Gmail: create an app password for IMAP/SMTP

Gmail and Google Workspace no longer accept your normal account password for IMAP or SMTP. If you connect your mailbox with host and port, you must paste a 16-character app password instead. Without it the connection test fails with "Invalid credentials (Failure)".

Step 1 — turn on 2-Step Verification Open https://myaccount.google.com/security, choose 2-Step Verification and finish the setup. App passwords are only available on accounts protected by 2-Step Verification.

Step 2 — create the app password Go to https://myaccount.google.com/apppasswords, type a name such as EspressoDesk and click Create. Google shows a 16-character code in four blocks, for example abcd efgh ijkl mnop. Copy it now, it is shown only once.

Step 3 — paste it into EspressoDesk Open Settings, then Email channel, then Connect mailbox manually. Pick the Gmail / Google Workspace preset so the servers fill in automatically: IMAP imap.gmail.com port 993 (SSL) SMTP smtp.gmail.com port 465 (SSL) Username: your full email address. Password: the app password. You can paste it with or without spaces. Click Test connection, then Save.

Google Workspace administrators If the option does not appear, IMAP or 2-Step Verification is blocked by your admin. In the Google Admin console enable 2-Step Verification for the user, allow IMAP under Apps > Google Workspace > Gmail > End user access, and make sure "Less secure app" restrictions do not block app passwords.

Troubleshooting Invalid credentials — the password is a normal account password, not an app password, or the address contains a typo. Application-specific password required — the same cause; generate the code again. Cannot create app password — 2-Step Verification is not active, or the account uses only a passkey or SSO. Timeout — the port is wrong; use 993 for IMAP and 465 for SMTP.

Security The app password is encrypted with AES-256-GCM before it is stored, is never shown again and never leaves our server. You can revoke it at any time in your Google account without changing your main password.