What is SMTP authentication? SMTP Auth explained

With SMTP authentication, you can increase the security of your SMTP server significantly. Once you have it set up, only trustworthy users (SMTP clients) will be able to send messages.

What is SMTP authentication?¶

SMTP authentication, also known as SMTP AUTH or ASMTP, is an extension of the extended SMTP (ESMTP), which, in turn, is an extension of the SMTP network protocol. It allows an SMTP client to log on to an SMTP server using an authentication mechanism. This ensures that only trustworthy users can send and forward emails through the server. In addition, log data can be used to determine who has used the server for SMTP relays.

What is SMTP AUTH used for?¶

SMTP AUTH prevents an SMTP server from being misused as an open mail relay, through which spam can be spread throughout a network. Although the situation is no longer as critical as it was in the past, it’s still common to find open relay servers that don’t have SMTP authentication set up. Sometimes, this is due to the fact that administrators who lack experience want to test their server and underestimate the risks associated with temporarily opening it. Often though, the problem results from poorly configured firewalls and external security applications.

Open mail relays can usually be identified in a few hours or days, and servers that are identified as such are placed onblocklists. Once placed on a blocklist, even legitimate emails can end up in spam folders. This is why it’s important to take SMTP authentication seriously.

For operators of mail servers, having a server that is being used as an open mail relay has multiple consequences. First, it results in higher traffic due to the opportunities it provides for spammers. It can also negatively impact an operator’s reputation and consume a lot of their time, which, in turn, drives up costs. This is why nearly all mail servers now use ESMTP together with ASMTP (extended SMTP with SMTP authentication).

How does ASMTP work?¶

An essential feature of ASMTP is that emails are accepted via TCP port 587 (the SMTP AUTH port) and not over the traditional port 25/TCP. This is a mandatory feature of ESMTP. The protocol contains a selection of authentication mechanisms with different levels of security, which, depending on its configuration, an SMTP server can use in order to check the trustworthiness of an SMTP client.

These authentication mechanisms include:

• PLAIN: An authentication via the username and password of the client. Both are transmitted unencrypted and then encoded in the Base64 character set.
• LOGIN: This works similarly to PLAIN, but the Base64 character set for the username and password are transferred in two steps rather than just one.
• CRAM-MD5: An alternative to PLAINand LOGINwith a higher level of security that follows the challenge-response principle. Via this mechanism, the password is not transferred in code or plain text. Instead, the server provides the client with a randomly generated computational task that can only be solved with the help of the password.
• Other mechanisms include: GSSAPI, DIGEST-MD5, MD5, OAUTH10A, OAUTHEBEARER, SCRAM-SHA-1, and NTLM.

An example of an SMTP authentication via LOGIN:

How to configure SMTP authentication¶

In most mail programs, SMTP authentication is configured automatically when a new account is created. If, for some reason, it isn’t working, you may have to do it manually. Below, you’ll find instructions on how to set up SMTP authentication for Gmail, Outlook and IONOS Mail.

How to enable SMTP AUTH in Outlook¶

1. In the File menu, click on Account Settings and then select the option that is also named Account Settings.
2. Choose your account and click on Change.
3. Select More Settings.
4. In the newly opened window, go to Outgoing Server and activate the option My outgoing server (SMTP) requires authentication.
5. Check the box titled Use same settings as my incoming mail server.
6. Confirm it with OK. Now, the window should close.
7. Click on Next for Outlook to check the new account settings and click Close when the test is complete.
8. Now, click on Finish and then Close.

Microsoft 365 users can also activate SMTP authentication in the 365 admin center or using Windows PowerShell.

How to enable SMTP AUTH in Gmail¶

When you connect your Gmail address to a desktop client, you can also activate SMTP authentication:

1. Log in to your Gmail account.
2. Click on Settings und select See all settings.
3. Switch to the Forwarding and POP/IMAP tab.
4. Here you can click on the Learn more link under either POP download or IMAP access.
5. In both instances, you’ll be directed to setup instructions, where you can also find relevant information about the outgoing mail server (SMTP), including SMTP authentication.

How to enable SMTP AUTH in IONOS Mail¶

IONOS email plans that use IONOS Webmail come with SMTP AUTH already activated. If you want to set up IONOS Mail in a different desktop client, you can easily configure SMTP authentication manually as well. You can access the relevant settings, including the SMTP AUTH port, in the Control Panel:

1. Log in to your IONOS customer account via the login page.
2. In the product overview, select Email.
3. Next, click on the IONOS mail plan that you want to configure and choose the email address that you want to set up SMTP authentication for.
4. Click on the menu item E-mail server information (POP, IMAP).
5. You will now find all the information you need to set up the email address, including SMTP authentication.

How do I test SMTP AUTH?¶

You can use the Telnet client to check whether a mail server is operating as an open relay or to see if SMTP AUTH is functioning correctly (for example, if you have set up your own mail server). Lots of spammers also use the Telnet client in order to identify open mail relays. SMTP and ESMTP are purely text-based protocols, which is why you can also start and execute a client-server session manually.

You can easily check if your email server has SMTP authentication enabled by using web tools like SMTP Diagnostics from MxToolbox:

1. Go to SMTP Diagnostic.
2. In the input field, enter the address of the SMTP server or an email address that uses the SMTP server.
3. Click Test Email Server.
4. After a short amount of time, you’ll receive a list of key information, including details about SMTP authentication. In the row, where it says SMTP Open Relay, you can see whether authentication is enabled.