The Secure IMAP server

Dovecot is an excellent choice for both small and large installations; however, for larger installations we recommend our commercial solution OX Dovecot Pro.



Thu Oct 28 12:12:53 EEST 2021

Released Dovecot v2.3.17 and Pigeonhole v0.5.17.

Fri Aug 6 13:48:05 CEST 2021

Released Dovecot v2.3.16 and Pigeonhole v0.5.16.

Mon Jan 4 14:03:16 EET 2021

We have disclosed three new vulnerabilities in dovecot, please see CVE-2020-28200, CVE-2021-29157 and CVE-2021-33515.

Mon Jun 21 14:20:13 EEST 2021

Released Dovecot v2.3.15 and Pigeonhole v0.5.15. Also released a fixes-only v2.3.14.1.

Thu Mar 4 12:21:50 EET 2021

Released Pigeonhole v0.5.14.

Thu Mar 4 12:21:48 EET 2021

Released Dovecot v2.3.14.


Wed Feb 17 16:38:09 EET 2021

Released Pigeonhole v0.5.14.rc1.

Wed Feb 17 16:38:08 EET 2021

Released Dovecot v2.3.14.rc1.

Mon Jan 4 14:02:10 EET 2021

Released v0.5.13.

Mon Jan 4 14:02:10 EET 2021

Released v2.3.13.


Mon Jan 4 14:03:16 EET 2021

We have disclosed two new vulnerabilities in dovecot, please see CVE-2020-25275 and CVE-2020-24386.

Wed Aug 12 16:25:42 EEST 2020

We are happy to announce that we have CentOS 8 packages available starting from v2.3.11.3. You can find these packages at

Wed Aug 12 16:14:49 EEST 2020

We have disclosed three new vulnerabilities in dovecot, please see CVE-2020-12100, CVE-2020-12673 and CVE-2020-12674.

Wed Aug 12 16:02:20 EEST 2020

Released v2.3.11.3


Mon May 18 15:03:31 EEST 2020

Multiple vulnerabilities in Dovecot

Mon May 18 15:03:06 EEST 2020

Released v2.3.10.1

Fri Mar 6 12:53:51 EET 2020

Released v2.3.10

Wed Feb 12 14:04:52 EET 2020

Released v2.3.9.3


Fri Dec 13 16:16:56 EET 2019

Released v2.3.9.2

Fri Dec 13 12:44:25 EET 2019

Released v2.3.9.1

Wed Dec 4 12:34:24 EET 2019

Released v2.3.9

Wed Oct 9 09:01:32 EEST 2019

Buster packages are available


Tue Oct 8 14:18:14 EEST 2019

Released v2.3.8

Wed Aug 28 15:05:36 EEST 2019

Released v2.2.36.4.

Wed Aug 28 15:05:36 EEST 2019

Released v2.3.7.2.

Tue Jul 23 16:09:41 EEST 2019

Released v2.3.7.1.


Fri Jul 12 15:29:41 EEST 2019

Released v2.3.7.

Tue Apr 30 16:21:01 EEST 2019

Released v2.3.6.

Thu Apr 18 12:05:43 EEST 2019

Released v2.3.5.2.

Thu Mar 28 13:41:08 EET 2019

Released v2.2.36.3.


Thu Mar 28 13:41:05 EET 2019

Released v2.3.5.1.

Tue Mar 5 18:26:27 EET 2019

Released v2.3.5.

Tue Feb 5 15:08:35 EET 2019

Released v2.3.4.1.

Tue Feb 5 15:10:06 EET 2019

Released v2.2.36.1.


Fri Nov 23 14:30:12 EET 2018

Released v2.3.4.

Mon Oct 1 19:14:18 EEST 2018

Released v2.3.3.

Thu Mar 28 13:41:08 EET 2018

Released v2.3.3 release candidate

Older news…


Best performing

Dovecot is among the best performing IMAP servers while still supporting the standard mbox and Maildir formats. The mailboxes are transparently indexed, which gives Dovecot its good performance while still providing full compatibility with existing mailbox handling tools.

Flexible authentication

Dovecot’s user authentication is extremely flexible and feature-rich, supporting many different authentication databases and mechanisms.

Standards compliant

Dovecot is standards compliant. Dovecot passes all IMAP server standard compliancy tests while most other servers fail many of them.

Postfix and Exim

Postfix 2.3+ and Exim 4.64+ users can do SMTP authentication directly against Dovecot’s authentication backend without having to configure it separately. You can also use our submission service to perform authentication before relaying mail to your MTA.


Dovecot’s indexes are self-optimizing. They contain exactly what the user’s client commonly needs, no more and no less.

Easy migration

Dovecot supports easy migration from many existing IMAP and POP3 servers, allowing the change to be transparent to existing users.


Dovecot is self-healing. It tries to fix most of the problems it notices by itself, such as broken index files. The problems are however logged so the administrator can later try to figure out what caused them.

Workarounds support

Dovecot supports workarounds for several bugs in IMAP and POP3 clients. Since the workarounds may cause the protocol exchange to be sub-optimal, you can enable only the workarounds you need.


Dovecot tries to be admin-friendly. Common error messages are made as easily understandable as possible. Any crash, no matter how it happened, is considered a bug that will be fixed.


Dovecot’s design and implementation is highly focused on security. You can report any security vulnerabilities via our HackerOne program or via email to

Clustered filesystems compatibility

Dovecot allows mailboxes and their indexes to be modified by multiple computers at the same time, while still performing well. This means that Dovecot works well with clustered filesystems. NFS has caching problems, but you can work around them with director proxies.

Easily Extensible

Dovecot is easily extensible. Plugins can add new commands, modify existing behavior, add their own data into index files or even add support for new mailbox formats. For example quota and ACL support are completely implemented as plugins.