PORT REFERENCE

Port 1433 — Microsoft SQL Server TCP Port

Port 1433 is the default TCP port for the default instance of Microsoft SQL Server. Named instances, including SQL Server Express, use dynamic ports by default instead.

Port
1433
Protocol used by the service
TCP
IANA registrations
TCP/UDP
Encryption
Varies by configuration
IANA description
Microsoft-SQL-Server
IANA service name
ms-sql-s

Note: IANA has formally registered Microsoft SQL Server on TCP/UDP, but in real-world practice this service operates over TCP only — a formal registration on a transport doesn't guarantee the protocol is actually implemented or used over it. This page's Protocol field reflects genuine usage, not just the registry entry.

What port 1433 is used for

Default listener port for Microsoft SQL Server database connections from applications and administration tools.

Is port 1433 encrypted?

Supports TLS encryption for client connections, but it must be explicitly configured and enforced — an unconfigured server may accept unencrypted connections.

Firewall & exposure considerations

Should be firewalled to known application servers only, never exposed to the open internet — database ports are a common target for credential-stuffing and brute-force scanning, and a compromised database often exposes far more sensitive data than a compromised web server would.

Common questions about port 1433

What is the default port for SQL Server?

TCP 1433, for the default instance (the one installed without an instance name). Microsoft notes the port can be changed, so 1433 is a default rather than a guarantee. Two nearby ports are easy to confuse with it: UDP 1434 belongs to the SQL Server Browser service, and TCP 1434 is used by the Dedicated Admin Connection on the default instance.

What port does a named instance use?

By default a named instance uses a dynamic TCP port, determined when the Database Engine starts. Clients that connect by instance name ask the SQL Server Browser service on UDP 1434 which port the instance is using. An instance can also be configured to listen on a specific TCP port instead.

Should the SQL Server Browser service be left running?

Microsoft's guidance is that, for the most secure environment, you should leave the SQL Server Browser service stopped and configure clients to connect using the port number. It receives unauthenticated UDP requests, which is one reason it is not always turned on during setup, and using it requires opening UDP 1434 in the firewall.

Related ports

References

Look up any other port

Search the full IANA registry — all 6,100+ ports and 12,500+ protocol-specific records — on the Port Lookup tool.

Last reviewed: . Data source: IANA Service Name and Transport Protocol Port Number Registry. Security and usage notes are this site's own editorial content, not official IANA data.

Relevant, Not Routine

New tools and anything else worth knowing — sent occasionally, only when there's something real to say.