App passwords

Mail apps on your phone or computer don't sign in with your console password. They use an app password: a long random password made for one app, that only works for your mailbox. If you lose a device, revoke its app password and nothing else changes.

Create oneCopy Anchor Link

1. In the console, open App passwords (under Mail in the left navigation). You see each mailbox that belongs to you.
2. Choose Create app password under the mailbox, and give it a name you'll recognise later, like "Phone" or "Work laptop".
3. Choose what it can be used for (see below), then Create password.
4. If you haven't signed in or confirmed it's you in the last 5 minutes, the console asks for your console password, a code from your authenticator app or a recovery code first. An app password opens your mail, so we check it's really you.
5. The password is shown once. Copy it into your mail app straight away, with your full email address as the username. The spaces in it are only there to make it easier to read: type it without them.

We email you whenever an app password is created, so you'd notice one you didn't make.

Each mailbox can have up to 5 app passwords. Revoke ones you no longer use to make room.

What it can be used forCopy Anchor Link

Tick only what the app needs. Anything you leave out is refused by the mail server for that password.

App passwords never sign in to the console or to the webmail, and they can't change your mailbox's password, filters or sharing, create other passwords, or look up other people on the service.

Set up your mail appCopy Anchor Link

Most apps fill in the server settings when you type your email address. If yours asks, use:

• Username: your full email address.
• Password: the app password you just created.

For contacts, see Contacts. More help: Mail app settings.

Revoke oneCopy Anchor Link

On the App passwords page, choose Revoke next to it and confirm. It shows as Revoking for a moment, then disappears; the app using it stops signing in within a minute. Revoke all app passwords does the same for every one on that mailbox at once.

People who manage mailboxes in your account (an Owner, or a User Administrator for Members' mailboxes) can also see the names of a mailbox's app passwords and revoke them from the mailbox's App passwords tab. Nobody but you can create one for your mailbox, and nobody can see a password after it's made.

When a mailbox is suspended or deleted, or its person leavesCopy Anchor Link

App passwords don't work while their mailbox is suspended, and work again if it's resumed. A deleted mailbox's app passwords stop working at once and are removed with it. You can't create new ones for a suspended mailbox or one that's being deleted. If the person a mailbox belongs to is removed from the account, the app passwords on that mailbox are revoked.