sodcalculator

10 Tech How-To

Fix Outlook Secure Connection Error

Guide 10-20598 · Updated · Step by step

If Outlook shows “Cannot establish a secure connection to the server,” it usually means the email client and the mail server couldn’t agree on a security protocol or encryption method. The fix is to check your account’s incoming and outgoing server settings, update the encryption type to SSL/TLS or STARTTLS as required by your provider, and verify that your password and server names are correct.

What Causes This Error

This error appears when Outlook tries to connect to your email server (like IMAP, POP3, or Exchange) but the connection fails during the TLS/SSL handshake. Common triggers include:

  • Outdated encryption settings — your provider may have switched from SSL to STARTTLS, or vice versa.
  • Wrong server port — for example, using port 993 for IMAP with SSL, but the provider expects port 143 with STARTTLS.
  • Expired or invalid security certificate — Outlook checks the certificate’s validity and hostname; a mismatch or expiry blocks the connection.
  • Antivirus or firewall interference — some security software intercepts SSL traffic and breaks the handshake.
  • Outdated Outlook version — older builds may not support newer TLS versions (like TLS 1.2 or 1.3) that servers now require.

Step-by-Step Fixes

Try these in order. Most people resolve the issue with steps 1–3.

  1. Check server settings. Go to File > Account Settings > Account Settings, select your email account, and click Change. Verify the incoming and outgoing server names and ports against your provider’s documentation (for example, Gmail uses imap.gmail.com:993 for IMAP with SSL, and smtp.gmail.com:587 with STARTTLS).
  2. Update encryption method. In the same window, look for “Use the following type of encrypted connection”. Try switching between SSL/TLS and STARTTLS (sometimes labeled “Auto”). If your provider uses SSL on port 465 for SMTP, select SSL/TLS; if it uses STARTTLS on port 587, select that.
  3. Re-enter your password. Click More Settings > Outgoing Server and ensure “My outgoing server (SMTP) requires authentication” is checked. Then go back to the main window and re-type your password, making sure there are no extra spaces.
  4. Disable antivirus SSL scanning temporarily. Some antivirus tools (like Norton or McAfee) have an option to scan encrypted connections. Turn it off for Outlook, then try again. Re-enable it after testing.
  5. Repair Outlook. Go to Control Panel > Programs > Programs and Features, select Microsoft Office, and choose Change > Quick Repair. If that fails, try Online Repair.
  6. Create a new profile. If nothing works, remove the account and re-add it using the automatic setup option. This often picks up the correct server settings automatically.

How to Find the Correct Server Settings

Your email provider’s help page usually lists the exact server names, ports, and encryption methods. For example:

  • Gmail: IMAP imap.gmail.com:993 (SSL), SMTP smtp.gmail.com:587 (STARTTLS) or 465 (SSL).
  • Outlook.com: IMAP outlook.office365.com:993 (SSL), SMTP smtp-mail.outlook.com:587 (STARTTLS).
  • Yahoo Mail: IMAP imap.mail.yahoo.com:993 (SSL), SMTP smtp.mail.yahoo.com:465 (SSL).

If you use a company or school account, contact your IT admin for the correct values. Never guess ports; using the wrong one will almost always produce this error.

Common Mistakes and Misconceptions

One frequent mistake is confusing SSL and STARTTLS. SSL/TLS encrypts the connection from the start on a dedicated port (like 993 or 465). STARTTLS upgrades an existing plaintext connection to encryption on a standard port (like 143 or 587). Many providers now require STARTTLS, but some older Outlook profiles are set to SSL, causing the error.

Another misconception is that the error means your password is wrong. While a wrong password can cause a similar message, the “secure connection” wording specifically points to a protocol or certificate issue. Still, it’s worth confirming your password works by logging into webmail.

When to Contact Your Provider

If you’ve tried all the steps and still get the error, the problem may be on the server side. Contact your email provider or IT support and give them the exact error message, the server names and ports you’re using, and the Outlook version. They can confirm whether the server has changed its security requirements or if there’s an outage.

Frequently Asked Questions

Why does Outlook say “Cannot establish a secure connection” on my iPhone?

On iOS, the same error usually appears in the Mail app. Go to Settings > Mail > Accounts, select the account, and tap Account > Advanced. Change the “Use SSL” toggle and the port number to match your provider’s requirements. Also check that your email password is correct.

Does this error mean my email is hacked?

No. The error is a connection failure, not a security breach. Your emails are not exposed; Outlook simply cannot establish an encrypted channel to the server. Still, if you suspect a compromise, change your password immediately.

Can I ignore this error and still send/receive email?

No. Outlook will not send or receive until the connection is fixed. You might temporarily use webmail, but the desktop client will remain blocked until the settings are corrected.

Why does the error appear only sometimes?

Intermittent errors can be caused by network instability, server maintenance, or antivirus software that occasionally blocks the connection. Try a different network (like a mobile hotspot) to isolate the cause. If it persists, update your antivirus and Outlook.

Will reinstalling Outlook fix the problem?

Reinstalling can help if the installation is corrupted, but it’s rarely necessary. The error is almost always a settings issue. Try the steps above first; if you do reinstall, you’ll need to reconfigure your email account anyway.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →