Port587— SMTP submission / STARTTLS
Port 587 is for message submission, commonly from a mail client to its provider. Distinguish it from server-to-server relay on port 25.
Registry assignments, software defaults and local listeners are different things. A port number alone does not identify or secure a service.
Configuration and troubleshooting
Use the provider-required STARTTLS and authentication settings. STARTTLS upgrades the SMTP session, unlike implicit TLS on 465.
Important limitations
A port number does not enforce encryption. If TLS negotiation fails, fix the configuration instead of falling back to cleartext passwords.
Read-only checks: run on the server host
Choose the commands for your OS. Check TCP and UDP separately. No result is not a lasting availability guarantee; inspect host and container separately.
Linux
sudo ss -ltnp 'sport = :587'macOS
sudo lsof -nP -iTCP:587 -sTCP:LISTENWindows PowerShell
Get-NetTCPConnection -LocalPort 587 -State ListenSources and review
Sources checked on:
This review covers the explanations and sources on this page, not your device or every community software entry below.
Software Using This Port (3 software)
Community software entries: links are references, not individual verification.
Usage Suggestions
- Before using port 587, please confirm it is not occupied by other services
- If you encounter port conflicts, consider using other ports or stopping the occupying service
Frequently asked questions
What is port 587 used for?
Port 587 sits in the Email & Messaging category. This page lists the registered purpose and the software commonly associated with it; to see what is actually listening on a specific machine, check the process with ss/netstat.
Is port 587 TCP or UDP?
The registered protocol on this page is TCP. The same number behaves independently on each protocol: TCP may be listening while UDP is idle, so check them separately.
How do I check if port 587 is in use?
On Linux: sudo ss -tlnp 'sport = :587' for an exact port match. On macOS: sudo lsof -nP -iTCP:587 -sTCP:LISTEN. On Windows PowerShell: Get-NetTCPConnection -LocalPort 587 -State Listen. A listener counts as confirmed only when you can see the bind address and process name; without root/admin you will not see other users' processes.
Is port 587 secure? Should I open it in my firewall?
A port number has no inherent security — it depends on whether the listening service is correctly configured and whether it needs exposure at all. Keep loopback/internal-only services firewalled; where public access is required, pair it with source restrictions, VPN or authentication. The caution section on this page lists port-specific risks.
Quick Info
- Port
- 587
- Protocol
- TCP
- Categories
- Email & Messaging
- Usage Status
- 3 software in use
Related Ports
Need Help?
If you find incorrect information or need to add more, please submit correction information.
Submit Correction