Email Settings GuideQuick answer: CounterMail uses one host for both protocols, imap1.countermail.com. IMAP is on port 993 and SMTP on port 465, both with SSL/TLS and CRAM-MD5 auth. Your username is your full address in lowercase. The password is your 32 character IMAP-key from Settings, not your login password. Client access needs a premium plan and a PGP tool.
What Changed Recently#
CounterMail keeps its servers steady. The parts worth knowing are the IMAP-key, the CRAM-MD5 auth type and the premium plus PGP requirement.
Latest update
Clients use an IMAP-key, never your password. CounterMail generates a 32 character IMAP-key that you enter as the password in every mail client. Your login password only works on the webmail. This has long been the case.
Earlier change
The IMAP-key changes when you do. If you change your password or activate a USB key, CounterMail issues a new IMAP-key. You then update the password field in every client with the new key. Otherwise they stop connecting.
Earlier change
Outlook is set up differently. Outlook uses Plain auth rather than CRAM-MD5. Its key is a separate plain text key you request from CounterMail support. Thunderbird and Apple Mail use the standard IMAP-key from the webmail.
imap1.countermail.com.
Before You Begin#
CounterMail needs three things in place before a client connects. Miss any one and the login fails even with the right server values.
1. Get your IMAP-key
CounterMail clients use a 32 character IMAP-key as the password, never your login password. You copy it from the webmail before setting up any client.
Where: Webmail Settings then Security and Keys, then Show IMAP/SMTP keys
2. Have premium and a PGP tool
IMAP and SMTP are premium features, so a basic account cannot connect a client. You also need a PGP tool such as GnuPG, GPGTools or Gpg4win to read and send encrypted mail.
About CounterMail Mail#
CounterMail is a highly secure email service based in Sweden, built around OpenPGP encryption, diskless servers and strong Swedish privacy law.
What sets CounterMail apart for client setup is the IMAP-key. Instead of your password, every client uses a 32 character key from the webmail, sent over CRAM-MD5. Client access is a premium feature. Reading encrypted mail needs a PGP tool such as GnuPG, GPGTools or Gpg4win. It is a security first setup that rewards a careful first configuration.
| Service Name | CounterMail Mail |
| Based In | Sweden |
| Focus | OpenPGP, diskless servers |
| Email Domains | @countermail.com, plus custom domains on higher plans |
| Webmail URL | countermail.com |
| Protocols Supported | IMAP and SMTP over one host |
| Client Password | A 32 character IMAP-key, not your login |
| Client Access | Premium plans only |
imap1.countermail.com. Note the 1 in the name. Only the port changes, 993 for IMAP and 465 for SMTP.
CounterMail Webmail Login#
You can always read your mail in the browser, where the OpenPGP encryption lives. The CounterMail sign in is at:
Webmail
Account Security
Password Recovery
The IMAP-Key and CRAM-MD5#
CounterMail does not use your login password in email clients. It uses a 32 character IMAP-key, sent over an encrypted CRAM-MD5 login. This is the single biggest difference from other providers.
| Setting | What to enter |
|---|---|
| Password field | Your 32 character IMAP-key, never your login password |
| Auth type | CRAM-MD5, shown as encrypted password in most clients |
| Username | Your full address in lowercase |
How to Find Your CounterMail IMAP-Key
- Log in to CounterMail webmail in a browser on a premium account.
- Open Settings, then Security and Keys under Preferences.
- Click Show IMAP/SMTP keys and enter your login password to reveal the key.
- Copy the 32 character IMAP-key and paste it into the password field of your client.
- Set the auth type to CRAM-MD5 or encrypted password, not normal password.
CounterMail IMAP Settings#
IMAP is the incoming protocol most people should use. It keeps your mail on the server so every device shows the same inbox.
| IMAP Server | imap1.countermail.com | |
| Port | 993 | |
| Encryption | SSL/TLS (required) | |
| Username | Your full address in lowercase | |
| Password | Your 32 character IMAP-key, not your login | |
| Authentication | CRAM-MD5 (encrypted password) |
Why CounterMail Has No POP3#
CounterMail does not offer POP3. Its knowledge base lists IMAP and SMTP only, both on imap1.countermail.com. IMAP suits its model better, since messages stay encrypted on the server and sync across devices.
If a guide lists a POP3 server for CounterMail, treat it as wrong. For a local offline copy, pair IMAP with a backup tool instead.
CounterMail SMTP Settings#
SMTP runs on the same host, imap1.countermail.com, on port 465. Reading mail but unable to send points at the outgoing side, usually the auth type or the IMAP-key.
| SMTP Server | imap1.countermail.com | |
| Port | 465 | |
| Encryption | SSL/TLS (required) | |
| Username | Your full address in lowercase | |
| Password | Same 32 character IMAP-key | |
| Authentication | CRAM-MD5. Also check outgoing server requires authentication in Outlook |
Check CounterMail IMAP Settings Online#
You don't need to download anything to check CounterMail IMAP settings online. This page is the lookup: every value is verified, current and copyable straight from your browser. Not sure your address uses CounterMail servers? Type it below and find out instantly.
Does my email address use these settings?
Runs in your browser only. Your address is never sent anywhere or stored.
Want to verify the account itself before configuring an app? Sign in at CounterMail webmail, which confirms the account works on a premium plan. Once it passes, enter your IMAP-key in the client with the tables above.
Look Up IMAP Settings for Any Email Domain#
This page covers CounterMail. For every other address, work email on a company domain included, we run a free online lookup database: imapsettings.com.
imapsettings.com
Complete email settings database, by Univik
Enter any email address and get the incoming and outgoing server settings for that domain in 1 step:
Your address is used only to find the settings for that domain. Nothing is stored or shared.
Set Up CounterMail in Email Clients#
The servers and ports are always the same. Only the menus differ. Jump to your app:
Outlook (Windows and Mac)
- Install Gpg4win first. Outlook needs it to read and send encrypted CounterMail messages. For Outlook 2010 to 2013 add the Outlook privacy plugin too.
- In Outlook choose File then Add Account, open Advanced options and tick let me set up my account manually.
- Choose IMAP and enter
imap1.countermail.comon993for incoming and the same host on465for outgoing, both SSL. - Set auth to Plain for Outlook and enter the plain text key you request from CounterMail support. Outlook uses this rather than the CRAM-MD5 IMAP-key.
- Finish and send a test email to yourself to confirm both directions work.
Apple Mail (macOS)
- Open Mail → Settings → Accounts → Add Account.
- Select CounterMail if listed, otherwise choose Other Mail Account.
- Enter your name, address and IMAP-key, then continue.
- If asked for servers, enter the IMAP and SMTP values from the tables above.
- Enable Mail in the checkbox list and finish.
iPhone and iPad
- Open Settings → Apps → Mail → Mail Accounts → Add Account.
- Tap Other, then Add Mail Account. iOS has no CounterMail preset.
- Enter your details using your 32 character IMAP-key as the password, then tap Next.
- Keep IMAP selected and fill the incoming and outgoing servers if iOS asks.
- Tap Save and wait for iOS to verify the account.
Android
- Open your mail app (Gmail app, Samsung Email or another) → Add account.
- Choose Other (IMAP) when your provider is not in the list.
- Enter your address and IMAP-key. Where automatic setup fails, choose Manual setup and set auth to CRAM-MD5.
- Enter the servers:
imap1.countermail.com993 SSL incoming, then the same host 465 SSL outgoing. - Finish setup and pull down to sync your inbox.
Thunderbird
- Open Thunderbird → Account Settings → Account Actions → Add Mail Account.
- Install the PGP tooling first. Modern Thunderbird has OpenPGP built in. Enter your name and address, leave the password blank, then choose Continue.
- Click Manual config and set both servers to
imap1.countermail.com, IMAP on 993 and SMTP on 465, auth CRAM-MD5, password your IMAP-key. - If detection fails, choose Configure manually and enter the table values above.
- Select Done. Folders sync on first open.
CounterMail Webmail Settings#
Those values connect your apps. What follows shapes the mailbox itself, including the OpenPGP encryption that lives in the webmail. It sits in the CounterMail settings rather than in any client.
Signature
Set in the CounterMail webmail preferences. A signature saved there shows on browser sent mail only. Each desktop client keeps its own copy.
Vacation Auto Reply
Set a start and end date on the away message so it stops itself. CounterMail sends it from the server, so replies keep going out with every device switched off.
Filters and Folders
Filters built in the webmail run server side, sorting each message before any client downloads it. A rule inside Outlook fires only while Outlook is open.
Spam and Blocked Senders
CounterMail filters spam server side. When mail goes missing, check the webmail spam folder first, since encrypted mail is not always visible to client side filters.
POP3 vs IMAP#
| Feature | IMAP | POP3 |
|---|---|---|
| Where mail lives | On the CounterMail server | Downloaded to 1 device |
| Multiple devices | ✅ Everything stays in sync | ❌ Each device sees different mail |
| Sent and deleted mail | ✅ Synced everywhere | ⚠️ Stays only on that device |
| Offline reading | ⚠️ Cached mail only | ✅ Full local copy |
| Server storage used | Yes, counts against your quota | Can be freed after download |
| Best for | Phone + computer, everyday use | Single PC, local archives |
CounterMail Settings Worth Knowing#
CounterMail has a few traits that shape a client setup more than raw send quotas. These are the ones worth remembering:
| Client password | 32 character IMAP-key, not your login |
| Host | imap1.countermail.com for IMAP and SMTP |
| Ports | 993 for IMAP, 465 for SMTP, both SSL |
| Auth type | CRAM-MD5, Plain for Outlook |
| Client access | Premium plans only |
| Encryption | OpenPGP, needs a PGP tool in the client |
Troubleshooting CounterMail Connections#
On CounterMail the failures cluster around the IMAP-key, the CRAM-MD5 auth type and the premium requirement. Find your symptom, then the fix.
| Error you see | What it means | Fix |
|---|---|---|
| Login or password rejected | Your login password was used instead of the IMAP-key | Paste your 32 character IMAP-key from Settings then Security and Keys. |
| Authentication failed | The auth type is set to normal password | Switch the client to CRAM-MD5, shown as encrypted password. |
| Server not found for countermail.com | The host is missing the 1 | Use imap1.countermail.com for both IMAP and SMTP. |
| Worked before, now rejected | The IMAP-key changed after a password or USB key change | Copy the new IMAP-key from the webmail into every client. |
| Cannot connect to server | Wrong port or encryption | Check IMAP on 993 and SMTP on 465, both SSL on imap1.countermail.com. Security software and VPN clients block these ports often enough to be worth a look. |
| Password keeps being asked | The account is not premium | Confirm you are on a premium plan, since basic accounts cannot use clients. |
| Messages stuck in Outbox | SMTP authentication is off | Enable "outgoing server requires authentication" with the same login as incoming mail. |
Reader Reported Fixes
Use the IMAP-key, not your password. The most common CounterMail setup mistake is entering the login password in a client. Clients need the 32 character IMAP-key from Settings then Security and Keys. Copy it exactly, with no spaces.
Install a PGP tool before you expect to read mail. Encrypted messages stay unreadable in a client without GnuPG, GPGTools or Gpg4win. Modern Thunderbird has OpenPGP built in, so it is the smoothest first client.
Moving to CounterMail?#
Most people reach CounterMail from a mainstream provider like Gmail or Outlook.com. That older mail does not follow on its own. An IMAP link only reflects the current server, so anything archived before the move stays behind until you carry it across.
Start with premium and your IMAP-key. Client access is a premium feature, so a migration tool cannot reach a basic account. Set up the CounterMail side with the values here. Host imap1.countermail.com on port 993 SSL, your lowercase address, then your 32 character IMAP-key over CRAM-MD5.
Copy the old mail over. The Univik Email Migration Tool copies every folder into CounterMail. Enter the CounterMail details for the destination and the old provider details for the source, then let it run.
On encryption. CounterMail OpenPGP keys are managed in the webmail. Mail copied over IMAP arrives as standard messages, so set up your keys in the CounterMail interface after the move.
Rather not do it yourself? Our Email Migration Services team handles the whole move and checks every folder arrived.
Use These Settings in Univik Email Backup#
The same IMAP settings above let you download your complete CounterMail mailbox to your computer. Univik Email Backup saves everything as PST, MBOX, EML or PDF files you keep forever, even if the account closes.
- Download Univik Email Backup and install it on Windows.
- Select CounterMail from the source list. If it isn't listed by name, choose IMAP.
- Sign in with your lowercase address and your IMAP-key on a premium plan.
- If the tool asks for server details, use
imap1.countermail.comwith port993and SSL from the IMAP table above. - Pick a saving format and folder, then start the backup. Large mailboxes download in the background.
Univik Tools That Use These Settings#
Many people land here while migrating or archiving a mailbox. All 3 tools use the same IMAP settings from this page:
Email Backup
Download your complete CounterMail mailbox to PST, MBOX, EML or PDF before switching or closing the account.
Email Backup Tool →
Email Migration Tool
Copy every folder from CounterMail straight into Gmail, Microsoft 365 or any other account. No manual export needed.
Email Migration Tool →
Email Converter Tool
Already have MBOX, EML or OST files from an old export? Convert them to PST, PDF or any format your new app opens.
Email Converter Tool →Prefer to hand the whole migration to experts?
If server settings and IMAP-keys feel like too much, you do not have to learn them. Univik's migration team handles the complete project: planning, transfer, verification and a report showing every folder made it. Since 2013, for single mailboxes up to full company moves.
Email Settings Glossary#
IMAP
Internet Message Access Protocol. Reads mail that stays on the server, so all your devices see the same inbox, folders and read status.
POP3
Post Office Protocol version 3. Downloads mail to 1 device and can remove it from the server. Older method, still useful for local archives.
SMTP
Simple Mail Transfer Protocol. Sends your outgoing mail. Every account needs it next to IMAP or POP3, which only receive.
SSL / TLS / STARTTLS
Encryption for the connection. SSL/TLS encrypts from the first byte, which is what CounterMail uses on 993 and 465.
IMAP-key
A 32 character key that CounterMail uses in place of your password inside email clients. Found in Settings then Security and Keys. It regenerates if you change your password.
OAuth
Sign in through the provider's own window instead of typing a password into the app. The modern method most providers are moving to.
How We Verify These Settings#
Univik builds email backup, migration and converter software since 2013. Our tools sign in to CounterMail over IMAP and SMTP every day for thousands of users, so a changed server, port or login rule shows up in our connection logs before most guides notice it.
Every value on this page is confirmed two ways: a live IMAP and SMTP connection from Univik Email Backup, then a line by line comparison against the CounterMail knowledge base. We re verify after any provider announcement and at least once a quarter.
Found something that no longer matches what CounterMail shows you? Tell us and we will retest and update the page, with the change logged in what changed recently.
Help & Support
Frequently Asked Questions
Use imap1.countermail.com on port 993 with SSL/TLS and CRAM-MD5 auth. Sign in with your lowercase address and your 32 character IMAP-key, not your login password. The full table is in the IMAP settings section.
CounterMail clients do not use your login password. They use a 32 character IMAP-key from Settings then Security and Keys. Paste that into the password field and set the auth type to CRAM-MD5. Your login password only works on the webmail.
CounterMail offers IMAP only, so there is no POP3 to choose. IMAP keeps phone, computer and webmail aligned. For a local offline copy, pair it with a backup tool. More here.
The host, ports and auth type stay the same across devices. What changes is Outlook, which uses Plain auth and a separate support issued key. Thunderbird and Apple Mail use the standard IMAP-key. See the client setup guides.
Yes. CounterMail issues a fresh IMAP-key whenever you change your password or activate a USB key. Copy the new key from Settings then Security and Keys, then paste it into every client. Otherwise they stop connecting.
Yes. The connection runs over SSL with CRAM-MD5 auth. The client holds an IMAP-key rather than your login password. Install a PGP tool such as GnuPG, GPGTools or Gpg4win so the client can read encrypted mail.
An email client with IMAP downloads mail as it syncs, but a dedicated backup tool is faster and saves standard files you can open anywhere. See how to back up your CounterMail mailbox. If you already exported files in another format, an email converter changes them to PST, PDF or whatever your new app opens.
On CounterMail the usual cause is a regenerated IMAP-key. Changing your password or activating a USB key issues a new key, which breaks every client still holding the old one. Copy the new IMAP-key into each client.
An email migration tool copies mail directly between the 2 accounts over IMAP. You need the CounterMail IMAP settings and your IMAP-key for this side, on a premium plan, plus the same details for the destination account. Every folder, label and date stays intact.
If setting this up feels risky or you have many accounts to move, our managed email migration service does the entire job for you.
Other Email Provider Settings
Summary: CounterMail Settings at a Glance
- IMAP: imap1.countermail.com, port 993, SSL/TLS
- Auth type: CRAM-MD5, Plain for Outlook
- SMTP: imap1.countermail.com, port 465, SSL/TLS
- Username: your lowercase address
- IMAP-key required for email clients
- Pick IMAP for phone + computer sync
- Password: your 32 character IMAP-key
- Premium plan and a PGP tool required