Free tools Windows power users keep installed
One-click scans. No signup required.
Use the mailbox settings shown in Virtualmin, then add the account to classic Outlook as an IMAP account. The reliable sequence is: make sure the domain, DNS, hostname, certificate, and firewall are ready; copy the mailbox-specific username, servers, ports, and encryption modes from Show Email Client Settings; enter those values through Outlook’s manual IMAP setup; and test both receiving and authenticated SMTP sending.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What must be ready before Outlook can connect
Outlook is only the last part of this setup. A VPS mailbox needs working mail services, a resolvable name, valid DNS, and reachable ports before any desktop client can authenticate.
As an Amazon Associate I earn from qualifying purchases.
- A mail-enabled Virtualmin domain: The virtual server must have email enabled, and the mailbox must already exist.
- The exact mailbox credentials: Virtualmin may require the complete address, such as
[email protected], rather than onlyuser. - A stable mail hostname: Use the hostname Virtualmin publishes, commonly a name such as
mail.example.comor the server’s fully qualified domain name (FQDN). - DNS resolution: The chosen hostname must resolve to the VPS, and the domain’s MX record must direct incoming mail to the intended mail host.
- A matching TLS certificate: The name entered in Outlook must be covered by the certificate presented by the VPS.
- Reachable ports: The VPS firewall, any cloud firewall, and the server’s own services must allow the selected IMAP and SMTP connections.
Virtualmin’s mail stack normally uses Dovecot for IMAP and POP3 and Cyrus saslauthd for authenticated SMTP. Virtualmin documentation describes this as automated configuration intended to work with common mail clients, but the actual values can differ between installations.
Copy the authoritative settings from Virtualmin
Do not build the Outlook profile from a generic port chart. Virtualmin exposes the values for the specific mailbox and server.
- Sign in to the Virtualmin control panel.
- Open the virtual server that owns the email domain.
- Open the mailbox or email-user management area and select the account you want to use.
- Choose Show Email Client Settings (the wording can vary slightly by Virtualmin version).
- Copy the displayed incoming server, outgoing server, username, ports, and encryption modes into a temporary note. Keep the password out of that note.
Record whether the incoming service is IMAP or POP3, whether encryption is implicit TLS or STARTTLS, and whether SMTP authentication is required. If the panel shows a server FQDN instead of a domain alias, use that FQDN. A mailbox can be valid while a guessed hostname, shortened username, or mismatched security mode still causes Outlook to fail.
IMAP, POP3, TLS, and hostname choices
For Outlook, IMAP is usually the appropriate protocol because messages and folders remain synchronized with the server. POP3 is more download-oriented and may not preserve the same folder state across multiple devices.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall| Choice | How it behaves | When it fits this VPS mailbox |
|---|---|---|
| IMAP | Synchronizes folders, read status, and messages with the server. | Use for a mailbox accessed from Outlook and possibly other devices. |
| POP3 | Downloads messages to the client; server-side synchronization is more limited. | Use only when the Virtualmin settings specifically call for it or a download-only workflow is intentional. |
| Implicit TLS | The connection is encrypted from the start on a TLS-designated port. | Use the port and encryption label shown by Virtualmin; do not substitute STARTTLS. |
| STARTTLS | The client begins a normal connection and upgrades it to TLS. | Use when the server’s published setting says STARTTLS, especially for authenticated SMTP submission. |
A frequently used encrypted combination is IMAPS on port 993 and SMTP submission on port 587 with STARTTLS. Those are examples, not universal requirements. The settings displayed by your Virtualmin installation take precedence, because administrators can choose different ports or encryption policies.
For the hostname, compare the available options against three checks:
- Certificate name: The name must appear in the certificate’s subject or Subject Alternative Name list.
- DNS: An A or AAAA record must resolve the name to the VPS address you intend to use.
- Virtualmin’s client settings: If the panel publishes a particular name, treat it as the default rather than inventing a shorter alias.
Configure the account in classic Outlook for Windows
The following procedure applies to classic Outlook for Windows, where Microsoft provides a manual advanced setup path for arbitrary incoming and outgoing server values.
- Open Outlook and select File.
- Select Add Account.
- Enter the mailbox address. Before submitting, select Advanced options.
- Enable Let me set up my account manually, then select Connect.
- Choose IMAP.
- In the incoming-mail section, enter the IMAP server name, port, and encryption type copied from Virtualmin.
- In the outgoing-mail section, enter the SMTP server name, port, and encryption type copied from Virtualmin.
- When prompted, enter the mailbox password. Use the mailbox password, not the Virtualmin administrator password, unless your installation explicitly uses the same credential.
- Finish the wizard and allow Outlook to run its account test.
Microsoft’s manual setup guidance specifically calls for the advanced option when you need to supply incoming and outgoing server names, port numbers, or SSL settings. If Outlook presents a security dropdown with several labels, select the one that corresponds to the encryption wording in Virtualmin; do not select a stronger-looking option merely because it sounds safer, since a protocol mismatch prevents the connection.
Recommended Free Tools
Set SMTP authentication in the advanced account properties
Receiving mail and sending mail are separate sessions. A mailbox can authenticate to IMAP while SMTP submission remains blocked if Outlook does not send credentials.
- In classic Outlook, open File → Account Settings → Account Settings.
- Select the Virtualmin account and choose Change (or open its server settings, depending on the Outlook build).
- Open the advanced or outgoing-server settings.
- Enable My outgoing server (SMTP) requires authentication when Virtualmin indicates that authenticated submission is required.
- Choose the option to use the same username and password as the incoming server unless the Virtualmin panel shows separate SMTP credentials.
- Save the changes and run Test Account Settings.
Do not use an unauthenticated port simply to make a test message leave the client. Proper submission authentication is what prevents the VPS from becoming an open relay.
What changes in New Outlook
New Outlook has different screens and provider support from classic Outlook. Its account page may not expose the same manual IMAP fields or the same advanced SMTP controls. If the New Outlook interface cannot accept the server, port, and encryption values shown by Virtualmin, use classic Outlook for this mailbox and complete the manual flow above. If your build does offer manual IMAP setup, enter the same authoritative values; changing applications does not change the server requirements.
Autodiscover is not a substitute for those values. When automatic detection fails, the account can still work through manual IMAP setup, provided DNS, certificates, credentials, and firewall rules are correct.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Prepare DNS and sender authentication
DNS determines where other mail systems deliver messages and helps receiving systems evaluate mail sent by your VPS. Configure these records in the domain’s DNS controls and then allow time for normal DNS propagation.
- MX: Point the domain’s MX record to the mail host that actually accepts mail for the Virtualmin domain. An MX record pointing elsewhere means messages will not arrive at this VPS, even if Outlook can log in locally.
- SPF: Publish an SPF policy that authorizes the VPS or its sending service. Virtualmin provides controls for enabling SPF in the domain’s DNS configuration.
- DKIM: Enable signing and generate or select the key offered by Virtualmin. The public key must be published at the selector name the server uses.
- DMARC: Add a DMARC policy after SPF and DKIM are aligned with the visible From domain. Virtualmin includes DMARC controls, allowing you to start with a monitoring policy before enforcing rejection.
These records improve sender authentication, but they do not repair an incorrect Outlook password or a blocked SMTP port. Treat client connectivity and domain authentication as related but separate tasks.
Rank #4
Test the account and interpret the result
Use Outlook’s Test Account Settings after saving the profile. The test normally checks incoming authentication and outgoing submission independently.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →- Both tests pass: Open the Inbox, create a test message, send it to an address you control, and confirm that a reply arrives. Check the Sent folder to verify that Outlook is saving the submitted message as expected.
- Incoming passes, outgoing fails: Concentrate on SMTP authentication, the submission port, the encryption mode, and firewall rules permitting outbound traffic. The mailbox password can be correct even when SMTP settings are not.
- Outgoing passes, incoming fails: Check the IMAP server and port, the full mailbox username, the password, and whether Dovecot is running and reachable.
- Both fail immediately: Check DNS resolution, the hostname, certificate name, firewall access, and whether the server is listening on the ports shown by Virtualmin.
A green check confirms that Outlook completed that particular test at that moment; it does not prove that remote recipients will accept every message or that DNS has finished propagating everywhere.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshoot the common failures
Outlook repeatedly asks for the password
First, replace the username with the exact value from Show Email Client Settings. For many Virtualmin mailboxes that means the full [email protected] address. Re-enter the mailbox password carefully, remove any obsolete saved credential from Windows Credential Manager if Outlook keeps submitting an old one, and reset the mailbox password in Virtualmin if necessary. Then test again rather than changing ports at random.
A certificate warning appears
The hostname in Outlook is probably not covered by the certificate, or DNS sends that name to a different machine. Switch to the hostname Virtualmin publishes, confirm that it resolves to the VPS, and obtain or renew a trusted certificate for that name. Virtualmin’s installer can request a real certificate when the hostname resolves correctly and the required ports are reachable. Do not suppress the warning as a permanent fix: a name mismatch can expose credentials to interception and usually indicates a broken mail-host configuration.
You can receive mail but cannot send
Open the outgoing-server settings and verify that SMTP authentication is enabled with the mailbox credentials. Compare the SMTP port and TLS mode with Virtualmin’s display, then check VPS and cloud-firewall rules for the selected submission port. Also confirm that the server allows authenticated submission for this account; a successful IMAP login alone does not establish that permission.
You cannot receive mail
Check the domain’s MX record first, then verify that the IMAP service is listening and reachable from the network where Outlook runs. Confirm the username and password and ensure Dovecot is running on the VPS. If local Outlook tests pass but messages from outside never arrive, the problem is usually MX routing, DNS propagation, or a filtering rule rather than the desktop profile.
Autodiscover cannot find the account
Automatic discovery depends on the records and options configured for the domain. If your Virtualmin installation provides an Outlook auto-configuration option, enable it and verify the associated DNS records. Otherwise, bypass discovery by selecting the manual setup path in classic Outlook and entering the values from the mailbox settings view.
The settings look correct but the connection still fails
Test name resolution from the affected network, check both host and cloud firewall logs, and inspect the mail-service logs on the VPS for authentication or TLS errors. A port can be open in a local security group while blocked by the operating system firewall, or a certificate can be valid on one hostname while Outlook uses another. Make one change at a time and rerun the account test so the resulting log entry identifies the actual failure.
Keep the configuration maintainable
- Store the hostname, username, ports, and encryption modes in your internal documentation, but never store the mailbox password there.
- When changing the VPS hostname, certificate, firewall, or mail services, rerun the Outlook test and send a message before declaring the migration complete.
- Renew the certificate before expiry and keep the DNS record pointed at the host named by the certificate.
- After changing SPF, DKIM, or DMARC, verify the published records and inspect authentication results on a received test message.
- If a mailbox is used on more than one device, prefer IMAP so folder and read-state changes remain synchronized.
The dependable Outlook profile is therefore the one that mirrors Virtualmin’s current per-mailbox settings—not a universal recipe. When the hostname resolves, the certificate matches, the selected ports are reachable, and SMTP authentication is enabled, classic Outlook can use the VPS mailbox through a standard encrypted IMAP and submission configuration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
