What Is a Network Port? Common Ports Explained
If an IP address is a building's street address, a network port is the specific door or apartment number inside. It is how one device runs dozens of services without getting its wires crossed.
A network port is a numbered endpoint that lets a single device handle many network conversations at the same time. Your computer has just one IP address on a given network, yet it can browse the web, sync email, and stream music all at once. Ports are what make that possible: the IP address delivers data to the right machine, and the port number delivers it to the right program running on that machine.
Why network ports exist
Imagine a large office building with a single street address. Mail arrives for hundreds of people, but the address alone is not enough to route each letter, you also need a room or mailbox number. A device on the internet has exactly the same problem. Data addressed to your computer needs a second number so the operating system knows whether it belongs to your browser, your mail app, or a game.
That second number is the port. A port is written as a 16-bit number, which means there are 65,535 of them available, numbered 1 to 65535. Every network connection uses a port on each end, so both sides always know which program a given stream of data belongs to.
Ports and sockets
When you pair an IP address with a port number, you get a socket. It is usually written with a colon, like 203.0.113.5:443. A socket uniquely identifies one end of a conversation. Because each active connection is defined by the combination of source socket and destination socket, a busy web server can hold thousands of simultaneous connections on the same port without ever confusing them.
Ports also come in two flavours depending on the transport protocol carrying the data. As covered in TCP vs UDP, TCP and UDP each keep their own independent set of port numbers, so TCP port 53 and UDP port 53 are entirely separate doorways that can be open at once.
Ports 0 to 1023 are called "well-known" ports and are reserved for standard services like the web and email. On most operating systems, only administrator-level programs are allowed to listen on them, which is a small but real security safeguard.
The three ranges of port numbers
The full range of 65,535 ports is divided into three bands, each with a different job:
- Well-known ports (0–1023): assigned to widely used services such as HTTP, HTTPS, and SSH. These are the ones worth memorising.
- Registered ports (1024–49151): used by specific applications and vendors that have registered a number, though the rules are looser here.
- Dynamic or ephemeral ports (49152–65535): handed out temporarily by your device for the outgoing side of a connection. When your browser opens a page, it grabs a random ephemeral port for its end of the chat.
Common network ports you should know
A handful of well-known ports account for a huge share of everyday internet traffic. Here are the ones you are most likely to run into.
| Port | Protocol | What it is for |
|---|---|---|
| 20 & 21 | FTP | File Transfer Protocol for moving files |
| 22 | SSH | Secure remote login and command line access |
| 25 | SMTP | Sending email between mail servers |
| 53 | DNS | Looking up domain names (uses TCP and UDP) |
| 80 | HTTP | Unencrypted web traffic |
| 443 | HTTPS | Encrypted web traffic (the padlock) |
| 123 | NTP | Network time synchronisation |
| 3389 | RDP | Remote Desktop for Windows machines |
When you type a plain web address, your browser assumes port 80 for HTTP or 443 for HTTPS so you never have to type it. You can override that by adding a colon and a number to a URL, which is how developers reach a test server running on something like port 8080.
Ports, firewalls, and security
Because ports are the doorways into a device, they are central to network security. A firewall works largely by deciding which ports may accept incoming connections and which stay shut. A closed or filtered port simply does not answer, which is why leaving unnecessary services running on open ports is a classic risk. Port scanning, a common step in both security testing and attacks, is just the act of knocking on many ports to see which ones respond.
This is also why your home router matters. Thanks to Network Address Translation, the devices behind your router share one public IP, and the router keeps a table of which internal device owns which outgoing port. Incoming connections are blocked by default unless you deliberately forward a port, which is a big part of why home networks are reasonably safe out of the box.
Putting it together
Ports turn a single IP address into a switchboard capable of running dozens of services at once. Learn the handful of well-known numbers, remember that a socket is just an address-and-port pair, and a lot of networking suddenly makes sense. Curious what public IP your own ports are riding on? Pop over to IP Animals and meet the animal that shows you.
Frequently asked questions
What is a network port in simple terms?
A port is a numbered doorway on a device that lets one computer run many network services at once. The IP address gets data to the right machine, and the port number gets it to the right program on that machine, such as a web server or an email server.
How many ports are there?
There are 65,535 possible port numbers, from 1 to 65535. They are split into well-known ports (0 to 1023), registered ports (1024 to 49151), and dynamic or ephemeral ports (49152 to 65535) used for temporary connections.
What is the difference between port 80 and port 443?
Port 80 is the default for unencrypted HTTP web traffic, while port 443 is the default for encrypted HTTPS. When you see a padlock in your browser, your connection is almost always running over port 443.
What is a socket?
A socket is the combination of an IP address and a port number, such as 203.0.113.5:443. It uniquely identifies one end of a network conversation, which is how a server keeps many simultaneous connections from getting mixed up.