Self-Hosted POP3 Email Servers — Dovecot vs Courier vs Cyrus Guide (2026)

While IMAP has become the dominant protocol for email access in modern deployments, POP3 (Post Office Protocol version 3) remains relevant for specific use cases: offline email access, bandwidth-constrained environments, archival workflows, and legacy application compatibility. When self-hosting a mail server, choosing the right POP3 implementation affects reliability, security, and ease of administration.

This guide compares three mature, open-source mail servers with POP3 support: Dovecot, Courier Mail Server, and Cyrus IMAP. Each has a different architectural approach and feature set for serving email to clients.

What Is POP3 and Why Does It Still Matter?

POP3 is a simple protocol for retrieving email from a server. Unlike IMAP, which synchronizes mailbox state between server and client, POP3 traditionally downloads messages to the local client and optionally deletes them from the server. This makes POP3 ideal for:

• Offline access: Users who need full mailboxes available without network connectivity
• Bandwidth efficiency: Single-download model reduces repeated server queries
• Archival workflows: Automated scripts that pull and archive emails to local storage
• Legacy compatibility: Older applications and embedded devices that only support POP3
• Storage management: Users who prefer local storage over server-side mailbox quotas

While most modern mail clients default to IMAP, the POP3 capability of your mail server remains important for backward compatibility and specific operational scenarios.

Dovecot: The Modern Standard

Dovecot is the most widely-deployed open-source IMAP/POP3 server. Originally designed as an IMAP server, Dovecot added POP3 support and has become the default choice for Linux distributions worldwide.

Key features:

• POP3 and IMAP protocols with full RFC compliance
• Maildir and mbox storage formats
• Built-in full-text search (Solr, Elasticsearch, or native Lucy/Squat plugins)
• Sieve filtering integration (via Pigeonhole plugin)
• SSL/TLS encryption with modern cipher suite support
• Authentication via system users, LDAP, SQL, or PAM
• Virtual user support with per-user mail storage
• Replica plugin for multi-server mail synchronization
• Active development with regular security updates

POP3-specific configuration:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

# /etc/dovecot/dovecot.conf - Enable POP3 protocol
protocols = imap pop3 lmtp

# POP3 specific settings
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
  # Keep messages on server for 14 days after download
  pop3_lock_session = yes
}

# Mail location (Maildir format recommended)
mail_location = maildir:~/Maildir

# SSL configuration
ssl = required
ssl_cert = </etc/dovecot/private/dovecot.pem
ssl_key = </etc/dovecot/private/dovecot.key
ssl_min_protocol = TLSv1.2

# Authentication
disable_plaintext_auth = yes
auth_mechanisms = plain login

Docker Compose deployment:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

version: "3.8"
services:
  dovecot:
    image: dovecot/dovecot:latest
    container_name: dovecot
    ports:
      - "110:110"    # POP3
      - "995:995"    # POP3S
      - "143:143"    # IMAP
      - "993:993"    # IMAPS
    volumes:
      - ./dovecot.conf:/etc/dovecot/dovecot.conf:ro
      - ./mails:/var/mail:rw
      - ./certs:/etc/dovecot/private:ro
    restart: unless-stopped
    environment:
      - TZ=UTC

Strengths:

• Largest community and best documentation
• Default POP3/IMAP server on Debian, Ubuntu, RHEL
• Excellent performance with Maildir format
• Strong security defaults (TLS required, plaintext auth disabled)
• 1,206+ GitHub stars, actively maintained

Limitations:

• POP3 is a secondary protocol (IMAP is the primary focus)
• Some advanced features require paid commercial support
• Configuration syntax can be complex for beginners

Courier Mail Server: The Traditional Choice

Courier Mail Server is one of the oldest open-source mail server suites. It provides a complete mail stack including SMTP, POP3, IMAP, and webmail components. The project is actively maintained with regular updates.

Key features:

• Complete mail server suite (MTA + POP3/IMAP + webmail)
• POP3 and IMAP with full RFC compliance
• Maildir storage format (Courier pioneered Maildir)
• Courier-Authlib for flexible authentication (system, LDAP, MySQL, PostgreSQL)
• Courier-Filter for server-side message filtering
• SSL/TLS support with STARTTLS
• Quota management and user limits
• Family of related daemons (courier-pop3d, courier-imapd, courier-authdaemon)

POP3-specific configuration:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

# /etc/courier/pop3d - POP3 daemon configuration
POP3DSTART=YES
ADDRESS=0
PORT=110

# SSL POP3 configuration
# /etc/courier/pop3d-ssl
POP3DSSLSTART=YES
POP3_STARTTLS=YES
POP3_TLS_REQUIRED=1
TLS_CERTFILE=/etc/courier/courier.pem
TLS_PROTOCOL=TLS1_2:

# Authentication
# /etc/courier/authdaemonrc
authmodulelist="authuserdb authpam"
authmodulelistorig="authuserdb authpam"
daemons=5

# Mail directory
# /etc/courier/imapd
MAILDIRPATH=Maildir

Docker Compose deployment:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

version: "3.8"
services:
  courier-pop3:
    image: lscr.io/linuxserver/courier:latest
    container_name: courier-pop3
    ports:
      - "110:110"
      - "995:995"
    volumes:
      - ./config:/config:rw
      - ./maildata:/maildata:rw
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=UTC
    restart: unless-stopped

Strengths:

• Complete integrated mail solution (not just POP3/IMAP)
• Pioneered the Maildir format
• Well-documented with decades of operational history
• Modular architecture (separate daemons for each protocol)

Limitations:

• Smaller community than Dovecot
• Configuration spread across multiple files and daemons
• 89 GitHub stars — smaller development team
• Some components feel dated compared to modern alternatives

Cyrus IMAP: The Enterprise-Grade Option

Cyrus IMAP was developed at Carnegie Mellon University and is designed for large-scale mail server deployments. It uses a fundamentally different architecture — mailboxes are managed by the Cyrus server itself, not by user home directories.

Key features:

• Server-managed mailboxes (not user filesystem directories)
• POP3, IMAP, CalDAV, and CardDAV support
• Native full-text search (Squat engine)
• Sieve server-side filtering (built-in, no plugin needed)
• Replication and clustering support
• Virtual domain hosting
• Quota management at user and domain level
• LDAP integration for authentication and user directory
• XAPYSE plugin for advanced indexing
• MUPDATE protocol for multi-server mailbox synchronization

POP3-specific configuration:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

# /etc/imapd.conf - Cyrus IMAP configuration
configdirectory: /var/lib/imap
partition-default: /var/spool/imap

# Enable POP3
popminpoll: 1
allowplaintext: no
tls_required: yes
tls_cert_file: /etc/ssl/cyrus/cert.pem
tls_key_file: /etc/ssl/cyrus/key.pem

# Sieve filtering
sieveusehomedir: false
sievedir: /var/lib/imap/sieve

# Quotas
quotawarn: 90

# SASL authentication
sasl_mech_list: PLAIN LOGIN
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sasldb

Docker Compose deployment:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

version: "3.8"
services:
  cyrus:
    image: docker.io/cyrusimap/cyrus-imapd:latest
    container_name: cyrus-imap
    ports:
      - "110:110"
      - "995:995"
      - "143:143"
      - "993:993"
      - "4190:4190"   # ManageSieve
    volumes:
      - ./imapd.conf:/etc/imapd.conf:ro
      - ./cyrus.conf:/etc/cyrus.conf:ro
      - ./imap-data:/var/lib/imap:rw
      - ./ssl:/etc/ssl/cyrus:ro
    restart: unless-stopped

Strengths:

• Enterprise-grade scalability (handles millions of mailboxes)
• Server-managed storage (better backup and recovery)
• Built-in Sieve filtering (no external plugin needed)
• Native CalDAV/CardDAV support
• Active development (631+ GitHub stars)

Limitations:

• Steeper learning curve (server-managed vs user-managed mailboxes)
• Requires dedicated administration tools (cyradm)
• Configuration is more complex than Dovecot
• Less common in small deployments

Comparison Table

Choosing the Right POP3 Server

Choose Dovecot when:

• You want the most widely-supported and documented option
• You need excellent performance with standard Maildir storage
• You are deploying on Debian/Ubuntu/RHEL (pre-packaged)
• You want the largest community for troubleshooting

Choose Courier when:

• You need a complete integrated mail server (SMTP + POP3 + IMAP)
• You prefer the original Maildir implementation
• You have legacy Courier deployments to maintain
• You want a single-suite solution

Choose Cyrus IMAP when:

• You are running a large-scale mail server deployment
• You need server-managed mailboxes for centralized control
• You require built-in CalDAV/CardDAV alongside POP3/IMAP
• You need multi-server replication and clustering

Installation Quick Reference

Dovecot (Debian/Ubuntu)

1
2
3
4
5
6

sudo apt-get install -y dovecot-core dovecot-pop3d dovecot-imapd
sudo systemctl enable dovecot
sudo systemctl start dovecot

# Test POP3 connection
openssl s_client -connect localhost:995 -quiet

Courier (Debian/Ubuntu)

1
2
3
4
5
6

sudo apt-get install -y courier-pop courier-pop-ssl courier-authlib-userdb
sudo systemctl enable courier-pop3d courier-pop3d-ssl
sudo systemctl start courier-pop3d

# Test POP3 connection
openssl s_client -connect localhost:995 -quiet

Cyrus IMAP (Debian/Ubuntu)

1
2
3
4
5
6
7

sudo apt-get install -y cyrus-imapd cyrus-admin
sudo systemctl enable cyrus-imapd
sudo systemctl start cyrus-imapd

# Create a test user
sudo cyradm -u cyrus localhost
localhost> cm user.testuser

FAQ

Is POP3 still relevant in 2026?

POP3 remains relevant for offline email access, bandwidth-constrained environments, automated archival workflows, and legacy application compatibility. While IMAP is the default for most users, POP3’s single-download model is ideal for scripts that pull and process emails without maintaining persistent server connections.

Can Dovecot, Courier, and Cyrus all support both POP3 and IMAP simultaneously?

Yes. All three servers support running POP3 and IMAP services on the same server. Users can choose which protocol to use on a per-client basis. The server stores mail in a unified format (Maildir or server-managed) that both protocols can access.

Which server is easiest to set up for POP3 only?

Dovecot is the simplest to configure for POP3-only deployment. Installing dovecot-core and dovecot-pop3d packages and enabling the POP3 protocol in the config file is typically sufficient. Courier and Cyrus require more configuration steps and additional daemon management.

Do these servers support SSL/TLS for POP3?

All three servers support POP3S (POP3 over SSL/TLS on port 995) and STARTTLS (upgrading plain POP3 to encrypted on port 110). Dovecot and Cyrus enforce TLS by default in modern configurations. Courier requires explicit TLS configuration in pop3d-ssl.

Can I migrate mailboxes between these servers?

Yes. Since all three use standard Maildir format (or can read it), mailbox migration involves copying the Maildir directory structure. Dovecot and Cyrus provide migration tools (dsync and imapsync respectively). Courier mailboxes are directly compatible with Dovecot since both use Maildir.

Which server handles the most concurrent POP3 connections?

Cyrus IMAP is designed for large-scale deployments and handles the most concurrent connections through its server-managed architecture and connection multiplexing. Dovecot also performs well with its efficient I/O model. Courier, being a older architecture, handles fewer concurrent connections per daemon instance.

Why Self-Host Your Email POP3 Server?

Running your own POP3/IMAP mail server gives you complete control over email storage, retention policies, and access patterns. For organizations that need to archive emails for compliance, maintain offline copies for disaster recovery, or provide email access to users with limited connectivity, self-hosted POP3 servers are essential infrastructure.

For related email server topics, see our lightweight SMTP server comparison, email archiving solutions, and email alias management.

Self-hosting also means you control encryption certificates, authentication methods, and data retention — critical factors for organizations subject to GDPR, HIPAA, or other regulatory requirements. POP3 servers are a foundational component of any self-hosted email infrastructure.