Re: gmail+imap+smtp (oauth2)

[Tim Cross <theophilusx@gmail.com>]

Óscar Fuentes <ofv@wanadoo.es> writes:

> Tim Cross <theophilusx@gmail.com> writes:
>
>> Google introduced the concept of app passwords back when they first
>> implemented 2FA. Basically, they are just a password based
>> authentication workflow which can be used with applications that do not
>> support 2FA or oauth2 based authentication and authorisation.
>
> [snip]
>
>> Google is removing access to imap/smtp using your main google
>> login/password and will require 2FA and oauth2 for all web based
>> authn/authz. However, their documentation implies that app passwords
>> will remain as the standad solution for applications which cannot do 2FA
>> or oauth2. 
>
> If I read this right:
>
> https://support.google.com/accounts/answer/185833?hl=en
>
> app passwords require to have 2FA turned on. So you have to go through
> the 2FA process anyway with app passwords.

All new google accounts have to do 2FA already. I suspect they will soon
require existing accounts to enable it as well. Enabling 2FA is very
simple and it works well. Basically, you only need to do the 2FA login
the first time you connect from a new device or browser. 2FA based
authentication is becoming the norm and I appeciate the additional
protection.