Why doesn't my Gmail password work in a Mac email app?

Google blocks your normal password in apps that sign in with IMAP, such as Glassmail and many other Mac mail apps. You need a 16-character app password instead, which you can only create once 2-Step Verification is turned on.

Where do I create a Gmail app password?

At myaccount.google.com/apppasswords, signed in to the Google account you want to add. If the page says the setting isn't available, turn on 2-Step Verification first, or ask your Google Workspace administrator to allow app passwords.

Is a Gmail app password safe?

Yes. It only works for email apps, Google shows you where it's used, and you can revoke it at any time without changing your real password.

How to add Gmail to a Mac email app with an app password

Gmail won't accept your normal password in third-party Mac mail apps. Here's how to make an app password in two minutes, and what to do if you can't.

If you’ve tried to add Gmail to a Mac email app and been told your password is wrong when you know it isn’t, you’re not alone. Google doesn’t let most third-party mail apps sign in with your normal password. They ask for an app password instead: a separate, 16-character password made for one app.

It takes about two minutes, and it’s safer than using your real password.

Step 1: Turn on 2-Step Verification

App passwords only exist once 2-Step Verification is on.

Go to myaccount.google.com/security.
Under “How you sign in to Google”, choose 2-Step Verification and follow the steps.

If it’s already on, skip ahead.

Step 2: Create the app password

Open myaccount.google.com/apppasswords.
Type a name you’ll recognise later, like “Glassmail” or “Mac mail”, and choose Create.
Google shows a 16-character password in a yellow box. Copy it.

You won’t see it again, but you don’t need to. If you lose it, delete it and make a new one.

Step 3: Paste it into your mail app

In your Mac email app, add a Gmail account with your full Gmail address and paste the app password where it asks for a password. Spaces don’t matter.

In Glassmail, choose Add Account, type your address, and Glassmail recognises Gmail, opens the app passwords page for you and walks you through the three steps above. The servers (imap.gmail.com and smtp.gmail.com) are filled in for you.

“The setting you’re looking for is not available”

This is the most common snag. It means one of two things:

2-Step Verification is off. Turn it on (step 1) and try the page again.
You use Google Workspace (a work or school address on Gmail), and your administrator has turned app passwords off. Only they can turn them back on, in the Google Admin console under Security. Advanced Protection accounts can’t use app passwords at all.

Is an app password safe?

Yes, and arguably safer than typing your real password into an app:

It only works for email over IMAP and SMTP. It can’t be used to sign in to your Google account on the web.
Each app gets its own, so you can see where it’s used.
You can revoke it any time at myaccount.google.com/apppasswords. Your real password and other apps aren’t affected.

Changing your Google password revokes your app passwords, so you’ll need to make a new one afterwards.

What about iCloud, Yahoo and Fastmail?

They work the same way, with their own app password pages. Outlook.com, Hotmail and Microsoft 365 are different: they sign in through Microsoft’s own page instead. Our support page has the steps for each.