Port 563 is the standard SSL/TLS port for NNTP. Every privacy checklist should end with 563 enabled on your primary server, even if you also run a VPN. Plaintext 119 is legacy. If your search landed on "usenet ssl port 563," you are configuring the most important transport control on the stack. Cross-check providers on the privacy hub and follow your welcome email hostname exactly.
Preferred ports
Use 563 with SSL/TLS checked in the client. Some networks block non-web ports; providers often publish an SSL endpoint on 443 as backup. Prefer 563 when it connects cleanly. A VPN does not replace SSL: tunneling cleartext 119 through VPN still exposes NNTP to the VPN operator. Terminate TLS to the news server on 563.
Keep screenshots of working SSL settings when you travel or rebuild PCs so you are not guessing ports from memory.
443 fallback
Corporate Wi-Fi and guest networks sometimes allow 443 only. Switch the port field, keep SSL on, and retest with a small NZB. Throughput should match 563 when the network is not shaping. Document which port worked so you do not debug large queues twice. Hostnames from Newshosting and Eweka differ; never guess.
SABnzbd and NZBGet fields
Server name, username, password, SSL on, port 563, and connection count within plan limits. Priority 0 for your unlimited primary. Optional priority 1 only for fill servers on different backbones. Step-by-step screenshots live in the SABnzbd setup guide. Beginners graduating from Easynews reuse the same SSL hostname for NNTP plans.
Testing encryption
After saving settings, queue a tiny test NZB and watch the log for SSL handshake success. If you see plaintext warnings, stop and fix before burning quota. Pair this test with reading how Usenet works so you know what TLS protects. Indexer traffic still needs HTTPS or VPN separately.
Revisit checkout pages seasonally because payment rails and bundle copy change faster than retention headlines. Document your SSL hostname in a password manager note so reinstalls stay boring.
FAQ
- Is port 563 required in 2026?
- Yes for privacy-led setups. Treat it as mandatory on primaries.
- Can I use 119 with SSL?
- Some clients allow STLS on 119; 563 is simpler and widely documented.
- Does 563 hide activity from my provider?
- No. It hides payloads from the ISP path; the provider still serves your account.