Türkticaret Webmail Guide: Login, IMAP/SMTP Setup and Mail Management (2026)

Türkticaret webmail is the browser-based interface for the corporate email service offered by one of Turkey's longest-established hosting and domain providers. You can reach corporate mailboxes that run on your own domain from any computer, phone, or tablet through https://webmail.turkticaret.net, and you can also connect the same account through IMAP, POP3, or Exchange protocols to clients such as Outlook, Thunderbird, Apple Mail, the Gmail app, or the provider's official mobile application. This guide gathers everything first-time users and IT administrators responsible for managing multiple domain-bound mailboxes need to know in a single article.

The three most common search queries — türkticaret webmail, türk ticaret net mail, and türkticaret mail giriş — are really the same infrastructure searched under different names. The provider has positioned itself since 1999 as Turkey's leading hosting and domain company; all email data stays inside the country and the service comes with 24/7 support. Throughout this article we will refer to the platform as türkticaret, but every protocol, setting, and hardening step described here applies in essentially the same form to other corporate email providers — so you can read this guide as a vendor-neutral knowledge base.

Related guides: Corporate email address guide · Mail server setup guide · Mail hosting guide 2026 · DNS settings · Plesk panel management · cPanel usage guide

What Is Türkticaret Webmail and What Software Powers It?

Webmail is a web application that connects to the server over IMAP or POP3 but hides that fact from the user, offering a classic email client experience inside the browser. The webmail interface used on the Türkticaret side resembles a structure derived from the Roundcube family widely used in the open-source world: inbox/outbox, the folder tree, the tag system, calendar, contacts, and identity menus all sit in their familiar places. So if you are coming from another Roundcube-based deployment, the learning curve is essentially zero.

Browser-based access provides three important advantages: it requires no installation, it can be opened from any device, and security is centrally managed on the server side. But webmail alone is not enough — real productivity comes from setting up an IMAP client on desktop and mobile. Below we walk through both webmail and IMAP/SMTP configuration step by step. If you want to dive deeper into the fundamentals of corporate email infrastructure, our Mail server setup guide is a complementary resource.

Türkticaret Mail Login: Step-by-Step Webmail Access

Before you sign in to webmail you need two pieces of information: your full email address (in the form name@yourcompany.com.tr) and the password set for the account. You must enter the username always as the full email address, not just name; this is required so that the server knows which domain's user it is authenticating.

• Open your browser and type https://webmail.turkticaret.net into the address bar. Make sure the URL starts with https:// — never sign in over plain HTTP.
• Type your full email address: you@yourcompany.com.tr or you@yourcompany.com. Just typing you will fail.
• Enter your password. Make sure Caps Lock is off; on a Turkish keyboard the difference between I and İ can break your password.
• Click Sign in. A successful login redirects you to your inbox.
• On first login: Open Settings → Preferences from the top-right menu and verify the interface language, time zone (Europe/Istanbul), and the read-receipt timing.

If the login screen shows username or password is incorrect, the problem is rarely the password — it is usually that only the local-part (you) was typed into the username field. Try the full email address. If it still fails, ask the domain owner to verify that your account is still active, that you are not over quota, and that the domain's MX record points to the correct server. Our DNS settings guide can help here.

IMAP, POP3, and SMTP Server Addresses

To connect the account from a client other than the browser (Outlook, Thunderbird, Apple Mail, the Gmail app, K-9 Mail, etc.) you need to enter the protocol-port-encryption triplet correctly. The valid settings on Türkticaret are:

• IMAP (incoming server): imap.turkticaret.net, port 993, encryption SSL/TLS
• POP3 (incoming server): pop.turkticaret.net, port 995, encryption SSL/TLS
• SMTP (outgoing server): smtp.turkticaret.net, port 465, encryption SSL/TLS
• SMTP submission alternative: port 587, encryption STARTTLS
• Username: always the full email address
• Authentication: required for the outgoing server too; check the Use the same settings as the incoming server option

IMAP or POP3? For multi-device users the answer is clear: IMAP. POP3 is an older protocol that downloads mail from the server, deletes the original by default, and offers no folder synchronization. IMAP keeps mail on the server, syncs folders across all devices, and is typically more bandwidth-efficient. For a technical comparison, read the relevant section of our Mail hosting guide 2026.

Which Port Do I Lose If I Block It?

Some workplaces and carrier networks block certain ports as part of an egress security policy. The list below helps you decide:

• Port 110 (POP3 plain): unencrypted; never use it. Most modern providers have already closed this port.
• Port 143 (IMAP plain): unencrypted; should not be used either. Even with STARTTLS, 993 is more widely accepted.
• Port 25: the SMTP relay port; almost every home/office ISP blocks it as a spam-prevention measure. Use 465 or 587 to send mail.
• Port 465 (SMTPS): implicit TLS; the most compatible choice.
• Port 587 (Submission + STARTTLS): the user submission port defined by RFC 6409; preferred in modern clients.

Step-by-Step Setup on Outlook 2019/2021/365

The cleanest setup path for Outlook is to disable autodiscover and enter the settings manually. Autodiscover sometimes spins for minutes and produces incorrect settings when it cannot find a generic autodiscover.yourcompany.com CNAME.

• Open File → Add Account.
• Enter your email address, expand Advanced options, and check Let me set up my account manually.
• Choose IMAP as the account type (instead of POP3).
• For the incoming server enter imap.turkticaret.net, port 993, encryption SSL/TLS.
• For the outgoing server enter smtp.turkticaret.net, port 465, encryption SSL/TLS.
• Enter the password and click Next; the initial sync may take 1-3 minutes.

Common Outlook errors: 0x800CCC0E means SMTP cannot connect; the fix is usually to check authentication required for the outgoing server. 0x800CCC92 is an authorization rejection; make sure you entered the full email address as the username.

Setup with Thunderbird

Mozilla Thunderbird is a free and open-source email client that runs on Windows, macOS, and Linux. It uses far fewer resources than Outlook, and OAuth2 support has matured in recent versions. Adding a Türkticaret account takes less than two minutes.

• Click Account Settings → Account Actions → Add Mail Account.
• Enter your name, email address, and password; click Configure manually.
• Incoming: IMAP, imap.turkticaret.net, 993, SSL/TLS, Normal password (PLAIN).
• Outgoing: smtp.turkticaret.net, 465, SSL/TLS, Normal password.
• Type the full email address as the username and click Re-test; if you see green check marks, click Done.

Thunderbird's Filelink feature can automatically convert attachments larger than 25 MB into cloud links. Likewise, instead of bcc-ing yourself, configure the client to keep a copy in the server-side Sent folder — because IMAP syncs, the copy will already appear on every device.

Apple Mail (macOS and iOS)

When autodiscover fails, Apple Mail opens the Account type screen. On iOS, follow Settings → Mail → Accounts → Add Account → Other. If you encounter a 'Cannot connect' error, you have most likely turned off the SSL toggle; both servers must have it enabled.

Android and iOS Mobile Setup

On mobile you have three choices: the provider's own mobile app, the system mail app, or a third-party client. All three connect to the same server over IMAP; the difference is purely in the user interface.

• Official mobile app: available on Google Play and the App Store; it bundles push notifications, multi-account support, and persistent sessions. The easiest choice for users who don't want to configure accounts on multiple devices.
• Gmail app (Android): follow Add account → Other and enter the IMAP settings as above. A comfortable choice if you are familiar with the Gmail app interface.
• Apple Mail (iOS): covered above.
• K-9 Mail (Android): open source, with PGP/S-MIME support for advanced users.
• FairEmail (Android): privacy-focused, free, and preferred by users who care about not leaking metadata over IMAP.

A note on push notifications: the IMAP standard does not provide true push; clients rely either on IMAP IDLE (a long-lived connection) or on regular polling. Some providers' own mobile apps deliver real push over FCM/APNS. If you are seeing notification delays, the cause is most likely battery optimization — add the app to your 'do not optimize' list.

Adding and Managing Signatures in Webmail

A professional email signature contains four things: full name, title, company name, and contact details. If you want to embed the logo in an HTML signature, the image must be hosted at a publicly reachable URL; uploading a file directly into webmail will not save it as a signature, because every new email would attach it as base64 and trigger spam filters.

• Sign in to webmail.
• From the gear icon at the top right go to Settings → Identities.
• Select an existing identity or create a new one.
• Type the text into the Signature field; check the HTML signature box to enable HTML.
• Save and verify in the New email screen that the signature is appended.

Instead of a single signature you can set up multiple identities: a sales@ identity, a support@ identity, and your personal one. Each identity gets its own signature, and when you click Reply the relevant address is selected automatically.

Domain-Bound Mail Management: The Admin Panel

To manage every email account tied to a domain (creating users, deleting them, aliases, forwarding, quotas), open the Email Management section of the customer panel. Webmail is for the end user at the edge; the admin panel is for the IT operator.

• Account creation: username, initial password, quota (e.g., 5 GB), and forwarding address.
• Password reset: only you will know the user's password; on first login the user changes it.
• Alias: letting a single real account receive mail at multiple addresses such as info@, contact@, sales@.
• Forwarder: copying incoming mail to one or several external addresses.
• Auto-reply: a subject + body template for vacation/leave periods.
• Quota: a per-user disk limit; when exceeded, incoming mail can be rejected or only a warning sent.

In the admin panel, instead of a single-account, multi-user approach for a shared mailbox (support@), open the real account as tickets@ and forward support@ to it as an alias. To pick support@ as the From address when replying, add it to your webmail identities. With this model you can still tell who on the team replied and when.

Password Policy and Account Security

80% of attacks against corporate email succeed because of a user's weak password. The compromise of a single account can drag down the reputation score of the entire domain; the attacker uses that account to send bulk spam, which lands your IP/domain on blocklists in spite of your SPF/DKIM integrity.

• Minimum 14 characters; mix letters, numbers, and symbols.
• Use a password manager: 1Password, Bitwarden, or corporate alternatives. A different password for every account.
• Has it been breached before? Check your domain on haveibeenpwned.com.
• Don't forget to sign out: on a shared computer always close the webmail session via Sign out; do not use Remember me.
• Turn on 2FA if available: enable TOTP-based verification if the provider supports it.

For the science behind password security, take a look at our Password Hashing guide; understanding how passwords are stored on the server side raises overall security awareness.

SPF, DKIM, and DMARC: Get Your Mail Out of the Spam Folder

New corporate-mail users almost always arrive with the same complaint: my mail to Gmail keeps landing in spam. The cause is almost always the same: there is no SPF record on the domain, or it is wrong; DKIM is not signing; DMARC is not declared. These three DNS records are the mandatory foundation of modern email delivery, defined by RFC 7208 (SPF), RFC 6376 (DKIM), and RFC 7489 (DMARC).

Roll out DMARC first with p=none, read the reports (a daily summary will arrive at the rua address), move to p=quarantine after a week, and to p=reject two weeks later once you are confident. Otherwise even a legitimate message from a sub-domain may be rejected. To go deeper, our DNS settings guide and Mail server setup guide are good starting points.

DNS and MX Checks From the Command Line

If dig isn't installed on Windows, nslookup -type=TXT yourcompany.com.tr does the same job. On the PowerShell side, Resolve-DnsName -Type TXT yourcompany.com.tr is cleaner.

Spam Filters and Anti-Virus Behavior

On the Türkticaret webmail side, incoming mail passes through two layers: a score-based classifier in the SpamAssassin family and a signature-based virus scanner in the ClamAV family. Mail that lands in the spam folder is typically auto-deleted after 30 days; if an important message ends up there, mark it with Not spam immediately — that raises the sender domain's reputation score for your local account.

• Scan the spam folder once a week: if a sender is a persistent false positive, add their address to the safe list.
• Set up filters for messages awaiting reply: a Subject- or From-based rule in webmail can auto-tag incoming mail.
• Report phishing emails: don't click; use the Mark as junk button right away.
• Inspect attachment extensions carefully: emails with .exe, .scr, .iso, .lnk are 99% malicious.
• Display-name spoofing: if the displayed name looks trusted but the actual email looks foreign, be suspicious.

To raise phishing awareness within the company, run a tabletop exercise at least twice a year; show users known social-engineering patterns. Our OWASP Top 10 2026 and JWT security guides are good starting points to support corporate security awareness.

Email Forwarding, Auto-Reply, and Rules

The real power of a corporate account shows up in automation rules. Webmail's Filters menu lets you define an action (move to folder, add label, forward, delete) based on incoming mail. Most of these rules run on the server — they apply even when your phone is off.

Vacation auto-reply: when writing an out-of-office message, watch out for two things: it should reply only to messages addressed directly to you (not to mailing-list traffic), and it shouldn't reply to the same person more than once per 7 days. Most Sieve-compatible servers do these checks automatically.

Webmail Performance and Quota Management

Once a mailbox reaches 10-15 GB every search slows down; once it crosses 25 GB, IMAP clients can stall for 30+ seconds at startup while syncing. Without disciplined quota management any user will fill their quota in 6-12 months.

• Archive old mail: move messages older than two years into yearly Archive-2024 folders; if needed, save them as PST/MBOX on a local disk.
• Pull out big attachments: use the size: >10MB filter in webmail search; upload attachments to cloud storage and share by link instead.
• The Sent folder is easy to forget: most users focus on the inbox, but the sent folder grows just as fast.
• Empty Trash and Junk regularly: don't keep them beyond 30 days.
• Limit the IMAP cache: on the Outlook side, drop how many weeks back to 6 months; this is just the cache — your mail stays on the server.

For overall discipline, a warning email can be sent automatically when the user reaches 80% of their quota. Our Mail hosting guide includes a thorough capacity-planning section.

Mail Migration: Moving From an Old Provider

When migrating from another provider into Türkticaret email infrastructure (or the other way around) you have three approaches. Each fits a different scenario:

• 1. IMAP-to-IMAP sync (imapsync): the most robust method. Every folder, label, and read state is copied from the old account to the new one. If it stops mid-way, you can simply restart it.
• 2. Outlook PST export/import: practical for a single user, but it can hit folder-limit issues, and labels may be lost.
• 3. mbox/eml file transfer: after exporting mail archives from the old server, import them into the new account using Thunderbird's ImportExportTools NG add-on.

When planning the migration, save the MX change for last; first verify that every account is in sync, then change the MX and lower the TTL to 300 seconds (so the cutover is fast). Keep the old server running for 7-10 days after migration as well — otherwise mail that comes back on the old route will be lost.

Mail Security: TLS, S/MIME, and PGP

When two users share the same provider, mail moves between them without ever leaving the internal network. But on transport across providers, controlling encryption is on you. TLS encrypts the transport layer; S/MIME and PGP encrypt the message itself end-to-end, so it can't be read even if the transport channel is compromised.

• Opportunistic TLS (RFC 3207): SMTP STARTTLS is the standard for modern servers.
• MTA-STS (RFC 8461): by adding an _mta-sts record on your domain, you can force sending servers to always connect over TLS.
• DANE/TLSA: pins the server certificate via DNSSEC; useful in advanced environments.
• S/MIME: X.509 certificate-based; widely accepted in B2B contracts.
• OpenPGP: key-based, common among corporate/technical user bases.

To check TLS health online, checktls.com and internet.nl/mail give fast results. You can also verify certificate validity with our SSL Certificate Check tool.

Common Errors and How to Fix Them

Below are 10 errors that, drawn from 12 years of support experience, hit roughly 90% of corporate email users — along with direct fixes:

• Password not accepted: the username field doesn't have the full email address. Fix it.
• Mail won't send (SMTP): the ISP has blocked port 25; switch to 465 or 587.
• All my mail goes to spam: SPF + DKIM + DMARC are missing. Add them in DNS.
• Outlook 0x800CCC0E: SMTP authentication is off; check Use same credentials.
• Outlook 0x80004005: repair the account; Account Settings → Repair.
• SSL error on iOS: wrong date/time; turn on automatic date and time.
• Mail keeps arriving over and over: a mixed POP3 + IMAP setup; keep IMAP only.
• Folder names don't show Turkish characters: UTF-7/UTF-8 is mixed up in the client; update the client.
• Mail I send isn't in the Sent folder: the save copy option after SMTP is off; turn it on.
• The webmail session keeps logging out: a cookie/cache problem in the browser; try in a private window.

Sending Test Mail From the Command Line

swaks ships via apt install swaks on Linux/macOS or brew install swaks; it isolates an SMTP problem in 30 seconds. Is the server actually accepting? Is the user being authenticated? What is the mail-tester score? You can probe all of it.

Backups: Drive the Risk of Losing Mail to Zero

The provider may take backups, but keeping a personal or corporate backup is still best practice — when a user account is accidentally deleted, restoring within 24 hours isn't possible at every provider. A three-layer strategy is recommended:

• 1. Local client cache: Outlook OST + PST or the Thunderbird profile directory. Automatic.
• 2. Periodic IMAP archive: a weekly imapsync copy to another IMAP target. Gold for disaster recovery.
• 3. Encrypted offline backup: once a month export to mbox via imapgrab or offlineimap, encrypt with gpg, and drop on an external drive.

We have a separate article that goes deep on backup strategy: Database backup strategies — the title says database, but the 3-2-1 rule and PITR logic apply just as well to mail.

Local Providers in Turkey: A Comparison Framework

Common local providers for corporate email in Turkey include Türkticaret.net, Natro, Turhost, İsimTescil, and the Turkish-language services from GoDaddy. This article does not promote any specific provider; the headings below show the objective criteria to look at when choosing an email provider:

• Data location: KVKK and sector-specific regulation may legally require mail to be kept in Turkey.
• Per-mailbox capacity: 5 GB is a typical starting point; 25-50 GB has become standard in professional plans.
• Anti-spam/anti-virus filter quality: SpamAssassin + ClamAV is the baseline; some providers add Sophos or BitDefender as an extra layer.
• SLA and uptime: 99.9% is the common official figure; in practice, prefer providers that publish 12-month historical records.
• User-count limit: some plans cap out at 5 or 10 users.
• Automatic backup window: 7 days, 14 days, 30 days — varies by provider.
• Mobile push support: real push if there's an official app; otherwise IMAP IDLE.
• Admin UI strength: bulk users, aliases, quotas, log reports.
• Migration support: providers that offer free migration from a previous host score points.
• Pricing: as of 2026, around ₺100-500 per mailbox per month is common (roughly $3-15 USD/month); plans above 50 GB run ₺400-700 (roughly $12-22 USD/month) (approximate, varies by provider, 2026 data).

There is no direct correlation between cost and value — the most expensive plan may not be the right fit for you, because you might never fill 50 GB. Map out your needs first: how many users, average disk per user, is mobile push a must-have, do you need S/MIME. Our Corporate email address guide walks through this selection process in detail.

Webmail Keyboard Shortcuts and Productivity

Twelve shortcuts that boost productivity in Roundcube-style interfaces. Try them with webmail open in your browser:

• ? — Show all shortcuts
• g i — Go to Inbox
• g s — Go to Sent
• g d — Drafts
• c — Compose new email
• r — Reply
• a — Reply all
• f — Forward
• e — Archive
• # — Delete
• ! — Mark as spam
• / — Focus the search box

If the shortcuts don't work, make sure you have enabled keyboard shortcuts under Settings → Preferences → User Interface.

From Mail to Web Page: Marketing Automation

Corporate mail is used not only for one-on-one communication, but also for transactional sends (order confirmation, invoice, password reset) and newsletters. Don't send newsletters from your personal account — your reputation will collapse within a week. Follow this model:

• Person-to-person: personal account, IMAP via webmail/Outlook.
• Transactional: a separate sub-domain (mail.yourcompany.com.tr) with its own SPF/DKIM.
• Newsletter (bulk): a dedicated transactional service (Sendgrid, Mailgun, Postmark, Amazon SES) or, again, a separate sub-domain.
• Bounce management: auto-unsubscribe hard bounces; retry soft bounces up to 3 times.
• List-Unsubscribe header: be RFC 8058 compliant — Gmail/Outlook check for this.

For more on the topic, our Digital marketing guide and, on the technical-data side, our API rate limiting guide are good complements.

Logging and Audit Trails

For corporate email accounts, being able to answer who logged in when, from which IP, and which message went where is critical for regulation (KVKK, ISO 27001, PCI-DSS) and forensic review. Providers usually keep these trails on their side, but they should be checked regularly through the admin panel and must be exportable:

• Login log: user, IP, user-agent, success/failure.
• Sent log: date, sender, recipient(s), size, message-id.
• Quota changes: who raised quota for whom.
• Password resets: who reset whose password.
• Admin actions: account create/delete, alias add/remove.

Keep logs for at least one year; they make retroactive review possible when a suspicious event happens. Our Log analysis with the Elastic Stack guide is a detailed resource for anyone who wants to build a log-collection stack from scratch.

Appendix: Reading Mail From the Command Line (mutt + IMAP)

If you want to read and reply to mail from a console (over remote SSH, or from a server without a GUI), mutt is still the standard tool. Setting it up with IMAP takes about five minutes.

Rather than writing the password in plain text, encrypt it with gpg and use source "gpg -dq ~/.muttrc.gpg |" — that's the better practice. Mutt's learning curve is steep, but once you've adjusted, you can process a thousand messages per minute.

Standards and Related RFCs

• RFC 5321 — SMTP
• RFC 5322 — Internet Message Format
• RFC 3501 — IMAP4rev1
• RFC 9051 — IMAP4rev2 (2021)
• RFC 1939 — POP3
• RFC 3207 — SMTP STARTTLS
• RFC 6409 — Submission for Mail
• RFC 7208 — SPF
• RFC 6376 — DKIM
• RFC 7489 — DMARC
• RFC 8461 — MTA-STS
• RFC 5228 — Sieve
• RFC 8058 — List-Unsubscribe one-click
• RFC 8314 — Implicit TLS

Knowing these standards keeps your foundation solid no matter which provider you switch to. You can find every current RFC at iana.org/protocols.

Frequently Asked Questions

What is the Türkticaret webmail login URL?

https://webmail.turkticaret.net. Sign in with your full email address and password. Make sure the URL starts with HTTPS.

I forgot my Türkticaret mail password — what should I do?

There is no obvious password-recovery link on the webmail login screen; the right path is to ask the domain owner/administrator. They reset it from the admin panel and give you a new temporary password. If you are an individual account holder, open a support request via info@turkticaret.net or by phone at 0 850 224 86 40.

Mail won't send — how do I work around the port-25 problem?

Port 25 is generally closed by home/office ISPs as a spam-prevention measure. For SMTP submission you should use port 465 (SSL/TLS) or port 587 (STARTTLS). Choose one of these in your client's SMTP settings.

Can I open the same account on Outlook and on my phone at the same time?

Yes — if you use IMAP, mail stays in sync between both devices. Don't use POP3; its default behavior is to download from the server and delete, which means the message won't show up on the other device.

Can I move my mail to Gmail?

There are two ways: (1) Gmail's Get mail from other accounts feature, which fetches over POP3, and (2) a zero-to-zero IMAP copy via imapsync. The second option is preferred in professional migrations because it preserves all folders and labels.

My mail keeps landing in spam — what should I do?

First check DNS: are your SPF, DKIM, and DMARC records complete and correct? mail-tester.com should give you 10/10. If not, fill in whatever's missing. If after that mail still hits spam, review send rate and content quality (a high link- or attachment-to-text ratio is a spam trigger).

Resources and Further Reading

• RFC 5321 — SMTP
• RFC 9051 — IMAP4rev2
• RFC 7489 — DMARC
• RFC 6376 — DKIM
• RFC 7208 — SPF
• RFC 8461 — MTA-STS
• mail-tester.com
• internet.nl/mail
• imapsync
• checktls.com
• haveibeenpwned.com

Related Articles

• Corporate email address guide
• Mail server setup guide
• Mail hosting guide 2026
• DNS settings guide
• Plesk panel management
• cPanel usage guide
• OWASP Top 10 2026
• Elastic Stack log analysis
• Backup strategies