Skip to content
  • Solutions
    By Role
    • For Developers
    • For Content Managers
    • For Agencies
    • For IT Admins
    • For Web Hosters
    • For Developers
    • For Content Managers
    • For Agencies
    • For IT Admins
    • For Web Hosters
    By Infrastructure
    • Overview
    • AWS
    • Microsoft Azure
    • Alibaba Cloud
    • Google Cloud Platform
    • Vultr
    • Overview
    • AWS
    • Microsoft Azure
    • Alibaba Cloud
    • Google Cloud Platform
    • Vultr
    • Digital Ocean
    • Linode
    • Upcloud
    • Oracle
    • OVH
    • Digital Ocean
    • Linode
    • Upcloud
    • Oracle
    • OVH
  • Product
    • Plesk Features
    • Plesk Editions
    • What’s new
    • Pricing
    • Roadmap
    • Lifecycle Policy
    • Extensions Catalogue
  • Pricing
  • Extensions
    Featured Extensions
    • SocialBee
    • WP Toolkit
    • Sitejet Builder for Plesk
    • SEO Toolkit
    • Joomla! Toolkit
    • Premium Email
    • Email Security
    • SocialBee
    • WP Toolkit
    • Sitejet Builder for Plesk
    • SEO Toolkit
    • Joomla! Toolkit
    • Premium Email
    • Email Security
    Bundles and packs:
    • Business and Collaboration Edition
    • WP pack
    • Hosting pack
    • Power pack
    • Language pack
    • Business and Collaboration Edition
    • WP pack
    • Hosting pack
    • Power pack
    • Language pack

    See all Extensions

  • For Partners
    • Plesk Contributor Program
    • Plesk Partner Program
    • Affiliate program
    • Plesk University
  • Help Center
    • Documentation
    • Professional Services
    • Support
    • Contact Us
    • Wiki
    • Forum
  • Plesk 360 login
  • Free Trial
  • Pricing
  • Solutions
    • By Role
      • For Developers
      • For Content Managers
      • For Agencies
      • For IT Admins
      • For Web Hosters
    • By Infrastructure
      • Overview
      • Plesk on Amazon Web Services (AWS & Lightsail)
      • Microsoft Azure
      • Alibaba Cloud
      • Google Cloud Platform
      • Vultr
      • DigitalOcean
      • Linode
      • UpCloud
      • Oracle
      • OVH
  • Products
  • Pricing
  • Extensions
    • Featured Extensions
      • SocialBee
      • WP Toolkit
      • Sitejet Builder for Plesk
      • SEO Toolkit
      • Joomla! Toolkit
      • Premium Email
      • Email Security
    • Bundles and packs:
      • Business and Collaboration Edition
      • WP pack
      • Hosting pack
      • Power pack
      • Language pack
      • See all Extensions
  • For Partners
    • Plesk Contributor Program
    • Plesk Partner Program
    • Affiliate Program
    • Plesk University
  • Help Center
    • Documentation
    • Professional Services
    • Support
    • Contact Us
    • Wiki
    • Forum
  • Plesk 360 login
  • Free Trial
  • Pricing
  • Solutions
    • By Role
      • For Developers
      • For Content Managers
      • For Agencies
      • For IT Admins
      • For Web Hosters
    • By Infrastructure
      • Overview
      • Plesk on Amazon Web Services (AWS & Lightsail)
      • Microsoft Azure
      • Alibaba Cloud
      • Google Cloud Platform
      • Vultr
      • DigitalOcean
      • Linode
      • UpCloud
      • Oracle
      • OVH
  • Products
  • Pricing
  • Extensions
    • Featured Extensions
      • SocialBee
      • WP Toolkit
      • Sitejet Builder for Plesk
      • SEO Toolkit
      • Joomla! Toolkit
      • Premium Email
      • Email Security
    • Bundles and packs:
      • Business and Collaboration Edition
      • WP pack
      • Hosting pack
      • Power pack
      • Language pack
      • See all Extensions
  • For Partners
    • Plesk Contributor Program
    • Plesk Partner Program
    • Affiliate Program
    • Plesk University
  • Help Center
    • Documentation
    • Professional Services
    • Support
    • Contact Us
    • Wiki
    • Forum
  • Plesk 360 login
  • Free Trial
Plesk 360 login
Free Trial

Knowledge Base

Protecting Webmail and Mail with SSL/TLS Certificates

 
customer guidesecuring connections with ssltls certificateswebsites and domainsdomain nameemail

When you use mail, bad actors can intercept, read, and tamper with your emails or email credentials,
compromising your confidential information. Get peace of mind by protecting mail connections with SSL/TLS certificates.
This topic explains which connections you need to secure and how to do it.

The path of an email from the sender to the recipient includes several points where it can be compromised.
SSL/TLS certificates protect sensitive data by encrypting connections.
To receive all-round protection when using mail,
you need to use SSL/TLS certificates to secure the whole mail transmission chain, which consists of the following:

  • The connection between a user’s browser and webmail running on a web server.
    For simplicity, we call it “securing webmail”.
  • The connection between the Plesk mail server and the sender’s MTA.
    For simplicity, we call it “securing the Plesk mail server”.

1 Securing Webmail

When you access your mailbox via webmail,
a connection between your browser and webmail running on a web server is established.
To protect transferred emails and email credentials from being compromised, webmail is by default secured
with the same self-signed SSL/TLS certificate Plesk is secured with.
The self-signed SSL/TLS certificate encrypts the transferred data
but each time you access your webmail you see a warning message about an untrusted SSL/TLS certificate.
To stop seeing this warning, secure webmail with a valid SSL/TLS certificate.

To secure webmail with an SSL/TLS certificate:

  1. Get a wildcard SSL/TLS certificate or a SAN certificate
    that allows to configure webmail.<domain> in SAN. You can do so by:

    • Getting a free wildcard certificate from Let’s Encrypt. If you go with this option, skip step 2.

    Note: We strongly recommend this option because one wildcard certificate protects all necessary mail connections.

    • Purchasing a certificate from a certificate authority.
    • Uploading the certificate you already own.
  2. Go to Mail > the “Mail Settings” tab, click the domain name, select the SSL/TLS certificate for webmail,
    and then click OK.

2 Securing the Mail Server in Plesk

Ask your hosting provider if…

Tweet
Share
Share
Email
0 Shares
Read the full article
Related Posts

Advanced Techniques for Building an Email List

Read More »

Next Level Ops Podcast: Working with Self-hosting Email with Christian Mollekopf

Read More »

Best Practices for Running Your Own Email Server

Read More »
Knowledge Base

Event Parameters Passed by Event Handlers – SSL/TLS certificate on mail server assigned/unassigned

Read More »

IIS Web Server Settings – Directory Security Settings

Read More »

IIS Web Server Settings – Common Settings

Read More »

Optimizing Apache Web Server – Setting Up the Apache Restart Interval

Read More »

Hosting Wiki

  • Server Redundancy
  • QMAIL
  • Sendmail
  • Bare Metal Server
  • Oracle VM Server
  • Server Virtualization Software
  • Windows Server
  • Domain
  • Hosting Control Panel
  • Plesk
  • Web Server
  • DNS Server
  • SSL
  • Colocation Hosting
  • Reseller Hosting
  • Cloud Hosting
  • VPS Hosting
  • Dedicated Hosting
  • Shared Hosting
  • Free Hosting
  • Managed Hosting
  • Email Autoresponder
  • Mailing Lists
  • Email Alias
  • Email Virus Protection
  • Email Forwarding
  • Webmail
X-twitter Linkedin Youtube Reddit Github
  • Product
  • Login
  • Pricing
  • Editions
  • For Partners
  • Partner Program
  • Contributor Program
  • Affiliate Program
  • Plesk University
  • Company
  • Blog
  • Careers
  • Events
  • About Plesk
  • Our Brand
  • Resources
  • User and Admin guides
  • Help Center
  • Migrate to Plesk
  • Contact Us
  • Hosting Wiki
  • Forum
  • Legal
  • Legal
  • Privacy Policy
  • Imprint

© 2025 WebPros International GmbH

Part of the WebPros®  Family