How to Create App-Specific Passwords in Gmail

Access Google apps on devices that don't support 2FA

by
Heinz Tschabitscher
Heinz Tschabitscher
Writer
A former freelance contributor who has reviewed hundreds of email programs and services since 1997.
our editorial process
Heinz Tschabitscher
Updated on February 09, 2021
reviewed by
Ryan Perian headshot
Ryan Perian
Lifewire Tech Review Board Member
Ryan Perian is a certified IT specialist who holds numerous IT certifications and has 12+ years' experience working in the IT industry support and management positions.
our review board
Article reviewed on Jun 07, 2020
Ryan Perian

What To Know

  • Select your Profile Icon > Google Account > Security. Scroll to Signing In. Choose App Passwords. Enter a name, and Generate. Sign in.
  • You can create and revoke app-specific passwords as you change the apps and devices you use.

This article explains how to use generate app-specific passwords for your email clients (think Microsoft Outlook or Mozilla Thunderbird or Evolution). An app-specific password, which is a special password tied to your account that's used only for a specific program, service or situation.

Create a Gmail Application-Specific Password

To generate a new password for an email program, utility or add-on to access your Gmail account through IMAP or POP with two-step authentication enforced:

  1. Click your name or photo near your Gmail inbox's top right corner.

  2. Tap or click the Google Account button in the sheet that has appeared.

    Google Account button in Gmail Gear icon

  3. Click the Security button in the left-hand sidebar.

    Security category in Google Account

  4. Scroll to the Signing in to Google section.

  5. Under the Password & sign-in method section, click App passwords.

    App passwords button in Signing in to Google section

    If prompted for your Gmail password, enter your password over Enter your password and click Next.

  6. Make sure Mail or Other (custom name) is selected in the Select app drop-down menu. If you selected Mail, choose a computer or device from the Select device menu. If you selected Other (custom name), type the application or add-on and, optionally, device (like "Mozilla Thunderbird on my Linux laptop") over e.g. YouTube on my Xbox.

  7. Click Generate.

    Generate button in App passwords for Google Account

  8. Find and immediately use the password under Your app password for your device. Type or paste the password into the email program, Gmail add-on or service immediately. You will not see it again.

  9. Click Done.

Managing App-Specific Passwords

Screenshot showing app passwords used for Gmail

The value of an application-specific password is that you can revoke and regenerate a password on a service-by-service basis instead of having to change the main password to your account. If you do need to create a new app-specific password for a program or service, revoke passwords previously set up but no longer used for the same application.

It's best practice to use an app-specific password only for a single service. You are free to generate as many app-specific passwords as you like.

Besides your Google account, you should set up two-factor authentication for a wide range of accounts, and also for your social-media accounts.

Was this page helpful?