IMAP

IMAP lets email clients read and manage messages that stay stored on the mail server, keeping multiple devices in sync. Like POP3, legacy IMAP supports basic password authentication that does not understand MFA, so attackers target it for password spraying against cloud mailboxes. Security guidance is to require TLS on port 993 and disable legacy authentication in favor of modern token-based sign-in.