Post Office Protocol (POP) — POP3 and e-mail retrieval

How POP3 works

POP3 follows a simple transaction model: a client connects to a server, authenticates, retrieves messages, and then closes the session. Typical default ports are 110 for unencrypted connections and 995 for connections secured with SSL/TLS. A POP3 server normally presents mailboxes to a client; by default messages are downloaded and often deleted from the server unless the client is configured to "leave messages on server." Because the protocol is focused on retrieval, it does not handle message submission (SMTP is used to send e-mail) or advanced server-side message state management.

Key characteristics and commands

POP3 is intentionally compact and command-driven. After connection and authentication (with common methods such as USER/PASS, APOP, or SASL mechanisms), a client issues retrieval commands to fetch entire messages. The protocol operates in distinct states—connection, authorization, transaction, and update—so that changes are committed only when the session ends. Notable commands include STAT (report mailbox status), LIST (list messages and sizes), RETR (retrieve a message), DELE (mark a message for deletion), and QUIT (end the session and apply deletions).

Security and extensions

Because POP3 was designed before widespread encryption on the Internet, several extensions exist to enhance its security. Implicit TLS (using port 995) wraps the session in SSL/TLS, while the STLS extension permits upgrading a plain connection to a secure one. Authentication can be strengthened with challenge–response schemes such as APOP or modern SASL methods. Many servers also log and audit connections; administrators are encouraged to use TLS and strong authentication to protect credentials and message contents in transit.

History, development, and POP4

POP has evolved through several versions to address needs and interoperability. POP3 became the Internet standard and remains widely supported by clients and servers. Over the years proposals have been made for a successor often referred to as POP4, which aimed to add light folder management, multipart and flag support, and other conveniences found in IMAP while keeping POP's simplicity. A working implementation and draft specifications were circulated in the past, but active development of a formal POP4 standard has not progressed broadly since the early 2000s; interested readers can find references and archived discussions at POP4 proposal.

Uses, advantages and limitations

POP3 remains popular for users who prefer to download and store messages locally or for environments with limited server storage. Its advantages include simplicity, wide client support, and minimal server-side resource requirements. However, limitations are important to understand: POP3 lacks standardized server-side folders, fine-grained message state synchronization, and easy multi-client access to a single mailbox. For those capabilities, IMAP is generally preferred. Many e-mail clients support both approaches and let users choose whether messages remain on the server or are moved to a local archive.

Connections to related technologies

POP3 typically works alongside other Internet mail standards: SMTP for sending mail, and IMAP when server-side access is required. Administrators and users often consult documentation for compatible e-mail clients and mail servers, and for network considerations such as firewall rules and TCP/IP port configurations. Choosing between POP3 and IMAP depends on storage model, multi-device access needs, and security practices.