{"id":3285,"date":"2025-11-12T07:13:42","date_gmt":"2025-11-12T07:13:42","guid":{"rendered":"https:\/\/zapmail.ai\/blog\/?p=3285"},"modified":"2025-11-12T07:16:54","modified_gmt":"2025-11-12T07:16:54","slug":"office-365-smtp-settings-2","status":"publish","type":"post","link":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/","title":{"rendered":"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors"},"content":{"rendered":"\n<p><em>Seeing bounces or 5.7.x relay denied when you send from Microsoft 365? That usually means the send path is wrong or a required setting is missing.<\/em><\/p>\n\n\n\n<p>Microsoft 365 supports two ways to send mail. SMTP AUTH through smtp.office365.com, and SMTP relay through a connector. <\/p>\n\n\n\n<p>The right choice depends on your app or device, the mailbox you use, and your compliance needs.<\/p>\n\n\n\n<p>This guide explains the exact values for server, port, TLS, and authentication.&nbsp;<\/p>\n\n\n\n<p>It shows when to use SMTP AUTH or relay, the tenant limits that affect throughput, and the common error codes with fast fixes.&nbsp;<\/p>\n\n\n\n<p>If SMTP is not the right fit for your scenario, you will also see safer alternatives that keep delivery reliable and compliant.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Office_365_SMTP_POP3_and_IMAP_Settings_Receiving_vs_Sending\"><\/span><strong>Office 365 SMTP, POP3, and IMAP Settings (Receiving vs Sending)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Use SMTP for sending mail from apps\/services and IMAP\/POP3 for retrieving mail into clients.&nbsp;<\/p>\n\n\n\n<p>IMAP is the better choice for most users because it keeps mail and folders in sync across all devices.&nbsp;<\/p>\n\n\n\n<p>POP3 is fine for simple download-and-keep workflows.<\/p>\n\n\n\n<p>The core Office 365 SMTP settings handle outbound delivery, while IMAP (preferred) or POP3 let users read mail across devices.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Protocol<\/strong><\/td><td><strong>Purpose<\/strong><\/td><td><strong>Server<\/strong><\/td><td><strong>Port<\/strong><\/td><td><strong>Encryption<\/strong><\/td><\/tr><tr><td>SMTP<\/td><td>Sending<\/td><td>smtp.office365.com<\/td><td><strong>587<\/strong> (STARTTLS)<\/td><td>STARTTLS<\/td><\/tr><tr><td>IMAP<\/td><td>Receiving<\/td><td>outlook.office365.com<\/td><td><strong>993<\/strong><\/td><td>SSL\/TLS<\/td><\/tr><tr><td>POP3<\/td><td>Receiving<\/td><td>outlook.office365.com<\/td><td><strong>995<\/strong><\/td><td>SSL\/TLS<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><strong>Imp Notes<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SMTP is for sending from apps and services. Use smtp.office365.com on port 587 with STARTTLS and OAuth2.<br><\/li>\n\n\n\n<li>IMAP or POP3 are for receiving in mail clients. Choose IMAP if you read mail on more than one device because it keeps folders in sync.<br><\/li>\n\n\n\n<li>Modern authentication with OAuth2 is recommended. Basic authentication may be turned off by your organization.<br><\/li>\n\n\n\n<li>If a device cannot sign in, set up SMTP relay with an Exchange Online connector on port 25 and allow only your approved public IP addresses.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Office_365_SMTP_Relay_vs_Direct_SMTP_Auth_Key_Differences_Limits\"><\/span><strong>Office 365 SMTP Relay vs Direct SMTP Auth: Key Differences &amp; Limits<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Direct SMTP authentication uses smtp.office365.com on port 587 with STARTTLS and OAuth2. Choose this when your app can sign in.&nbsp;<\/p>\n\n\n\n<p>SMTP relay through an Exchange Online connector on port 25 works for printers and other devices that cannot authenticate but send from trusted public IP addresses.&nbsp;<\/p>\n\n\n\n<p>SMTP AUTH sends as the mailbox that signs in or one of its aliases, while relay can send for any accepted domain in your tenant.<\/p>\n\n\n\n<p>Both options follow Exchange Online limits, roughly ten thousand recipients per mailbox per day and up to five hundred recipients per message.&nbsp;<\/p>\n\n\n\n<p>Pick based on whether your sender can authenticate and how much control you have over the network. <\/p>\n\n\n\n<p>Keep your settings consistent for good deliverability, watch for throttling or temporary delays, and add simple retry logic to stay within policy.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Feature<\/strong><\/td><td><strong>Direct SMTP Auth (Client Submission)<\/strong><\/td><td><strong>Office 365 SMTP Relay (Connector)<\/strong><\/td><\/tr><tr><td><strong>Authentication<\/strong><\/td><td>Mailbox sign-in (password or OAuth2\/Modern Auth)<\/td><td>IP-based,no mailbox login<\/td><\/tr><tr><td><strong>Typical use<\/strong><\/td><td>Apps: Outlook, WordPress, CRMs, ZapMail<\/td><td>Devices: copiers\/scanners, legacy servers<\/td><\/tr><tr><td><strong>Port &amp; Security<\/strong><\/td><td><strong>587<\/strong> with STARTTLS (core <strong>Office 365 SMTP settings<\/strong>)<\/td><td><strong>25<\/strong> with TLS (as available)<\/td><\/tr><tr><td><strong>Setup<\/strong><\/td><td>Client-side configuration<\/td><td>Admin-created connector + approved IP(s)<\/td><\/tr><tr><td><strong>Identities (From:)<\/strong><\/td><td>Send as \/ Send on behalf (with permissions)<\/td><td>Any accepted domain per connector policy<\/td><\/tr><tr><td><strong>Limits\/Throttling<\/strong><\/td><td><strong>30 messages\/min<\/strong>, <strong>10,000 recipients\/day<\/strong>, <strong>recipient limit up to 1,000<\/strong> (default often 500).<\/td><td><strong>Not bound<\/strong> by 30\/min or 10k\/day, throughput is policy\/reputation-based (\u201creasonable limits\u201d) on connector\/IP.&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Configure_Office_365_SMTP_Settings_Step-by-Step\"><\/span><strong>How to Configure Office 365 SMTP Settings (Step-by-Step)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 1 Sign in to Microsoft 365 admin center<\/strong><\/h3>\n\n\n\n<p>Use an account with Global or Exchange admin rights. Confirm the sender mailbox is licensed and not blocked.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 2 Open the mailbox settings<\/strong><\/h3>\n\n\n\n<p>Go to Users then Active users. Select the mailbox. Open Mail and choose Manage email apps. This page controls protocol access for the user, including SMTP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"646\" src=\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-1024x646.png\" alt=\"How to configure Office 365 SMTP settings\" class=\"wp-image-3288\" srcset=\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-1024x646.png 1024w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-300x189.png 300w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-768x484.png 768w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-1536x969.png 1536w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-512x323.png 512w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84-920x580.png 920w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-84.png 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 3 Enable Authenticated SMTP<\/strong><\/h3>\n\n\n\n<p>Turn on Authenticated SMTP and save. <\/p>\n\n\n\n<p>If your organization has SMTP AUTH turned off globally, enabling it here allows it for this one mailbox.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 4 Configure your app or client<\/strong><\/h3>\n\n\n\n<p>Set the server to smtp.office365.com. <\/p>\n\n\n\n<p>Use port 587. Turn on STARTTLS. Require authentication. <\/p>\n\n\n\n<p>Use the full email address as the username. <\/p>\n\n\n\n<p>Use the account password or an app password when multifactor is on. Prefer OAuth2 when the client supports it. <\/p>\n\n\n\n<p>Make sure the From address is the mailbox itself or that you have Send As permission.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 5 Send a test message<\/strong><\/h3>\n\n\n\n<p>Send to one internal and one external address. <\/p>\n\n\n\n<p>If delivery fails, check the port and TLS setting, the username and password, the SMTP AUTH toggle for the mailbox, and any tenant policies that might override client settings. <\/p>\n\n\n\n<p>Use SMTP relay with a connector only for devices that cannot authenticate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Configure_Office_365_SMTP_Relay_in_Admin_Center_With_Connector_Setup\"><\/span><strong>How to Configure Office 365 SMTP Relay in Admin Center (With Connector Setup)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 1: Open Exchange admin center<\/strong><\/h3>\n\n\n\n<p>In the Exchange admin center, go to Mail flow, then Connectors, and choose Add to create a new connector for relay.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 2: Define the direction<\/strong><\/h3>\n\n\n\n<p>Set From to Your organization\u2019s email server and To to Office 365. <\/p>\n\n\n\n<p>This creates an inbound connector so Microsoft 365 will accept mail from your devices or apps.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 3: Allow only trusted IP addresses<\/strong><\/h3>\n\n\n\n<p>Choose verification by sender IP address and enter only your static public IPs. <\/p>\n\n\n\n<p>Avoid ranges you do not control. Relay should be limited to known sources.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 4: Choose TLS behavior<\/strong><\/h3>\n\n\n\n<p>If your device or app supports TLS, enable it for the connector. <\/p>\n\n\n\n<p>For older hardware, keep TLS opportunistic and leave Reject if TLS fails unchecked to prevent avoidable failures.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Step 5: Scope and enable the connector<\/strong><\/h3>\n\n\n\n<p>Optionally limit the connector to specific accepted domains. <\/p>\n\n\n\n<p>Give it a clear name such as Printer Scanner Relay HQ IP, switch it on, and save.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Test the relay<\/h3>\n\n\n\n<p>Send a message from a device using your domain\u2019s MX host on port 25 without authentication. <\/p>\n\n\n\n<p>Then use Message trace to confirm the message flowed through the connector.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Which_Port_Should_You_Use_25_vs_587_in_Office_365_SMTP\"><\/span><strong>Which Port Should You Use: 25 vs 587 in Office 365 SMTP?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Use <strong>port 587<\/strong> in most cases because your app can sign in with <strong>modern authentication<\/strong> and <strong>STARTTLS<\/strong>, and it is the default in <strong>Microsoft 365<\/strong>. <\/p>\n\n\n\n<p>Use <strong>port 25<\/strong> only when you create an <strong>Exchange Online connector<\/strong> for <strong>SMTP relay<\/strong> from a fixed, <strong>trusted public IP<\/strong> such as a printer or scanner on your network. <\/p>\n\n\n\n<p>If your provider blocks <strong>port 25<\/strong>, choose <strong>587<\/strong>. <\/p>\n\n\n\n<p>If a device <strong>cannot authenticate<\/strong>, use <strong>port 25<\/strong> with a <strong>tightly scoped connector<\/strong>. <\/p>\n\n\n\n<p>For <strong>campaigns<\/strong> or <strong>app driven<\/strong> sending, <strong>587<\/strong>provides <strong>mailbox level auditing<\/strong> and gentler <strong>throttling<\/strong>. <strong>Port 465 is not supported.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Port<\/strong><\/td><td><strong>Usage<\/strong><\/td><td><strong>Authorisation Required<\/strong><\/td><td><strong>Notes<\/strong><\/td><\/tr><tr><td><strong>587<\/strong><\/td><td>SMTP AUTH (client submission)<\/td><td><strong>Yes<\/strong><\/td><td>Requires <strong>STARTTLS<\/strong>; best for apps\/clients; aligns with Modern Auth.<\/td><\/tr><tr><td><strong>25<\/strong><\/td><td><strong>office365 smtp relay<\/strong>(connector)<\/td><td><strong>No<\/strong><\/td><td>For trusted static IPs; opportunistic TLS; often blocked by ISPs\/hosts.<\/td><\/tr><tr><td><strong>465<\/strong><\/td><td>Deprecated<\/td><td>\u2014<\/td><td>Not supported by Exchange Online.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Common_Office_365_SMTP_Errors_and_Fixes_Auth_Relay_Spam_Firewall\"><\/span><strong>Common Office 365 SMTP Errors and Fixes (Auth, Relay, Spam, Firewall)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Authentication failed (535 5.7.139)<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Turn on Authenticated SMTP for the mailbox. Use smtp.office365.com on port 587 with STARTTLS. Sign in with OAuth2. <\/p>\n\n\n\n<p>If multifactor is required and the client cannot use OAuth2, use an app password only if your policy allows it.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Relay not allowed (550 5.7.1)<\/strong><\/li>\n<\/ul>\n\n\n\n<p>If the device cannot sign in, create an inbound connector for your static public IPs and send through your domain\u2019s MX on port 25. <\/p>\n\n\n\n<p>If the app can sign in, use SMTP AUTH on port 587. <\/p>\n\n\n\n<p>Make sure the sender\u2019s domain is an accepted domain in your tenant.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Messages going to spam<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Publish SPF with include:spf.protection.outlook.com. <\/p>\n\n\n\n<p>Enable DKIM in Exchange Online. Add a DMARC record and align the From and DKIM domains. <\/p>\n\n\n\n<p>Increase send volume gradually and keep lists clean and content consistent.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Connection timeout or connection refused<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Allow outbound connections to smtp.office365.com on port 587 and keep STARTTLS enabled. <\/p>\n\n\n\n<p>Open port 25 only for connector based relay. <\/p>\n\n\n\n<p>Exclude SMTP traffic from TLS inspection and check that the firewall is not blocking Microsoft 365 endpoints.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>MFA conflicts or Basic Authentication blocked<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Move the client to OAuth2 (XOAUTH2). <\/p>\n\n\n\n<p>Avoid Basic Authentication. Use app passwords only as a temporary fallback when permitted by policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Security_and_Compliance_Checklist_for_Office_365_SMTP_Relay\"><\/span><strong>Security and Compliance Checklist for Office 365 SMTP &amp; Relay<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Use this checklist to secure Microsoft 365 SMTP and relay, meet compliance requirements, and keep mail flowing reliably.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enforce TLS Everywhere<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Require <strong>STARTTLS (TLS 1.2+)<\/strong> on port <strong>587<\/strong>; disable legacy ciphers\/protocols. A<\/p>\n\n\n\n<p>void port 465 (unsupported in Exchange Online).<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Prefer OAuth2 (Modern Auth)<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Block <strong>Basic Auth<\/strong> tenant-wide. Use <strong>XOAUTH2<\/strong> with Conditional Access\/MFA and rotate client secrets or certificates regularly.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Publish SPF, Enable DKIM, Align DMARC<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Include Microsoft 365 in <strong>SPF<\/strong>, turn on <strong>DKIM<\/strong> in EAC, and set <strong>DMARC<\/strong> to p=quarantine\/reject with reporting to keep alignment tight.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Restrict Relay by IP (Connector)<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Scope <strong>office365 smtp relay<\/strong> to <strong>static, trusted IPs<\/strong> and accepted domains only; no credentials on devices, and monitor connector usage.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Harden Identities &amp; Permissions<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Grant least-privilege <strong>Send As\/On Behalf<\/strong>; avoid shared credentials. <\/p>\n\n\n\n<p>Use dedicated mailboxes\/service principals for apps; app passwords only if policy permits.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Monitor and Alert<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Track failed SMTP logins, connector hits, and throttling via <strong>Message trace<\/strong> and sign-in logs; set alerts in Purview\/Defender for anomalies.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Secure Endpoints<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Allow outbound to smtp.office365.com:587; don\u2019t break TLS with interception; log client\/device versions and enforce patch baselines.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Document and Review<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Record your <strong>Office 365 SMTP settings<\/strong>, connector scopes, and secret\/certificate rotations. Run quarterly control reviews and change-control audits.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Office_365_SMTP_Sending_Limits_You_Must_Know\"><\/span><strong>Office 365 SMTP Sending Limits You Must Know<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Use this checklist to lock down SMTP AUTH and connector-based relay in Microsoft 365 while staying compliant and keeping mail flowing.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Daily sending caps<\/li>\n<\/ul>\n\n\n\n<p>You can send to up to 10,000 recipients per mailbox in any 24-hour period. <\/p>\n\n\n\n<p>Microsoft may also slow delivery to about 30 messages per minute.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Recipient limits per message<\/li>\n<\/ul>\n\n\n\n<p>Each email can include up to 500 recipients across To, Cc, and Bcc. <\/p>\n\n\n\n<p>A distribution list counts as all of its members.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Relay connector restrictions<\/li>\n<\/ul>\n\n\n\n<p>Office 365 SMTP relay on port 25 uses your public IP for trust instead of a mailbox sign-in. <\/p>\n\n\n\n<p>Limit it to static trusted IPs and to accepted domains in your tenant. <\/p>\n\n\n\n<p>Throughput depends on tenant policy and sender reputation, and some providers block port 25.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Workarounds for scale and reliability<\/li>\n<\/ul>\n\n\n\n<p>For higher volume or cold outreach, use ZapMail for pacing, warm-up, and reporting, or a dedicated email service such as SendGrid or Amazon SES. <\/p>\n\n\n\n<p>Improve consistency by adjusting send cadence, segmenting lists, and splitting traffic so transactional mail stays on Microsoft 365 and campaigns go through the ESP.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Zapmail_An_Outreach-Focused_Alternative_to_Office_365_SMTP_Relay\"><\/span><strong>Zapmail: An Outreach-Focused Alternative to Office 365 SMTP Relay<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>ZapMail is built for campaigns and cold outreach, so it takes over when Microsoft 365 limits and basic relay controls start to get in the way.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"468\" src=\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-1024x468.png\" alt=\"Zapmail Homepage\" class=\"wp-image-3289\" srcset=\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-1024x468.png 1024w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-300x137.png 300w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-768x351.png 768w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-1536x702.png 1536w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-512x234.png 512w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85-920x420.png 920w, https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/10\/image-85.png 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">When to use ZapMail<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>High-volume or cold outreach when Exchange Online limits get in the way<br><\/li>\n\n\n\n<li>Campaigns that need precise pacing, scheduling, and segmentation<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Why it\u2019s better for outreach<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Scalable sending with queueing, throttling, and automatic warm up to protect reputation<br><\/li>\n\n\n\n<li>Deliverability tools for bounces, complaints, suppression lists, and open\/click tracking<br><\/li>\n\n\n\n<li>Analytics with campaign-level metrics to refine content, timing, and list hygiene<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">How it fits with Office 365<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Send through SMTP AUTH on port 587 with STARTTLS and OAuth2, or use ZapMail as the <br><br>primary ESP while Microsoft 365 handles everyday mail<br><\/li>\n\n\n\n<li>Keep printers and other devices on Microsoft 365 relay over port 25<br><\/li>\n\n\n\n<li>Route campaigns and large-scale transactional mail through ZapMail<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Office 365 SMTP Relay vs Zapmail for Cold Outreach (Quick Comparison)<\/strong><\/h3>\n\n\n\n<p>Cold outreach quickly runs into <strong>Office 365 SMTP relay<\/strong> constraints, IP-based on port 25, ISP blocks, anti-abuse throttling, and no built-in warm-up or analytics. <\/p>\n\n\n\n<p>These limits raise spam risk and make pacing, segmentation, and proof of performance hard. <\/p>\n\n\n\n<p><a href=\"https:\/\/zapmail.ai\/#pricing\"><strong>ZapMail<\/strong><\/a> is purpose-built for outreach: OAuth2 SMTP on 587, send pacing, automated warm-up, suppression, and campaign-level reporting. <\/p>\n\n\n\n<p>In short, keep devices on relay, but route cold campaigns through ZapMail for scale and deliverability.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Feature<\/strong><\/td><td><strong>Office 365 SMTP Relay<\/strong><\/td><td><strong>ZapMail<\/strong><\/td><\/tr><tr><td><strong>Sending limits<\/strong><\/td><td><strong>10,000 recipients\/day per Microsoft 365 mailbox<\/strong> (and ~<strong>30 messages\/min<\/strong> for SMTP AUTH; recipient limit commonly <strong>500\u20131,000\/message<\/strong>)<\/td><td>Sending limits are set per mailbox by the provider. Microsoft 365 allows about <strong>10,000 recipients per day and may pace delivery to around 30 messages a minute.<\/strong> Google Workspace allows about 2,000 recipients per day. Capacity grows with the number of mailboxes, so twenty Microsoft 365 mailboxes can reach roughly two hundred thousand recipients in a day.<\/td><\/tr><tr><td><strong>Authentication<\/strong><\/td><td>Basic \/ IP-based<\/td><td><strong>OAuth2-ready<\/strong><\/td><\/tr><tr><td><strong>Deliverability<\/strong><\/td><td>Depends on DNS (SPF\/DKIM\/DMARC)<\/td><td>Optimized warm-up + tracking<\/td><\/tr><tr><td><strong>Use case<\/strong><\/td><td>Devices, small orgs<\/td><td>Cold outreach, campaigns, transactional<\/td><\/tr><tr><td><strong>Integration<\/strong><\/td><td>Microsoft ecosystem<\/td><td>Microsoft + multi-platform<\/td><\/tr><tr><td><strong>Cost<\/strong><\/td><td>Included in O365 plan<\/td><td>Affordable SaaS pricing<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span><strong>Conclusion<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Microsoft 365 can be a dependable mail backbone when it is set up with care. <\/p>\n\n\n\n<p>For app driven sending, sign in with SMTP AUTH on port 587 to smtp.office365.com.\u00a0<\/p>\n\n\n\n<p>Turn on STARTTLS and use OAuth2. Align SPF, DKIM, and DMARC so messages reach the inbox.<\/p>\n\n\n\n<p>Use SMTP AUTH for software that can log in. Use a connector that trusts only your public IPs for printers and other devices. <\/p>\n\n\n\n<p>Avoid running campaigns over relay. For cold outreach, add ZapMail to handle warm up, pacing, reputation, and analytics while Microsoft 365 manages core delivery. <\/p>\n\n\n\n<p>This mix gives you reliable results with clear control.<\/p>\n\n\n\n<p><strong>Get started with <\/strong><a href=\"https:\/\/zapmail.ai\/\"><strong>ZapMail<\/strong> <\/a>to build a durable cold email infrastructure alongside your Office 365 setup.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"FAQs\"><\/span><strong>FAQs<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Q1 What are the Office 365 SMTP settings?<\/h3>\n\n\n\n<p>Use smtp.office365.com on port 587 with STARTTLS and authentication. Prefer OAuth2.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Q2 Should I use port 25 or 587?<\/h3>\n\n\n\n<p>Use port 587 for SMTP AUTH. Use port 25 only for Office 365 SMTP relay through a connector.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Q3 How do I enable Authenticated SMTP?<\/h3>\n\n\n\n<p>In the Microsoft 365 admin center, go to Users then Active users. Select the mailbox. Open Mail then Manage email apps. Turn on Authenticated SMTP and save. If the option is missing, enable it at the tenant level first.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Q4 Does Office 365 allow SMTP relay?<\/h3>\n\n\n\n<p>Yes. Create an Exchange Online connector and restrict it to your trusted public IP addresses.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Q5 Why are my emails going to spam?<\/h3>\n\n\n\n<p>Common causes include missing or misaligned SPF, DKIM, or DMARC, a weak sender reputation from sudden volume or poor list hygiene, and message or link content that triggers filters.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Q6 Is Office 365 SMTP secure enough for bulk sending?<\/h3>\n\n\n\n<p>Security is strong with TLS and OAuth2, but volume is limited. For higher scale, use ZapMail or a dedicated email service provider to manage pacing, reputation, and reporting.<\/p>\n","protected":false},"excerpt":{"rendered":"Seeing bounces or 5.7.x relay denied when you send from Microsoft 365? That usually means the send path&hellip;","protected":false},"author":2,"featured_media":3312,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_display_header_overlay":false,"csco_singular_sidebar":"","csco_page_header_type":"","footnotes":""},"categories":[133],"tags":[],"class_list":{"0":"post-3285","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cold-email","8":"cs-entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors<\/title>\n<meta name=\"description\" content=\"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors\" \/>\n<meta property=\"og:description\" content=\"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Affordable Google Workspace Solutions with Zapmail\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-12T07:13:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-12T07:16:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1237\" \/>\n\t<meta property=\"og:image:height\" content=\"694\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alan Dsouza\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alan Dsouza\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/\",\"url\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/\",\"name\":\"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors\",\"isPartOf\":{\"@id\":\"https:\/\/zapmail.ai\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png\",\"datePublished\":\"2025-11-12T07:13:42+00:00\",\"dateModified\":\"2025-11-12T07:16:54+00:00\",\"author\":{\"@id\":\"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/ed80921a0603baf5439b5c666a2ab0a8\"},\"description\":\"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.\",\"breadcrumb\":{\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage\",\"url\":\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png\",\"contentUrl\":\"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png\",\"width\":1237,\"height\":694,\"caption\":\"Office 365 SMTP\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/zapmail.ai\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cold Email\",\"item\":\"https:\/\/zapmail.ai\/blog\/category\/cold-email\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/zapmail.ai\/blog\/#website\",\"url\":\"https:\/\/zapmail.ai\/blog\/\",\"name\":\"Affordable Google Workspace Solutions with Zapmail\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/zapmail.ai\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/ed80921a0603baf5439b5c666a2ab0a8\",\"name\":\"Alan Dsouza\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d06e2beaae75bf7a2314be6d07d42dc916abeb65d4489b22636afc6436d3929c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d06e2beaae75bf7a2314be6d07d42dc916abeb65d4489b22636afc6436d3929c?s=96&d=mm&r=g\",\"caption\":\"Alan Dsouza\"},\"url\":\"https:\/\/zapmail.ai\/blog\/author\/alan-dsouza\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors","description":"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/","og_locale":"en_US","og_type":"article","og_title":"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors","og_description":"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.","og_url":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/","og_site_name":"Affordable Google Workspace Solutions with Zapmail","article_published_time":"2025-11-12T07:13:42+00:00","article_modified_time":"2025-11-12T07:16:54+00:00","og_image":[{"width":1237,"height":694,"url":"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png","type":"image\/png"}],"author":"Alan Dsouza","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alan Dsouza","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/","url":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/","name":"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors","isPartOf":{"@id":"https:\/\/zapmail.ai\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage"},"image":{"@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage"},"thumbnailUrl":"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png","datePublished":"2025-11-12T07:13:42+00:00","dateModified":"2025-11-12T07:16:54+00:00","author":{"@id":"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/ed80921a0603baf5439b5c666a2ab0a8"},"description":"Office 365 SMTP settings explained: exact server, port 587, STARTTLS, OAuth2. Fix 5.7.x errors, know limits, set up office365 smtp relay, and safer options.","breadcrumb":{"@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#primaryimage","url":"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png","contentUrl":"https:\/\/zapmail.ai\/wp-content\/uploads\/2025\/11\/Office-365-SMTP.png","width":1237,"height":694,"caption":"Office 365 SMTP"},{"@type":"BreadcrumbList","@id":"https:\/\/zapmail.ai\/blog\/office-365-smtp-settings-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zapmail.ai\/blog\/"},{"@type":"ListItem","position":2,"name":"Cold Email","item":"https:\/\/zapmail.ai\/blog\/category\/cold-email\/"},{"@type":"ListItem","position":3,"name":"Office 365 SMTP Settings (Updated): Setup, Limits, &amp; Errors"}]},{"@type":"WebSite","@id":"https:\/\/zapmail.ai\/blog\/#website","url":"https:\/\/zapmail.ai\/blog\/","name":"Affordable Google Workspace Solutions with Zapmail","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zapmail.ai\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/ed80921a0603baf5439b5c666a2ab0a8","name":"Alan Dsouza","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zapmail.ai\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d06e2beaae75bf7a2314be6d07d42dc916abeb65d4489b22636afc6436d3929c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d06e2beaae75bf7a2314be6d07d42dc916abeb65d4489b22636afc6436d3929c?s=96&d=mm&r=g","caption":"Alan Dsouza"},"url":"https:\/\/zapmail.ai\/blog\/author\/alan-dsouza\/"}]}},"_links":{"self":[{"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/posts\/3285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/comments?post=3285"}],"version-history":[{"count":2,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/posts\/3285\/revisions"}],"predecessor-version":[{"id":3313,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/posts\/3285\/revisions\/3313"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/media\/3312"}],"wp:attachment":[{"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/media?parent=3285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/categories?post=3285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zapmail.ai\/blog\/wp-json\/wp\/v2\/tags?post=3285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}