Less Secure Apps Instructions
Google will terminate access to less secure apps (LSA) - non-Google apps that can access your Google account with only a username and password (basic authentication).
To continue using these apps with your Google Workspace accounts, users must switch to a more secure access called OAuth. Starting on March 14, 2025, only apps that support a more modern and secure access method called OAuth will access Google Workspace accounts.
User instructions
If you are using an app that accesses your Google account with only a username and password (not with the normal NetID login and NetID password), take one of the following actions below to switch to a more secure method and continue to access your email, calendar, or contacts. After March 14, 2025, you will receive an error message that your username-password combination is incorrect and you will not be able to log in.
Email Applications
● Outlook 2016 or earlier - Move to Microsoft 365 (formerly known as Office 365, a web-based version of Outlook) or Outlook for Windows or Mac, both of which support OAuth access. In addition, you can use Google Workspace Sync for Microsoft Outlook.
● Thunderbird or another email client: Re-add your Google Account and configure it to use IMAP with OAuth.
● The mail app on iOS or MacOS, or Outlook for Mac, and use only a password to log in: You’ll need to remove and re-add your account. When you add it back, select “sign in with Google” to automatically use OAuth.
MacOS
iOS
Calendar Applications
● If you use an app that uses password-based CalDAV to give access to your calendar, switch to a method that supports OAuth. We recommend the Google Calendar app [Web/iOS/Android] as the most secure app to use with your Google Workspace account.
● If your Google Workspace account is linked to the calendar app in iOS or MacOS and uses only a password to login, you’ll need to remove and re-add your account to your device. When you add it back, select “sign in with Google” to automatically use OAuth. Read more
Contacts Applications
● If your Google Workspace account is syncing contacts to iOS or MacOS via CardDAV and uses only a password to login, you’ll need to remove your account. When you add it back, select “sign in with Google” to automatically use OAuth. Read More
● If your Google Workspace account is syncing contacts to any other platform or app via CardDAV and uses only a password to login, switch to a method that supports OAuth.
All Other Applications
Note: If the app you are using does not support OAuth, you will need to switch to an app that offers OAuth, or ask your admin to contact the supplier of your app and request that they add OAuth as a way of connecting your Google account, or create an app password to access these apps.