# POP3

> Source: Courseiva IT Certification Glossary — https://courseiva.com/glossary/pop3

## Quick definition

POP3 is a way for your email app to fetch messages from your email provider's server and store them on your computer or phone. It downloads emails so you can read them offline, and usually removes them from the server afterward. This means you can only access those emails from the device where you downloaded them.

## Simple meaning

Think of POP3 like picking up physical mail from a post office box. When you use POP3, your email program goes to your email provider's server (the post office), picks up all your new messages (the mail), and brings them back to your device (your home). After the messages are picked up, the server usually deletes its copy, just like the post office empties your box after you take the mail. This is great if you only use one device to check email, because all your messages live right on that device. You can read them even without an internet connection. The downside is that if you check email on your phone and then later on your laptop, the laptop won't see those already-downloaded messages. This is very different from IMAP, another email protocol that keeps messages on the server and lets you access them from many devices. POP3 uses TCP port 110 for regular connections and port 995 for secure connections (POP3S). It is simple, old, and very reliable, but it is not the best choice if you need to access your email from multiple places. Many IT certification exams test your understanding of when to choose POP3 versus IMAP, and they often ask about the default ports or what happens to messages on the server after download.

## Technical definition

POP3, or Post Office Protocol version 3, is a standard application-layer protocol defined in RFC 1939. It is used by email clients to retrieve email from a remote mail server over a TCP/IP connection. POP3 operates in a store-and-forward model: the server holds messages in a mailbox until the client connects and downloads them. The protocol uses a stateful connection with three distinct phases: authorization, transaction, and update. During authorization, the client sends a username and password (often using the USER and PASS commands, though AUTH is also supported). In the transaction phase, the client issues commands like STAT (to get mailbox status), LIST (to list messages), RETR (to retrieve a specific message), and DELE (to mark a message for deletion). Finally, in the update phase, the server deletes all messages marked for deletion and closes the connection. By default, POP3 uses TCP port 110 for unencrypted communication. Secure variants use POP3S (POP3 over SSL/TLS) on port 995, which encrypts the entire session. One critical standard behavior is that after a successful download, the server deletes the retrieved messages. However, clients can send the UIDL command to get unique identifiers for messages and avoid re-downloading duplicates. The protocol also supports a "keep mail on server" option, though not all servers honor it. From an IT implementation perspective, POP3 is lightweight on server resources because storage requirements are minimal once messages are downloaded. However, this makes it unsuitable for environments where users need to access the same mailbox from multiple devices, such as desktops, laptops, tablets, and phones. POP3 also lacks server-side folder management, meaning all messages are stored in a single INBOX on the client. The protocol has no provision for sent items or drafts on the server, which further limits its use in collaborative or multi-device scenarios. Despite its age, POP3 is still widely supported by email servers and clients, and it remains a fundamental concept in networking and email systems for IT certification exams like CompTIA A+, Network+, and Security+.

## Real-life example

Imagine you are a student who uses a shared library computer to check your school email. You sit down at the computer, open your email program, and click "Send/Receive." The program connects to the school's email server and downloads all your new messages to the library computer's hard drive. After the download completes, the server deletes those messages from its own storage. You read your emails, reply to a few, and then log out. Later that day, you walk to a different library branch and try to check your email on another computer. You open the email program, click "Send/Receive," and you see none of the messages you read earlier. They are gone from the server because they were already downloaded and deleted. You only find the new emails that arrived after your first check. This is exactly how POP3 works in real life. It treats your email like physical mail that is delivered to one location and then removed from the central post office. The protocol assumes you only read your email from that one computer. This analogy helps you remember that POP3 is perfect for a single-device setup, like a home desktop that is always on and always used by one person. But it is frustrating for anyone who checks email on multiple devices. The mapping to the IT concept is straightforward: the library computer is your email client, the school's email server is the POP3 server, and the act of downloading and deleting is the core POP3 process. Understanding this analogy helps you recall the limitations of POP3 and why modern email often uses IMAP instead.

## Why it matters

POP3 matters in practical IT because it is still widely deployed, especially in legacy systems, small offices, and personal setups. For an IT professional, knowing when to configure POP3 versus IMAP is a daily decision. For example, a user with a single desktop computer who wants to keep all emails offline and free up server storage is a perfect candidate for POP3. Conversely, if the user needs to check work email on a phone, a laptop, and a tablet, POP3 would cause lost messages and confusion. Many older email systems, especially in education or government, still use POP3 as their primary retrieval protocol. Understanding POP3 helps you troubleshoot connectivity issues, configure email clients correctly, and explain to users why their emails disappear from one device after they check on another. In terms of security, POP3 transmits credentials in plaintext unless you enforce POP3S on port 995. An IT admin must configure the server to require SSL/TLS and the client to use the secure port. Failure to do so can expose email credentials to anyone sniffing the network. POP3 does not synchronize read/unread status across devices, so a user may re-read the same email multiple times. This can lead to productivity loss and user frustration. For help desk technicians, a common call is "My emails are gone from my phone after I checked them on my laptop." That call is almost always caused by POP3. Knowing that, you can either switch the account to IMAP or educate the user about the protocol's behavior. POP3 also affects backup strategies because emails are stored locally, so if the device fails, all downloaded messages could be lost unless regularly backed up. Therefore, understanding POP3 is not just an exam requirement; it is a practical skill for configuring, securing, and troubleshooting email systems in real-world environments.

## Why it matters in exams

POP3 is a core objective in several major IT certification exams, and you can expect to see it tested in multiple ways. In the CompTIA A+ certification (exam codes 220-1101 and 220-1102), POP3 appears under the topic of "networking protocols and services." You need to know that POP3 uses port 110 and that POP3S (secure version) uses port 995. Expect multiple-choice questions that ask: "Which port does POP3 use?" or "Which protocol should you recommend for a user who only checks email from one device and wants to minimize server storage?" The correct answer is POP3. In CompTIA Network+ (N10-008), POP3 is part of the "network services" domain. Questions may present a scenario where a user is experiencing email issues after switching from a desktop to a mobile device. You must identify that POP3's behavior of deleting messages after download is the root cause. The exam may also ask you to differentiate between POP3 and IMAP in terms of message storage, port numbers, and multi-device support. In CompTIA Security+ (SY0-601), POP3 is relevant under "secure protocols." You may be asked about the security implications of using plaintext POP3 versus POP3S, or which port to allow through a firewall for secure email retrieval. The correct answer is port 995 for POP3S. In Cisco CCNA, POP3 appears briefly within the application layer protocols, but the focus is more on IMAP. However, POP3 still shows up in questions about email flow and troubleshooting. For entry-level exams like IT Fundamentals (ITF+), POP3 is listed as a basic email protocol, and you need to know its general purpose. In Microsoft's MD-102 (Endpoint Administrator), POP3 configuration in Outlook is covered, especially when setting up email profiles. The exam may ask about the effect of POP3 on email synchronization (or the lack thereof). Across all these exams, the typical question types are: port identification, scenario-based choices between POP3 and IMAP, security implications, and the effect of protocol choice on user experience. Mastering POP3 means memorizing the ports (110 and 995), the key characteristic (download and delete from server), and the single-device limitation. If you can remember that POP3 is the "post office" protocol that delivers mail to one door and then discards it, you will answer most POP3 questions correctly on these exams.

## How it appears in exam questions

POP3 questions appear in certification exams in three main patterns: port identification, protocol comparison, and troubleshooting scenarios. In port identification questions, you will be given a list of protocols and ports, and you must match POP3 to port 110 (or POP3S to port 995). For example, a typical question: "Which of the following protocols uses TCP port 110?" Options might include SMTP, IMAP, POP3, and HTTPS. The correct answer is POP3. Sometimes they mix secure variants, so you must also know that POP3S uses port 995. In protocol comparison questions, the exam presents a scenario describing user requirements. For instance: "A user checks email from a single home computer and wants to keep the server storage low. Which email retrieval protocol should you configure?" The correct answer is POP3 because it downloads and removes messages. Another variation: "A user travels frequently and uses a laptop, phone, and tablet to check email. Which protocol would be most appropriate?" The answer is IMAP, because POP3 would not keep messages accessible across devices. The exam may also ask about the result of using POP3: "What happens to emails on the server after a POP3 client downloads them?" Answer: They are typically deleted. In troubleshooting scenarios, the question describes a user problem. Example: "A user reports that after reading emails on her phone, she cannot see them on her laptop. What is the most likely cause?" Answer: The email account is configured with POP3 instead of IMAP. Another troubleshooting question: "A user cannot retrieve email using POP3 on port 110. The network team confirms the port is open. What is the most likely issue?" The answer could be that the server requires encrypted POP3 on port 995, or that the client is not using the correct security settings. Some questions test your knowledge of the protocol's limitations: "Which of the following is a limitation of POP3 compared to IMAP?" Options include no server-side folders, no synchronization across devices, and no ability to keep messages on the server (though some clients can work around this). The best answer is the lack of multi-device synchronization. Finally, there are configuration questions where you must select the correct server settings for a POP3 account: incoming mail server, port number, and security type. These questions often appear in A+ and Microsoft endpoint exams. By practicing these question patterns, you can easily recognize what the exam is testing and confidently select the correct answer.

## Example scenario

You are the IT support technician for a small real estate office. One of the agents, Maria, has been complaining that her emails disappear from her phone after she checks them on her desktop computer. She says: "I read an important client email on my desktop this morning. Now, when I pull out my phone during a showing, that email is gone. I can't find it anywhere. I need those emails on both devices!" 

You check Maria's email configuration. In her desktop Outlook, you see that the account is set up as a POP3 account. The incoming mail server is set to mail.realestateoffice.com on port 110. You also check her phone's email app, and it is also configured as POP3 pointing to the same server. This explains the problem. Every time Maria checks email on her desktop, the POP3 protocol downloads all new messages and then tells the server to delete them. When she later opens her phone, the server has no messages left to download. The phone shows an empty inbox (except for any messages that arrived after the last desktop check). 

The solution is to switch both devices to IMAP. You explain to Maria that IMAP keeps messages on the server and only synchronizes copies to her devices. That way, when she reads an email on her desktop, it remains on the server, and her phone will see it as well. She will also be able to see read/unread status across both devices. After you change the account type on both devices to IMAP (using port 143 or 993 for secure IMAP), Maria's emails appear on both her desktop and her phone. She is happy, and you have solved the issue by understanding the difference between POP3 and IMAP. This scenario is a classic example of how POP3 causes real-world problems in a multi-device environment and why IT professionals must be able to diagnose and fix it.

## Common mistakes

- **Mistake:** Believing POP3 keeps emails on the server after download.
  - Why it is wrong: The default behavior of POP3 is to delete messages from the server after they are successfully downloaded to the client. This is a defining characteristic that distinguishes it from IMAP.
  - Fix: Remember that POP3 works like taking physical mail out of a mailbox: once you take it, the mailbox is empty. Use IMAP if you need messages to stay on the server.
- **Mistake:** Thinking POP3 uses port 25 or 143.
  - Why it is wrong: Port 25 is used by SMTP for sending email, and port 143 is used by IMAP for receiving. POP3 uses port 110 (unsecure) and port 995 (secure). Mixing these ports leads to connection failures.
  - Fix: Memorize the port numbers: POP3 = 110, POP3S = 995. Associate 'POP' with '110' (like 'PO' in 'post office' and '110' has two '1's for 'one device').
- **Mistake:** Assuming POP3 works well for multiple devices.
  - Why it is wrong: POP3 is designed for a single device. When you download emails to one device, they are often deleted from the server, making them unavailable to other devices. This causes frustration and lost data.
  - Fix: If a user needs email on multiple devices (phone, laptop, tablet), always recommend IMAP instead of POP3.
- **Mistake:** Confusing POP3 with SMTP.
  - Why it is wrong: POP3 is a retrieval protocol (incoming), while SMTP is a sending protocol (outgoing). They work together but serve opposite purposes. Many learners mix up the roles.
  - Fix: Remember: POP3 = 'Pick Off Paper' (get mail from server). SMTP = 'Send Mail To People' (send mail out).
- **Mistake:** Thinking POP3 supports server-side folders.
  - Why it is wrong: POP3 only supports a single INBOX on the server. It does not handle folders like Sent, Drafts, or custom folders. Those exist only on the client after download.
  - Fix: If the user needs to organize emails into folders on the server that sync across devices, they must use IMAP.

## Exam trap

{"trap":"The exam presents a scenario where a user checks email from multiple devices, and asks which protocol is being used if emails disappear from the second device. Many learners choose IMAP because it is more common in modern setups, but the correct answer is POP3.","why_learners_choose_it":"Learners assume that because IMAP is the 'modern' protocol, it must be the one causing problems. They also forget that POP3 deletes messages from the server, which is the exact behavior described in the scenario.","how_to_avoid_it":"Always read the scenario carefully. If the symptom is 'emails gone from other devices,' it is almost always POP3. Remember that IMAP keeps a copy on the server, so emails would still be accessible. Practice by associating the symptom of disappearing emails with the POP3 protocol."}

## Commonly confused with

- **POP3 vs IMAP:** IMAP (Internet Message Access Protocol) keeps messages on the server and allows you to access them from multiple devices. POP3 downloads messages to one device and typically deletes them from the server. IMAP also supports server-side folders and synchronization of read/unread status, while POP3 does not. (Example: With IMAP, you read an email on your phone, and it still appears on your laptop as 'read.' With POP3, that email would be gone from the server after the phone download, so the laptop never sees it.)
- **POP3 vs SMTP:** SMTP (Simple Mail Transfer Protocol) is used for sending email from a client to a server or between servers. POP3 is used only for retrieving email from a server to a client. They work together but are different protocols with different ports (SMTP uses 25 or 587; POP3 uses 110 or 995). (Example: When you click 'Send' in your email app, SMTP carries your message out. When you click 'Receive,' POP3 brings new messages in.)
- **POP3 vs HTTP (webmail):** Webmail services like Gmail or Outlook.com use HTTP/HTTPS to access email through a web browser. POP3 is a separate protocol used by desktop email clients (like Outlook or Thunderbird) to download messages. Webmail keeps everything on the server, while POP3 moves messages to the client. (Example: Using webmail is like reading a book that stays in the library. Using POP3 is like checking out a book and taking it home, but the library no longer has it.)
- **POP3 vs Exchange ActiveSync:** Microsoft's Exchange ActiveSync is a protocol designed for mobile devices that provides push email, calendar, and contact synchronization. POP3 only handles email retrieval and does not push updates or sync other data. ActiveSync is much more feature-rich but also more complex. (Example: Exchange ActiveSync is like a smart assistant that updates your phone instantly when a new email arrives. POP3 is like checking the mailbox yourself whenever you feel like it.)

## Step-by-step breakdown

1. **Client initiates TCP connection** — The email client (like Outlook) opens a TCP connection to the POP3 server on port 110 (or 995 for secure). This establishes a reliable communication channel. The server responds with a greeting message to confirm the connection is ready.
2. **Authorization phase begins** — The client sends the USER command with the username, followed by the PASS command with the password. The server verifies credentials. If authentication fails, the server sends an error and closes the connection. This phase is called 'authorization' because the client proves its identity.
3. **Transaction phase: STAT and LIST** — After authorization, the client sends the STAT command to get the number of messages and total size of the mailbox. The LIST command retrieves a list of message IDs and their sizes. These commands help the client decide how to download messages efficiently.
4. **Transaction phase: RETR and DELE** — The client uses the RETR command with a message ID to retrieve the full content of that message. After reading, the client may send the DELE command to mark the message for deletion. Multiple messages can be downloaded in sequence. The client can also use the UIDL command to get unique IDs to avoid downloading duplicates.
5. **Update phase: QUIT and cleanup** — The client sends the QUIT command to end the session. The server then processes the update: it permanently deletes all messages marked with DELE, updates its mailbox state, and closes the TCP connection. The client now has the downloaded messages stored locally, and the server no longer holds copies (unless a 'keep mail on server' option was used).
6. **Local storage and offline access** — After the session ends, the emails exist only on the client device. The user can read, organize, and manage these messages offline. No further server interaction occurs until the next POP3 session, when new messages may be downloaded. This step highlights POP3's advantage for offline reading and its disadvantage for multi-device access.

## Practical mini-lesson

Let me teach you POP3 like a professional. In a real-world IT environment, you will configure email clients for users regularly. When you set up a POP3 account, you need to know the incoming mail server address, the username (usually the full email address), and the password. The server address might look like 'pop.example.com' or 'mail.example.com.' You must also know whether to use port 110 (plaintext) or port 995 (SSL/TLS). Nearly all modern email servers require encryption, so you should always try port 995 first with 'SSL/TLS' selected. If you use port 110, you must also enable 'STLS' (StartTLS) if the server supports it, but most professionals avoid plaintext connections entirely due to security risks.

Once configured, the POP3 client will connect periodically (every few minutes or on demand) to check for new messages. The protocol is stateless between sessions, meaning the server does not remember what was previously downloaded. That is why the UIDL command is important: it gives a unique identifier for each message so the client can avoid re-downloading the same message if the server still has a copy. However, many servers still delete messages after download by default, so UIDL mostly helps with transient network errors.

One common configuration option is 'Leave a copy of messages on the server.' If enabled, the client does not send the DELE command, so the server retains the messages. This is useful if you want to also check email via webmail, but it defeats the storage-saving purpose of POP3. Even with this option, POP3 still lacks server-side folder support, so all messages remain in the INBOX. Sent messages and drafts are stored locally only.

What can go wrong? The most frequent issues are: incorrect server address, wrong port (using 110 when the server requires 995), authentication failures, and connections blocked by firewalls. Also, if the user accidentally sets up multiple POP3 clients to the same account without 'leave messages on server,' they will lose emails. As an IT pro, you should always verify the server's documentation for its POP3 settings and test the connection with a tool like Telnet or OpenSSL: 'openssl s_client -connect pop.example.com:995' will show you the server greeting and help diagnose issues.

POP3 is a simple, reliable protocol that you will encounter in legacy and single-device setups. Configure it securely, educate your users about its limitations, and be ready to switch to IMAP when multi-device access is needed. That is the practical, no-nonsense approach to POP3 in the real world.

## Memory tip

Remember POP3 as 'Post Office Protocol 3', you pick up mail from the post office and it is gone from there. Port 1-1-0 (one device, one mailbox).

## FAQ

**What is the difference between POP3 and IMAP in simple terms?**

POP3 downloads emails to your device and usually deletes them from the server, so you can only read them on that device. IMAP keeps messages on the server, so you can access them from any device.

**What port does POP3 use?**

POP3 uses port 110 for unencrypted connections and port 995 for encrypted connections (POP3S). Always use port 995 with SSL/TLS for security.

**Can I keep emails on the server with POP3?**

Yes, if you enable the 'Leave a copy of messages on the server' option in your email client. But this is not the default and some servers may still delete messages based on their own settings.

**Is POP3 still used in modern email systems?**

Yes, but it is less common than IMAP. Many email providers still support POP3 for legacy clients or users who prefer offline access on a single device.

**Why can't I see my emails on my phone after checking them on my computer?**

This is likely because your email account is configured with POP3. POP3 downloads and removes emails from the server, so each device only sees the emails it downloaded first. Switch to IMAP to solve this.

**What is POP3S?**

POP3S is POP3 over SSL/TLS. It encrypts the entire connection between the client and server, including the username, password, and email content. It runs on port 995.

**Does POP3 support sending email?**

No, POP3 is only for retrieving email. Sending email is handled by a different protocol called SMTP (Simple Mail Transfer Protocol) on port 25 or 587.

**Can POP3 work offline?**

Yes, once emails are downloaded via POP3, you can read them offline because they are stored locally on your device. This is one of POP3's advantages over IMAP in some situations.

## Summary

POP3 (Post Office Protocol version 3) is a foundational email retrieval protocol that remains relevant in IT certification exams and real-world legacy systems. Its defining characteristic is that it downloads email messages from a server to a single client device and then typically deletes them from the server, making it ideal for users with only one device who want offline access and minimal server storage usage. However, this same behavior causes email loss for anyone trying to access the same mailbox from multiple devices, which is why IMAP has largely replaced POP3 in modern multi-device environments. For IT professionals, knowing POP3 means memorizing its default port (110) and secure port (995), understanding its three-phase communication process (authorization, transaction, update), and recognizing the scenarios where POP3 causes problems like disappearing messages across devices. Certification exams, including CompTIA A+, Network+, Security+, and others, test this knowledge through port identification, protocol comparison, and troubleshooting scenario questions. The key takeaway for exam success is to associate POP3 with single-device, offline-focused email retrieval and to always consider user needs when choosing between POP3 and IMAP. By mastering POP3's strengths and limitations, you will be equipped to configure, troubleshoot, and explain email systems confidently, both on exams and in the field.

---

Practice questions and the full interactive page: https://courseiva.com/glossary/pop3