Stealery
Try for free
Product Guides

IMAP Settings for Gmail & Outlook: Quick Setup for Sales Tools

Last updated: May 7, 2026

Join medium sign-up screen with google, facebook, and email options.

The IMAP settings themselves take 30 seconds to enter — the other 20 minutes of setup pain comes from authentication errors that nobody explains clearly. Gmail and Outlook both gate third-party access behind steps most setup guides skip: enabling IMAP in the provider dashboard, generating App Passwords, and — for Microsoft 365 — getting an admin to turn on SMTP AUTH at the tenant level. Get those right and connection is instant.

Key takeaways
  • Gmail IMAP: imap.gmail.com, port 993 (SSL). Gmail SMTP: smtp.gmail.com, port 587 (TLS) or 465 (SSL).
  • Outlook IMAP: outlook.office365.com, port 993 (SSL). Outlook SMTP: smtp.office365.com, port 587 (STARTTLS).
  • Always use IMAP over POP3 for sales tools — POP3 breaks reply tracking and multi-device sync.
  • Gmail with 2FA requires an App Password, not your regular Google password. Microsoft 365 may require admin-level SMTP AUTH enablement.
  • OAuth 2.0 is the more secure alternative to password-based IMAP — use it when your sales tool supports it.

What are the correct IMAP and SMTP settings for Gmail?

Gmail's IMAP and SMTP settings are fixed — they don't vary by account. The only variable is the authentication method, which changes depending on whether your account has two-factor authentication enabled.

Gmail IMAP settings

SettingValue
Incoming mail server (IMAP)imap.gmail.com
Port993
EncryptionSSL/TLS
UsernameYour full Gmail address
PasswordApp Password (if 2FA is on) or Google account password

Gmail SMTP settings

SettingValue
Outgoing mail server (SMTP)smtp.gmail.com
Port (TLS)587
Port (SSL)465
EncryptionSTARTTLS (587) or SSL/TLS (465)
Requires authenticationYes

Step 1: Enable IMAP in Gmail

IMAP is not on by default on all Gmail accounts. Before entering these settings anywhere, confirm it's active: open Gmail → Settings (gear icon) → See all settings → Forwarding and POP/IMAP → Enable IMAP → Save Changes. Without this step, any email client or sales tool will reject the connection regardless of correct credentials.

Step 2: Generate an App Password (if using 2FA)

Google blocks direct password access to accounts with two-factor authentication — which is the correct security posture for any sales inbox. To connect a third-party tool, go to myaccount.google.com/apppasswords, select Mail as the app, generate the 16-character password, and paste it into your email client in place of your regular password. Store it somewhere; Google only shows it once.

Step 3: Consider OAuth 2.0 instead

If your sales tool supports Google OAuth — and most modern ones do — use it. OAuth authenticates via a browser flow rather than storing your password anywhere. It's more secure and survives Google password changes without re-configuration. Check your tool's connection settings before defaulting to IMAP credentials.

What are the correct IMAP and SMTP settings for Outlook?

Outlook and Microsoft 365 accounts share the same IMAP server. The distinction that matters for sales teams is whether the account is a personal Outlook.com account or a Microsoft 365 business account — because M365 has an additional admin gate that blocks SMTP AUTH by default.

Outlook / Microsoft 365 IMAP settings

SettingValue
Incoming mail server (IMAP)outlook.office365.com
Port993
EncryptionSSL/TLS
UsernameYour full email address
PasswordMicrosoft account password or App Password

Outlook / Microsoft 365 SMTP settings

SettingValue
Outgoing mail server (SMTP)smtp.office365.com
Port587
EncryptionSTARTTLS
Requires authenticationYes

The Microsoft 365 admin requirement most guides skip

For Microsoft 365 business accounts, SMTP AUTH — the protocol that allows third-party apps to send mail — is disabled at the tenant level by default. Individual users cannot enable it themselves. Your IT admin needs to turn it on either globally or per-mailbox via the Microsoft 365 admin centre (Users → Active Users → select the user → Mail tab → Manage email apps → enable Authenticated SMTP). If you're the admin, Microsoft's documentation covers the exact steps. If you're not, send that link to whoever is.

Personal Outlook.com accounts

Personal accounts at outlook.com or hotmail.com don't have the SMTP AUTH admin restriction, but Microsoft does require you to enable "Allow devices and apps to use POP" in Outlook.com settings (Settings → Mail → Sync email) before IMAP connections are accepted from third-party clients.

Should you use IMAP or POP3 for sales email tools?

Use IMAP. POP3 is not a viable option for sales email configuration and will break the reply tracking that makes sequencing tools useful.

The technical difference: POP3 downloads messages from the server and, in most configurations, deletes them from the server after download. IMAP keeps messages on the server and syncs state — read, replied, archived — across every connected client in real time.

For sales teams, the practical consequence is this: if your email client pulls replies via POP3, those replies exist only on the device that downloaded them. Your sequencing tool never sees them. It continues sending follow-ups to prospects who already replied. That's not a minor inconvenience — it's the kind of error that ends deals before they start.

"IMAP is the only protocol that gives sales tools reliable visibility into reply state. With POP3, the tool is flying blind — it can't pause a sequence on a reply it never saw."

— Woodpecker Engineering Blog, IMAP vs POP3 for Cold Email

IMAP also allows you to stay connected across your email client, mobile, and the sales tool simultaneously without conflicts. POP3 was designed for single-device access in an era before smartphones. It has no place in a modern sales stack.

Why does IMAP authentication keep failing even with the right settings?

Correct server and port settings are necessary but not sufficient. Most IMAP authentication failures in sales tool setups come from one of four causes that have nothing to do with the settings themselves.

1. IMAP not enabled at the provider level

Both Gmail and Outlook require you to explicitly enable IMAP access in account settings before any external connection works. Entering correct IMAP credentials into a tool that has IMAP disabled on the account side will always fail, regardless of what you enter. Check this first before troubleshooting anything else.

2. Using a regular password instead of an App Password

Gmail accounts with 2FA enabled will reject standard password authentication from third-party apps. The error message from Google is often misleadingly vague — it reads as a login failure, not a 2FA issue. Generate an App Password as described above and use that instead.

3. SMTP AUTH disabled for Microsoft 365

As covered above, M365 tenants have SMTP AUTH off by default. This is a tenant-level policy change, not a settings tweak the individual user can make. If your IT team has a policy against enabling SMTP AUTH, the alternative is using OAuth 2.0 — which Microsoft supports and which bypasses the SMTP AUTH requirement entirely.

4. Port blocked by corporate network or firewall

Port 993 (IMAP) and 587 (SMTP) are standard but not universally open on corporate networks. If you're working from an office network and the connection fails from a home network, a firewall block is the likely cause. Test with a mobile hotspot to confirm. If that's the issue, your network admin needs to whitelist those ports, or you need to configure your tool via OAuth rather than direct IMAP.

What email setup do sales teams actually use for outreach sequences?

The right email client configuration for outreach depends on scale. SDRs sending under 100 emails per day can use Gmail or Outlook connected directly via IMAP or OAuth to a sequencing tool. Teams sending at higher volume typically use dedicated sending domains — separate from the primary company domain — to protect deliverability.

According to Salesloft's email deliverability research, domain reputation is one of the top three factors affecting whether cold emails reach the inbox. Teams that send high-volume outreach from their primary domain risk degrading deliverability for the entire company, including transactional and customer emails. A separate sending domain, warmed up over 4–6 weeks, is the standard mitigation.

For the sending domain setup to work, IMAP and SMTP settings need to be configured for that domain specifically — not the primary company email. Most domain registrars and Google Workspace allow you to add additional domains and configure separate mailboxes, each with their own IMAP credentials.

Connecting your email to a sales sequencing tool

Once IMAP is set up correctly, the connection process in most sequencing tools is identical: navigate to settings → email accounts → connect → enter IMAP/SMTP details or complete the OAuth flow. The tool then syncs your inbox to detect replies and pause sequences automatically. The key is confirming that reply detection is working before you launch any sequence — send a test email to yourself, reply to it, and verify the tool registers the reply within a few minutes.

Where competitor intelligence fits into this stack

IMAP configuration is infrastructure — it enables the tool. What fills the tool with useful contacts is where strategy matters. The highest-converting outreach lists we see built with Stealery are companies already confirmed to be using a competitor: they have the budget allocated, the use case validated, and a switching window that's identifiable. You search a competitor, filter by company size and location, and get a list ready to import into your sequencing tool — with IMAP set up, every reply automatically pauses the sequence. The combination of a clean list and reliable reply detection is what makes sequences feel targeted rather than spammy.

According to Gartner's B2B buying research, 77% of B2B buyers describe their purchase process as very complex or difficult. Reaching companies mid-cycle — when they're already using a competitor and potentially evaluating alternatives — significantly reduces that friction because the educational work is already done.

Is OAuth better than IMAP for connecting email to sales tools?

OAuth 2.0 is more secure and easier to maintain than password-based IMAP, and it should be your first choice when your sales tool supports it — which most do for Gmail and increasingly for Outlook.

The practical advantages for sales teams: OAuth doesn't require storing your email password in a third-party tool. It survives password changes without re-authentication (the token refreshes automatically). It respects Google's and Microsoft's security policies without workarounds like App Passwords. And for Microsoft 365 users, it bypasses the SMTP AUTH admin restriction entirely.

The one scenario where IMAP credentials are still necessary: tools that don't yet support OAuth for your specific email provider, or custom SMTP configurations using a dedicated sending domain at a registrar that doesn't offer OAuth. In those cases, IMAP with an App Password is the correct fallback — just confirm the password is stored encrypted in the tool, not in plain text.


Frequently asked questions

Gmail IMAP server is imap.gmail.com, port 993, with SSL enabled. SMTP server is smtp.gmail.com, port 465 (SSL) or 587 (TLS). You must enable IMAP in Gmail settings and use an App Password if two-factor authentication is active on your account.
Outlook IMAP server is outlook.office365.com, port 993, SSL enabled. SMTP server is smtp.office365.com, port 587, with STARTTLS. For Microsoft 365 accounts, your admin may need to enable SMTP AUTH at the tenant level before third-party tools can connect.
Use IMAP. POP3 downloads emails and removes them from the server, which breaks sync across devices and prevents sales tools from tracking replies and thread history. IMAP keeps messages on the server and syncs state in real time.
The most common causes are: IMAP not enabled in your email provider's settings, a regular password used instead of an App Password (Gmail), SMTP AUTH disabled at the admin level (Microsoft 365), or a firewall blocking port 993 or 587 on your network.
Yes, if your Google account has two-factor authentication enabled — which it should. Go to myaccount.google.com, search 'App Passwords,' generate one for your mail app, and use that 16-character password instead of your regular Google password.

Ready to build your first competitor list?

Type in any competitor and see every company using it — filtered by size, location, and hiring signals.

Try Stealery for free →