IRIS 1000002331 - Gmail Settings error (Less secure apps & your Google Account)

1. Gmail settings error

WARNING To help keep your account secure, starting May 30, 2022, ​​Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. Google might block PANTHEON which is trying to sign in to your account from it.

2. Google Account

In order to use Google (Gmail) for sending and receiving emails from and into PANTHEON you must first Turn on 2-Step Verification and then generate a 16-digit passcode that gives a non-Google app or device permission to access your Google Account - Sign in with App Passwords.

For more info Google Settings.

3. 2FA (two factor authentification)

If you have 2FA (two factor authentification) enabled for your account, please generate Application Password to be able to send and receive mail from PANTHEON.

2FA is consdered to be more secure, as it requires to authenticate every login via separeate chanel like cell phone application, SMS, phone call, etc... We at Datalab recomend our users to leverage maximum security for their accounts.

When you enable 2FA for your account, to send and receive mail from Pantheon, you will have to generate separate password, called Application Password. Go to your Google account, and under »Security« select »App passwords«.

On app password screen, type custom name for your application, and clik on Generate

Copy this generated password, as it is not possible to show it again.

Anytime, generated App Password can be removed, and new ones can created.

In PANTHEON, use your Gmail account email adress for Username and generated password in Password fields for SMTP, POP3 and IMAP settings.

Gmail may require to login to Gmail via Browser (using secure 2FA) to »trust« it, and allow you to use App password from same computer/external IP. This should not be issue for single workstations, but may prevent you from using Pantheon on server for »mass sending« of emails, for example via Datalab PAAS service. In those specific cases it is recomended to use dedicated transational email service instead personalized Gmail/Google Workplace accounts.