HACKER Q&A
📣 JetSpiegel

Did Google turn off IMAP access for good over the weekend?


Google was going to turn off access for LSA apps soon, and this includes IMAP for Gmail. However, with the pandemic they delayed this indefinitely.

https://gsuiteupdates.googleblog.com/2020/03/less-secure-app...

Since May 1st, using IMAP to access a G Suite account stopped working, though, with a message:

> IMAP command 'AUTHENTICATE PLAIN ' returned an error: NO [AUTHENTICATIONFAILED] Invalid credentials (Failure)

I know the credentials are good because they work in the browser. Maybe an automated process somewhere kicked in?


  👤 eloh Accepted Answer ✓
You need to set up an app specific password [1] and use that for IMAP.

[1] https://support.google.com/mail/answer/185833?hl=en


👤 neilk
I’m out of the loop - where does Google commit to turning off IMAP? Is there any other standard that non-Google mail clients can follow?

Will Apple Mail lose Gmail compatibility or can they upgrade to something?


👤 sanchay
Happening since morning, I got rid of Gapps on phone (for privacy concerns) and can't use K-9 Mail anymore, guess I'll have to resort to mobile browsers for email access.

👤 hazeii
Plenty of comments and current status at downdetector[0]. Clicking on the different countries suggests it's a global thing.

Edit: the "Less secure apps" [1] setting was reporting "setting could not be read", it's just re-appeared here in the UK (11:40 UTC).

[0] https://downdetector.co.uk/status/gmail/

[1] https://myaccount.google.com/lesssecureapps


👤 zozbot234
> However, with the pandemic they delayed this indefinitely.

I guess someone didn't get the memo. Or else yes, perhaps they got some automated thing scheduled in advance and failed to roll it back properly as announced.


👤 ejo4041
I just switched to g suite for business over the weekend and setup mail checking from my main account. I found enabling "Less secure apps" to get sending and receiving emails from my other accounts via POP3 to be very odd. Also had to create the app specific password. How is it a less secure app? It's a gmail account checking another gmail account. That really didn't make sense to me, but the tech support from g suite was happy to read the script to walk me through the setup. It was pretty frustrating to not be able to figure that out myself, it was not intuitive.

👤 maltfield
Also confirming an issue for the past few hours.

It's currently 2020-05-04 11:26 UTC and the issue is ongoing.

EDIT: does anyone know if google has an "uptime" page for their various services where they can provide status updates as they diagnose the issue? This is impacting our entire org on G-suite.

EDIT2: Found this, but it shows "Gmail" as "green" Yeah, it's still down :rolleyes: https://www.google.com/appsstatus#hl=en

EDIT3: As of 2020-05-04 11:45 UTC, it's back up for me.


👤 mopsi
On a related note, how can I run internal mailserver that stores mail locally on my network, accessible through IMAP or web interface, and uses accounts on a POP3/IMAP-capable public server like Gmail only to receive and send mail (no long-term storage)? Where should I look?

I'm comfortable with setting up a VM, but I don't know much about email.


👤 IRegretNothing
They removed access for 'insecure apps'. Go to your Google account > Settings > activate 2 factor authentication and get an individual password for each app.

Source: Had to do this to all my superb python bots that we using mails for error reporting.


👤 maltfield
Lots of people are reporting this outage on this Google Support Thread:

* https://support.google.com/mail/thread/44318228?hl=en


👤 aaronpk
I'm having a different (but likely related) problem, which is that my SMTP stopped working today.

I have a legacy Google Apps account on a custom domain, and have had two-factor auth configured for years. Today my SMTP credentials stopped working, so I went in and made a new app-specific password, and that is also not working as my SMTP password. I also can't enable the "less secure apps" option because 2fa is enabled. I don't see any path to fix this.


👤 SafaT
It also happened to me and nothing has helped to solve it for hours.

At the very end, I thought of changing my password and IT WORKED! Try "update" your password.


👤 throwaway49872
It's really time to move away from Gmail & co.

Any suggestion for a comparable email service?


👤 tjbiddle
Reading through the comments, sounds like it's a blip.

But yeesh - would've been just my luck! I'm in the process of putting together my de-Google plan lately.


👤 flipbrad
For a few hours this morning, Gmail also had difficulty retrieving mail from other Gmail accounts via POP3.

👤 linjan
Yep, the same. I solved that by changing password to the same for "blocked" account.

👤 OrgNet
LoL Google.... I thought that I was a victim of your random account deletion for a bit

👤 jimmyvalmer
Wow, for me it started happening Monday, May 4, 5:50 EDT.

👤 bashrulz
LSA is back in settings, it should work fine now.

👤 grizzles
does anyone know if POP is still working?