When setting up an email account through SMTP/IMAP, one of the key requirements is your email account password. However, for security reasons, Gmail and Outlook email providers require a special app password instead of your regular login password. Here's what you need to know about the app password
Gmail and Outlook: Why you need to create a different password
Enhanced security with Two-Factor Authentication
Both Gmail and Outlook encourage users to enable 2-Step Verification to protect accounts. When 2FA is turned on, your normal email password no longer works for older apps or services that use basic authentication (like SMTP/IMAP)
To maintain both functionality and security, these providers require you to use an App Password. It is a randomly generated 16-character password created specifically for use in apps
What Is an App Password?
An app password is a unique, one-time-use password generated by your email provider. It bypasses 2FA and allows external apps to access your mailbox securely. This way, you don’t have to store your actual account password in third-party software, reducing the risk of a security breach
Important: An app password is required only when you add Gmail/Outlook email accounts via SMTP/IMAP. You do not need to create it when you add directly via Gmail or Outlook
How to Get an App Password
For Gmail (Google Accounts):
Navigate to Security > 2-Step Verification
Enable 2-Step Verification if you haven't already
Once enabled, select App Passwords
Enter the name of the app for which you will use the password
Click Create
Google will give you a 16-character password to use in your email client instead of your main password
Please note: there's no option to use your regular login password when you try to set up your Gmail account via SMTP/IMAP. You still need to create an app password
For Outlook (Microsoft Accounts):
Go to https://account.live.com
Click on Security > Account > Manage how I sign in > Advanced Security Options
Turn on Two-step verification if it's not already enabled
Scroll down to App passwords and click Create a new app password
Copy the password and use it in your email client's SMTP/IMAP settings
Using Other Email Providers
If you're not using Gmail or Outlook, your email account will usually work with your regular email account password. However, this depends on whether your provider supports 2FA and whether they require app-specific passwords
How to check whether you need a password:
Check with your email provider (like Yahoo, Zoho, iCloud, or private hosting services) to see if they use app passwords
Visit your email provider’s security settings to manage passwords and access
If your account doesn't use 2FA, your regular password may still work, but enabling 2FA and app passwords is highly recommended for security