Dovecot IMAP Server VPS for Self-Hosted Mailboxes

Dovecot pairs naturally with Postfix or Exim and handles every detail of message delivery from LMTP ingestion to client-facing IMAP and POP3 protocols. On an Anubiz Host offshore VPS you get full control over storage layout, choosing between Maildir, mdbox, or sdbox formats depending on your message volume and search patterns. mdbox in particular is recommended for any mailbox that will hold tens of thousands of messages because it dramatically reduces inode pressure and disk seek time during full-text search. Authentication can be wired into local passwd, PAM, an LDAP directory, or a SQL backend. Multi-tenant setups commonly run Dovecot against Postgres with virtual users, giving you per-mailbox quotas and centralized password management without any shell accounts on the host. Full root on the VPS means you can enable IMAP IDLE for push notifications, configure Sieve filters per user, and turn on the Dovecot indexer for fast Xapian or Solr full-text search.

Self-hosted IMAP only delivers privacy if the storage layer is hardened. Every Anubiz Host VPS supports LUKS full disk encryption at provision time, which means your Maildir tree is encrypted at rest with a key that only your VPS knows. Combined with TLS 1.3 enforced on IMAPS and POP3S ports, this gives you encryption both in transit and at rest without involving any third-party key escrow. Dovecot also supports mail crypt plugin, which encrypts individual messages on disk using per-user keys derived from the login password. That layer protects against an attacker who somehow obtains a raw disk image but does not know any user passwords. For credential storage, configure Argon2id password hashing in the dovecot-sql.conf.ext backend. Avoid plain MD5 or SHA1 legacy hashes. We recommend rotating the master Dovecot certificate every 90 days through Let's Encrypt with the dovecot-protocol option set so that imap.yourdomain.com always presents a valid chain.

Many customers come to Anubiz Host because they are migrating away from Gmail Workspace, Outlook 365, or other surveillance-prone providers. Dovecot makes that transition straightforward. The imapsync tool can pull mailboxes from any IMAP-compatible source into your new Dovecot server, preserving folder structure, flags, and dates. For Gmail specifically, you enable IMAP access, generate an app password, and run imapsync with the gmail1 preset to handle Gmail's label-based folder semantics. After migration, point your DNS MX records to the new Postfix node, configure SPF, DKIM, and DMARC correctly, and update client configurations to the new IMAPS endpoint. Anubiz Host support can review your zone file before you flip the MX cutover. The end state is a fully owned mailbox server in an offshore jurisdiction, paid in cryptocurrency, with no provider scanning your messages or building advertising profiles from your contacts.