Email Protection

In 2020, Microsoft will disable Basic Authentication (e.g. IMAP/POP) for Office 365 to address security concerns. Basic Authentication means that the client application passes the username and password with every request, which makes it easier for attackers to capture a user's credentials. Beginning on January 31, 2020, ITS will begin making configuration changes to improve Microsoft Office 365 email security.


1. Are there error messages that will help to identify if the problem with email is a POP/IMAP error?

Not typically. With the variety of Email applications that are available, we can’t always predict how a person’s device will react. But typically, expect to receive an error regarding the connection to yourUUID@memphis.edu. If you know your email password hasn’t changed, it’s possible that the process to download or view your email from the device has been affected. 

2. What email applications would you recommend I use?

Because the UofM uses Office 365 (a Microsoft product), we believe it’s best to use the latest app from the same vendor. Other apps may work but could become problematic without warning or an easily detectable cause. 
Some options:
• Outlook 2016 or later for Mac and PC
• Latest version of Outlook for iOS and Android
• Mail for iOS 11.3.1 or later

3. Are there applications that we know use POP/IMAP?

So far, we know that applications like Thunderbird use POP/IMAP to download or view mail. Any email client that only uses basic authentication will be affected. Older clients, like versions prior to Outlook 2016, or older Mac/IOS mail applications, may not be able to support modern authentication capabilities.

4. Could my Office 365 account be locked or negatively affected if I’m using POP/IMAP?

We don’t anticipate your Office 365 account being negatively affected. Once this enhancement is made active to your account, the two services simply won’t communicate. Therefore there is no sending of an expired or incorrect password that would lock your account.