Millions of Gmail users will face new password rules designed to make using the world’s most popular free email service more secure on Monday, September 30, as they head to work. Google will no longer support access to your Gmail account data by apps that are considered less secure, by third parties, or even by devices that are only protected by login with a username and password. Here’s what you need to know.
Goodbye Google Sync and goodbye Support for less secure apps for Gmail users
If the news that Google is undertaking a massive overhaul of password security across the board comes as a surprise, you haven’t been paying attention. From introducing Chrome web browser user access keys to Windows, macOS, Linux and Android users, to post-quantum cryptography to prevent attacks, Google has been hot on security all month. About this particular Gmail password security update, Google has been very popular for 12 months since then notice one year ago. To remove the outdated login method of username and password and thereby reduce the risk of a hack for Gmail users, Google requires all Google Workspace customers to sign in with a more secure access type for apps that they want access to Gmail data. That access methodology is OAuth, which you can learn more about in this article warning of upcoming changes. The new Gmail app password rules apply to all Google Workspace accounts, with CalDAV, CardDAV, IMAP, POP, and Google Sync no longer supporting password-based login credentials.
Which Gmail users are affected by the new app password deadline?
The new security rules regarding access to Gmail data from less secure apps apply to all customers using the Google Workspace suite of tools. Indeed, the less secure apps setting has already been removed from the Google Workspace admin console to ease the transition by disabling adding new accounts using this method. Owners of personal Gmail accounts are unaffected, though they will no longer be able to change Internet Mail Access Protocol, better known as IMAP, from their Gmail account settings, as Google said: “IMAP access is always enabled via OAuth and Your current connections will not be affected.” For users and not administrators of Google Workspace Gmail accounts, however, there are a number of actions that Google recommends they take to ensure they don’t encounter a “username and password are incorrect” error message.
- If you’re using Outlook 2016 or earlier, you need to move to Microsoft 365 or Outlook for Windows or Mac.
- If you use Thunderbird or another email client, you need to add your Google account again and set it to use IMAP with OAuth.
- If you use Mail on iOS or macOS, you must use the sign in with Google option to enable OAuth. This will involve removing and then re-adding your account.