What is the difference between SMTP, POP3, and IMAP?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
SMTP (Simple Mail Transfer Protocol) is the protocol that sends email. POP3 (Post Office Protocol version 3) and IMAP (Internet Message Access Protocol) are protocols that retrieve email from a server to your device.
Here's the practical difference: SMTP is what happens when you hit send. Your email client (like Gmail, Outlook, or Fastmail) uses SMTP to hand your message to a mail server, which then uses SMTP again to pass it along until it reaches the recipient's server.
POP3 and IMAP are what happens when you check your inbox. POP3 downloads your messages to one device and typically deletes them from the server (though you can configure it to keep copies). IMAP leaves everything on the server and syncs across all your devices. Read an email on your phone? IMAP marks it read on your laptop, too. POP3 doesn't.
Why this matters if you're sending email (not just using it): Most ESPs abstract all of this away. When you send a campaign through Mailchimp or Postmark, you're not touching SMTP directly. The platform handles it. But if you're building custom sending infrastructure, integrating with an API, or troubleshooting delivery, you'll hear "SMTP" constantly. It's the protocol your sending code actually uses.
You might also run into SMTP if you're connecting a custom domain to send through Google Workspace or Microsoft 365, or if you're using a transactional service like SendGrid or Mailgun via SMTP relay instead of their API. In those cases, you'll configure SMTP credentials (server address, port, username, password) so your app can hand off messages.
POP3 and IMAP matter less for senders, but if you're running a support inbox or shared team email, IMAP is what keeps everyone's view in sync. POP3 is mostly legacy at this point. Most modern email clients default to IMAP because nobody wants their phone and laptop showing different inboxes.
One last thing: SMTP is also the protocol spammers abuse, which is why authentication exists. SPF, DKIM, and DMARC are all built on top of SMTP to prove you're actually allowed to send from your domain.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.