Wed 11 / 09 / 24
Gmail to End Support for Less Secure Apps: What You Need to Know
You Only Have 4 Weeks left to Upgrade Your 3rd Party App Access
Google is making important security upgrades to your Gmail account. These changes are being made to protect you from hackers and unauthorised access.
Starting on the 30th of September 2024, Google is phasing out support for “less secure apps.” These are typically older apps that only ask for your username and password to access your Gmail, making them more vulnerable to hackers.
What are “less secure apps”?
These are often older apps that haven’t received updates in a while, including:
- Older versions of Microsoft Outlook (like Outlook 2016 or earlier)
- Some outdated email clients like certain versions of Thunderbird
- Custom-built applications
- Mobile apps that still rely solely on usernames and passwords
Why is this happening?
Older sign-in methods that rely solely on usernames and passwords are vulnerable to attacks. When you use these methods, you’re essentially sharing your login information with other apps and devices, increasing the risk of your account being compromised. Google is switching to a more secure method called OAuth to safeguard your data. This applies to all Google Workspace accounts, with CalDAV, CardDAV, IMAP, POP and Google Sync; all no longer supporting just a password-based login credential.
OAuth: Your New Security Guard
OAuth is a secure framework that acts like a special key, granting apps access to your Gmail without revealing your actual password. Even if the app is compromised, your password remains safe. It’s like giving someone a key to your front door but not the key to your entire house.
What You Need to Do
- Take Inventory: Make a list of all the apps you use to access your Gmail.
- Check for OAuth: Look for information on the app’s website, in its settings, or by contacting their support team. Look for phrases like “OAuth support,” “secure login,” or “two-factor authentication.”
- Update or Switch: If an app doesn’t support OAuth, update it to the latest version or find a secure alternative.
Specific Steps for Popular Apps
- Outlook 2016 or earlier: Upgrade to Microsoft 365 or a newer version of Outlook.
- Thunderbird: Re-add your Google account and configure it to use IMAP with OAuth.
- Mail for iOS/MacOS or Outlook for Mac: Use “Sign in with Google” and potentially remove and re-add your account.
- Personal Gmail accounts: No action is needed for IMAP access as it already uses OAuth.
What’s the risk if I don’t update?
If you don’t switch to OAuth-compatible apps by September 30th, you won’t be able to access your Gmail through those old apps. This could disrupt your workflow and leave your account more vulnerable.
If you don’t take action, you will encounter the following consequences:
- Inability to access Gmail: When you try to access your Gmail account through any of the less secure apps that rely on just a username and password, you will receive an error message stating that your login credentials are incorrect (even if they are correct). This means you’ll be locked out of your Gmail account through those specific apps.
- Disruption of workflow: If you heavily rely on any of these less secure apps for your daily email management or communication, this change will significantly disrupt your workflow. You won’t be able to send or receive emails, manage your calendar, or access your contacts through those apps until you update them or switch to compatible alternatives.
- Potential security risks: While Google’s primary motive behind this change is to enhance security, not taking action could expose you to potential security risks. If you continue to use less secure apps that store your Gmail credentials in plain text or use outdated authentication methods, you increase the chances of your account being hacked.
Pipeline pro tip: Consider using a passkey platform like Keeper Security to help keep your passwords safe.
Act now to protect your Gmail!
If you’re unsure about which apps or devices you use to access Gmail or how to update them, don’t hesitate to reach out to us at Pipeline Digital or Google support for assistance. We can guide you through the necessary steps to ensure your account remains secure.
This security update is crucial for protecting your sensitive information. Take action now to ensure uninterrupted access to your Gmail account and keep your data safe.
Other Google Chat and Spaces Tips
- Share and Receive Files on Shared Drives with Non-Google Accounts
- Google Workspace vs Slack: What’s best for your Business?
- eSignature for Google Docs and Drive
- Protect your Google Drive from Spam!
Ready to become a Workspace Superstar?
Don’t miss out on our weekly tips and tricks to maximise your Google Workspace experience. Sign up for our newsletter today and unlock the full potential of your digital collaboration tools!
Want more Google Workspace goodness?
Dive deeper into our blogs and discover a treasure trove of guides, tutorials, and expert advice to help you streamline your workflow and boost productivity. Check out our other Workspace blogs and become the ultimate Workspace pro!