How to create App Password for Google Workspace users
Ensure that your organization's security policies allow the use of App Passwords. App Passwords are revoked when the user changes their Google Account password.

To create App Passwords for other users in your Google Workspace, follow these steps. Note that users must have two-factor authentication (2FA) enabled to generate App Passwords. An app password is a special password used in place of your regular password when you need to sign in to an app or service that doesn’t support two-factor authentication (2FA) or other advanced security features. This is particularly common when using services like Google, Microsoft, or Apple, which often require 2FA for enhanced security.
For Admin
- Go to the Google Admin Console (
admin.google.com
). - Navigate to Security > Authentication > 2-Step Verification.
- Ensure that 2-Step Verification is allowed for the organization. Users must be able to enable it on their accounts.
For User
- Have the user go to their Google Account settings (
myaccount.google.com
). - Click on Security.
- Enable 2-Step Verification if not already enabled.
- Scroll down to App passwords and click on it.
- Select the app type (e.g., “Mail” or “Other”) and enter a name for the app password.
- Click Create and copy the generated password.
SMTP Configuration
- SERVER:
smtp.gmail.com
- PORT:
587
(or465
for SSL) - USERNAME: Your primary Google Workspace email address
- PASSWORD: The App Password generated for your account
- FROM: You can specify your alias here when sending emails
Google has not officially deprecated App Passwords for all services, but they recommend using OAuth for more secure access. However, App Passwords are still supported for certain protocols like IMAP. Ensure that your organization’s security policies allow the use of App Passwords. App Passwords are revoked when the user changes their Google Account password, so new App Passwords must be generated in such cases. If App Passwords are not suitable, consider using OAuth for authentication or delegating mailboxes if users need to send emails from different accounts within the same organization.