Office365 SMTP, POP3, and IMAP settings
Important!
Effective October 1, 2022, Microsoft will begin to permanently disable Basic Authentication (username/password combination) for Exchange Online in all Microsoft 365 tenants, regardless of usage, except for SMTP Authentication. Read the Microsoft announcement here.
To use Hesk with Microsoft 365, upgrade to the latest version of Hesk and set up OAuth authentication.
Here are the correct settings you should use to connect Hesk to Office365.com (Microsoft 365):
» Email sending
To send emails using Office365 server, enter these details:
SMTP Host: smtp.office365.com
SMTP Port: 587
Encryption: TLS
SMTP Username: (your Office365 username)
SMTP Password: (your Office365 password)
Instead of using a username/password combination, you are encouraged to set up OAuth authentication.
Also, make sure that your:
- "From" email in Hesk Settings > Email is set to your Office365 email address
- "From" name in Hesk Settings > is NOT set to an email address - Microsoft security policies will reject sending emails if the From name is an email address
» IMAP fetching
To fetch mail from the Office365 server using IMAP protocol, enter these details:
First, set up Microsoft as an OAuth Provider, then enter these details:
IMAP Host: outlook.office365.com
IMAP Port: 993
Encryption: SSL
Authentication method: OAuth
IMAP Username: (your Office365 username)
OAuth Provider: select the OAuth Provider you have set up for Microsoft
» POP3 fetching
To fetch mail from the Office365 server using IMAP protocol, enter these details:
First, set up Microsoft as an OAuth Provider, then enter these details (Hesk 3.4.1 or newer required):
POP3 Host: outlook.office365.com
POP3 Port: 995
TLS Protocol: ON
Authentication method: OAuth
IMAP Username: (your Office365 username)
OAuth Provider: select the OAuth Provider you have set up for Microsoft
» Error messages
Authentication failed: Password command failed
AUTHENTICATE failed
LOGIN failed
Too many login failures
Microsoft most likely turned off basic authentication for your account. You may be able to re-enable basic authentication once after October 1st, 2022, but it will not work past December 31st, 2022. See this Microsoft update
You are encouraged to use OAuth instead of a username/password combination. If you do have OAuth set up, double-check your username and OAuth provider settings.
Connection timed out
Could not connect to...
Testing connection, this can take a while...
This usually means required ports are blocked on your server in the firewall.
Contact your hosting company to verify and ask them to unblock required ports (587, 995, and/or 993) to allow TCP connections.
Password error: Logon failure: unknown user name or bad password.
Too many login failures
Office365 doesn't recognize your username, or your password is incorrect. Double-check both the username and password. Passwords are CaSe SeNSiTiVe.
You may also need to use OAuth instead of a username/password combination to connect to your account.
554 5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied
Make sure the "From" email (Hesk settings > General tab) is set to the SMTP email address and that the "From" name is NOT set to an email address.
