If an online SMTP or email diagnostic tool warns that your mail server "does not support TLS," your email is almost certainly still encrypted. Ultra Web Hosting mail servers fully support TLS, and that warning is usually a false alarm caused by the anti-spam protection running on the server. This guide shows you how to confirm TLS is working on your account and explains why some checkers report it incorrectly.
Your email is already encrypted
Every Ultra Web Hosting mail server supports modern encryption on all of the standard email ports:
- STARTTLS on the SMTP and submission ports (25 and 587)
- Direct SSL/TLS on the secure ports (465 for sending, 993 and 995 for receiving)
- A valid, trusted certificate negotiated over TLS 1.2 with a strong cipher
So as long as your mail client is set to use SSL/TLS (see the settings below), your mail is encrypted in transit, regardless of what a quick online test reports.
01. The Short Answer
A result of "TLS not supported" from a free online SMTP checker does not mean your mail is unencrypted. In almost every case we investigate, the server is offering TLS correctly and the testing tool simply did not complete the handshake before giving up.
The usual reason is our own spam protection. To reduce junk mail, our servers apply a short connection delay to sending systems they do not recognize. Real mail servers wait out that pause and deliver normally, but a lot of spam software gives up and disconnects. Some lightweight diagnostic tools behave the same way as the spam software: they will not wait, so they time out and then report, incorrectly, that the server has no TLS.
02. How to Confirm TLS Is Working
You do not need a third-party tool to verify this. There are two reliable ways to check from your own account.
Check in your mail client
If your email program (Outlook, Apple Mail, Thunderbird, the Mail app on your phone) is set up with SSL/TLS on the ports listed below and it sends and receives mail without a certificate error, TLS is working. That is the real-world test that matters.
Use cPanel Connect Devices
Log in to cPanel, open Email Accounts, find your address, and click Connect Devices. cPanel lists the exact secure (SSL/TLS) settings for that mailbox. These are the server's own recommended encrypted settings, so if they are present, TLS is available.
03. Why Some Checkers Report No TLS
When a reputable tool still shows a TLS warning, it is almost always one of these three causes.
The anti-spam connection delay (most common)
As described above, our mail servers briefly delay unrecognized sending systems on the inbound mail port to shed spam. A checker that measures a high "transaction time" (for example, fifteen or more seconds) and then flags "does not support TLS" is almost certainly timing out on that deliberate pause, not detecting a missing feature. This is working as intended and does not affect your mail or its encryption.
The tool tested the wrong way
Email uses two different styles of encryption on different ports: STARTTLS (the connection starts in plain text and then upgrades, used on ports 25 and 587) and direct SSL/TLS (encrypted from the first byte, used on port 465). A tool that tries direct SSL on a STARTTLS port, or STARTTLS on a direct-SSL port, will fail the handshake and may report "no TLS" even though the server supports encryption on both.
A transient network timeout
Free checkers run from shared cloud servers and are often rate-limited or briefly overloaded. A one-off failure that does not repeat is just noise. Re-run the test a minute later before drawing any conclusion.
04. The Correct Secure Mail Settings
Use these encrypted settings in any mail client. Replace the hostname with your own mail server name, usually mail.yourdomain.com.
Incoming (IMAP): mail.yourdomain.com port 993 SSL/TLS
Incoming (POP3): mail.yourdomain.com port 995 SSL/TLS
Outgoing (SMTP): mail.yourdomain.com port 465 SSL/TLS
or mail.yourdomain.com port 587 STARTTLS
Authentication: required (your full email address and its password)Step-by-step setup for common programs and devices:
- How to Set Up Email in Microsoft Outlook
- How to Set Up Email on Your iPhone or iPad
- How to Set Up Email on Android
- POP3 vs IMAP: Choosing the Right Email Protocol
mail.domain.com if your certificate is issued for the server name. If you get a certificate name warning, see Fixing Outlook SSL Certificate Warnings.
05. Other Warnings You May See
Email health reports list many checks. Two commonly appear alongside the TLS warning and are not problems on shared hosting.
Reverse DNS does not match SMTP banner
On shared hosting the server identifies itself by the server's hostname (for example web158.ultrawebhosting.com), not by your individual domain. The reverse DNS and the banner both point to that server name. This is normal, expected, and does not affect encryption or deliverability.
Slow transaction time
A high transaction time is the same anti-spam connection delay described in section 03. It is a deliberate protection, not a performance fault, and legitimate mail is delivered normally.
If you want to review your domain's DNS, blacklist status, or email authentication records, use our own tools rather than third-party checkers:
06. When to Contact Us
Open a support ticket if you see any of the following, because these point to a real configuration issue rather than a false alarm:
- Your mail client cannot connect at all over SSL/TLS, and the non-SSL settings do not work either.
- You get a certificate error naming the wrong hostname that the steps in Fixing Outlook SSL Certificate Warnings do not resolve.
- A compliance requirement forces you to pass a specific external TLS audit and you need us to review the server configuration for your account.
Include the exact tool name, the hostname and port you tested, and a screenshot of the result. That lets us reproduce it quickly and confirm whether it is a false negative or something to fix.
Still Not Sure Your Email Is Secure?
Send us the details and we will check the TLS configuration on your mail server directly and confirm exactly what is happening.
Open a Support TicketQuick Recap: If a Tool Says "No TLS"
If you only do a few things from this guide, do these:
- Do not panic - a "no TLS" result from a quick online test is usually a timeout, not a real problem.
- Confirm in your mail client or cPanel - if SSL/TLS settings work and send/receive without a certificate error, TLS is fine.
- Use the secure ports - 993 (IMAP), 995 (POP3), 465 or 587 (SMTP), always with SSL/TLS.
- Re-run the test - free checkers time out on our anti-spam delay and on their own rate limits.
- Contact us if your client genuinely cannot connect over SSL/TLS, with the tool name, host, and port.
