TLS and encryption for email

TLS (Transport Layer Security) encrypts email as it travels between servers and between your device and our mail server, so it cannot be read in transit. Dirham A Day email supports TLS throughout.

Encrypting your connection (device to server): when setting up mail, always use the secure ports and settings:

• IMAP: port 993, SSL/TLS.
• POP3: port 995, SSL/TLS.
• SMTP: port 465 (SSL/TLS) or 587 (STARTTLS).

Using these ensures your password and messages are encrypted between your phone or computer and our server - never use non-secure ports on public Wi-Fi.

Server-to-server encryption: our mail servers use opportunistic TLS, encrypting mail to and from other servers that support it (which nearly all major providers do). This protects your messages in transit across the internet.

Two important clarifications:

• TLS protects mail in transit, not at rest - so it is not the same as end-to-end encryption. For truly confidential content, use an additional method like a password-protected document.
• TLS is separate from authentication (SPF/DKIM/DMARC), which proves who sent the mail. You want both.

For most business needs, using the secure ports above gives excellent protection. If you have specific compliance requirements around encryption, our team can advise - support@dirhamaday.ae.