One for Moorline, one for anything else. Revoking then disconnects exactly one thing.
- Copy it immediately. Providers show it once. If you lose it, delete it and make another rather than hunting for it.
- Paste it without spaces. Google displays its sixteen characters in groups of four for readability, and the spaces are not part of the password.
When it will not connect
Authentication failed
Nearly always the password rather than the host. Check you used an app password and not your account password, and that you did not paste a trailing space. If your provider has a separate “allow IMAP access” toggle, as Zoho and Gmail have had at various points, it needs to be on.
Connection timed out
Usually the wrong port or a network blocking it. Confirm 993 for IMAP, and try the other SMTP port your provider lists. Some corporate and hotel networks block outbound 465 and 587, which looks exactly like a broken configuration.
Sends fail but receiving works
The two are separate services with separate credentials, so this is normal rather than strange. Check the SMTP host is the send host and not a copy of the IMAP host, and that the port matches the encryption mode your provider expects.
Mail arrives but replies do not thread
The sending address has to match the mailbox. If you readsupport@yourdomain.combut send as a personal address, the customer sees a reply from a stranger and their mail client starts a new thread.
Questions people actually ask
What is an app password and why do I need one?
It is a single-purpose password that lets one application sign in without your account password and without going through two-factor prompts. Most providers now require one for IMAP. The advantage is that revoking it disconnects that one app and nothing else, so it is safer than handing over your real password even when the provider allows it.
Does Moorline work with Outlook.com or Microsoft 365?
No. Microsoft has retired password-based IMAP and SMTP authentication on both, so there is no app password to issue. This is a Microsoft policy rather than a Moorline limitation, and it affects every tool that connects this way.
Should I use port 465 or 587 for SMTP?
Use whichever your provider publishes. 465 is implicit TLS, where the connection is encrypted from the first byte. 587 is STARTTLS, where the connection upgrades to encryption after a handshake. Both are secure when configured correctly, and providers differ on which they prefer. Port 25 is for server-to-server delivery and should not be used here.
Do I need a separate support address, or can I use my personal one?
Use a separate one. It keeps support mail separable from everything else, it survives being handed to someone else later, and it lets a tool read support mail without reading your personal correspondence. Every mail host lets you add an address or an alias at no cost.
Will connecting a tool over IMAP break my normal mail app?
No. IMAP is designed for several clients reading one mailbox at once, which is how your phone and your laptop already both show the same mail. Adding a third reader changes nothing for the first two.
Settings checked on 2026-08-22against each provider’s published documentation. If one of these is wrong or has moved, tell me and it gets corrected.