If you add Gmail to a mail app on your Mac and your normal Google password is refused, that's expected. Google lets mail apps sign in with an app password: a separate 16-character password made just for that app. It opens your mail without ever handing over your real Google password, and you can remove it whenever you like.
Before you start: turn on 2-Step Verification
App passwords only exist on accounts with 2-Step Verification. If it's already on, skip ahead. If not, open your Google Account, choose Security, then 2-Step Verification, and follow Google's steps to add your phone.
Make the app password
- Open the app passwords page. Go to myaccount.google.com/apppasswords. Google may ask you to sign in again.
- Give it a name. Type something you'll recognise later, such as GotEmail or Mac mail, and choose Create.
- Copy the password. Google shows a 16-character password once, in four groups of four. Copy it straight away.
- Paste it into your mail app. Use it in the password field instead of your Google password.
When Google says the setting isn't available
Sometimes the app passwords page opens with a message that the setting you're looking for isn't available. According to Google, that happens when:
- 2-Step Verification is off. Turn it on first, then open the page again.
- 2-Step Verification uses only security keys. Add another second step, such as Google prompts or an authenticator app.
- The account has Advanced Protection. Advanced Protection doesn't allow app passwords.
- It's a work or school account. Your organisation may turn app passwords off. Ask your IT team whether IMAP and app passwords are allowed for your account.
Other snags, and their fixes
| What happens | Why, and what to do |
|---|---|
| The app says the password is wrong | You may have typed your Google password, or copied only part of the app password. Paste all 16 characters again. If spaces cause trouble, paste it without them. |
| It worked, then stopped | Google revokes app passwords when you change your Google Account password. Make a new one and paste it in. |
| You can't find the password again | Google shows it once. Remove the old one on the app passwords page and make a new one. |
| You want to cut off an app | On the app passwords page, choose Remove next to it. That app can't sign in again. |
Use it in GotEmail
In GotEmail, choose Add Account and pick Gmail. GotEmail shows these same three steps above the form, with a button that opens Google's app passwords page for you. Type your address, paste the app password, and GotEmail fills in Gmail's server settings. Your inbox loads, and the password stays in your Mac's Keychain.
More on how Gmail works in GotEmail: Gmail on Mac. Several accounts? See several email accounts on one Mac.
Questions
Is an app password safe?
Yes. It only lets one app reach your Google Account, it never shows your real password, and you can remove it at any time from the app passwords page. Once you remove it, that app can't sign in again.
Why can't I find app passwords in my Google Account?
Google hides the option when 2-Step Verification is off, when 2-Step Verification is set up only with security keys, when the account uses Advanced Protection, and on many work or school accounts.
My app password stopped working. Why?
Google revokes every app password when you change your Google Account password. Make a new one and paste it into your mail app.
Do I need a new app password for each Mac?
No. GotEmail keeps the password in your Mac's Keychain, so you make it once per account. You can also make one per app or device if you'd like to remove them separately later.
Can I see an app password again later?
No. Google shows it only once. If you lose it, remove it and make a new one.