check before: 2026-06-29
Product:
Exchange
Platform:
Online, World tenant
Status:
Change type:
User impact, Admin impact, Retirement
Links:
Details:
Summary:
Exchange Online will retire support for legacy TLS 1.0 and 1.1 on POP3 and IMAP4 connections between July 1 and December 31, 2026. Connections must use TLS 1.2 or later; legacy clients may fail. Organizations should ensure all email clients and systems support TLS 1.2+ and update if needed.
Details:
[Introduction]
We are retiring support for legacy Transport Layer Security (TLS) versions for POP3 and IMAP4 connections to Exchange Online. This change improves security and aligns with current industry standards. TLS 1.0 and TLS 1.1 are no longer considered secure. Most modern email clients already use TLS 1.2 or later.
[When this will happen]
Rollout start: July 1, 2026
Rollout end: December 31, 2026
The rollout will occur gradually worldwide.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-04-28
updated:
2026-04-28
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Connection Failures
Legacy email clients using TLS 1.0 or 1.1 will fail to connect to Exchange Online, disrupting email access for users.
- roles: Email Administrators, End Users
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-pop3-or-imap4
Increased Support Requests
Helpdesk teams may experience a surge in support requests from users unable to connect due to outdated email clients.
- roles: Helpdesk Support, IT Operations
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-pop3-or-imap4
Operational Disruption
Admins may face operational disruptions as they scramble to update or replace legacy systems that do not support TLS 1.2.
- roles: System Administrators, IT Managers
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-pop3-or-imap4
Compliance Risks
Failure to update systems may lead to compliance risks if email communications are disrupted, affecting business operations.
- roles: Compliance Officers, IT Security
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-pop3-or-imap4
User Experience Degradation
Users relying on legacy email clients will experience degraded user experience due to inability to access emails, impacting productivity.
- roles: End Users, Email Administrators
- references: https://learn.microsoft.com/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-pop3-or-imap4
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 weeks ago ago
