Impossible to authenticate with Google

My earlier post that k-9 was still working was premature… I guess it was a slow, intermittent rollout of enforcement.

Sorry to the k-9 devs, but I have moved on to another email app. Thanks for the good times!

Maybe I’ll check back in the future, but so far this other app is just fine. A little busy on the eyes, but I’ll get used to it or try other themes.

I was able to access Gmail on K-9 up until this Tuesday (07 June 2022) I’m sticking which K-9 as I am using de-googled devices and do not have Google sign in on any of them. I hope we can have a solution soon for K-9 being “a more secure app”

1 Like

I was able to access Gmail on K-9 up until this Tuesday (07 June 2022) I’m sticking with K-9 as I am using de-googled devices and do not have Google sign in on any of them. I hope we can have a solution soon for K-9 being “a more secure app”

1 Like

K9, as is, works fine with gmail, you just need to set up a google app-password and use that in K9, rather than your google site-wide pw. See @cketti’s post toward the top of this item for pointers to the information you need for doing that.

This no longer works as the option to enable less secure apps is no longer available.If you had it enabled before the cut off it continues to work but for how long ?

You do NOT need that option. You need an app password. See How to set up with a Gmail account

1 Like

Just to reinforce this, and to cut to the chase … all/what you need to set up is an “app password”. That option is available, whether you had one set up previously or not*. Just follow the instructions under “Create & use App Passwords” at:

https://support.google.com/accounts/answer/185833?hl=en

You do have to have 2fa enabled.

To confirm that this was all still the case I just followed the steps outlined in the document I referenced above to set up an app password on an account that had 2fa on, but which had never previously had any app passwords. It worked as described.

  • app passwords may not be available for certain account types - see “3.” in the document above.
1 Like

If your that paranoid about Google reading your emails and knowing more about you, why are you using Gmail to begin with? If you really need to use Gmail, just get a prepaid sim and use that as your “phone number”…

2 Likes

Yes you are right (no need to shout) I had app password working for six weeks but a few days ago my account would not connect so I thought Google has stopped app password. I have just checked again and my 2fa was off, I think I must have turned it off trying to get Claws working, anyway all working again now both Android and Claws.

I don’t think people are paranoid, gmail is handy for some mail but normally have other mail accounts for private stuff. Hence multiple accounts in K9

I’m not disagreeing here. I personally have a separate email account that’s not a Gmail account for private emails. That doesn’t mean that Google doesn’t have true 2FA options. They do. Some are more secure (U2F) than others (TOTP)…

I use a Gmail account for a lot of “throwaway” stuff – announcements, newsletters, and the like – and rarely actually send anything from Gmail. For that on my Android phone I use the native Gmail app, and on the Chromebook, which I use more and more these days, I simply use the browser interface. For my “serious, private” email account, I use Thunderbird on my WIn desktop box and K-9 Mail on my Chromebook. Works like a charm. I see that K-9 is going to be folded into the Thunderbird “family” so that may make it easier to synchronize across devices.

Otherwise you can also compile the app yourself. The code just compiles if you open it with Android Studio. The only disadvantage is that you either need a rooted device where signature checking is disabled, a decent backup - restore solution (also root required) or to setup your accounts again (should work for IMAP, but not for POP3 accounts who would lose mail).

The curent snapshot works excelent with Gmail.

I need a Gmail account because I control some Google API keys for projects I work on. I don’t use the mail address for anything non-Google related.

1 Like

I understand that. If you use google service, one needs a google account. I have one for “throwaway” stuff just like @slyphnoyde does. I still have 2FA enabled though…

Then the new question would be: “If you are that paranoid, why do you trust Google with you projects?”

I can hardly imagine any functionality you wouldn’t be able to implement with alternatives to Google‘s.

2 Likes

The fact is that one currently needs 2FA and app password to interact with Gmail in K9.

I think it is time to stop arguing with one another about what we think about that. 1. Google probably does not read this thread. 2. Even IF Google read this thread, they are not likely to revert to previous behavior.

3 Likes

Exactly. Google has made this decision and if one wants to continue using a mail client that doesn’t support OAuth authentication will have to enable 2FA. I’ve had accounts enabled with it for several years without any major issues…

1 Like

there used to be a trick to use app passwords without 2FA:

  • turn 2FA on
  • set up the app password
  • turn 2FA back off

I don’t know if this still works; Of course this does not help if your concern is sharing your phone number with google, but it helps if your concern is that you don’t want to use 2FA for other reasons.

With OAuth working like a charm in 6.100 there’s no longer a need for any tricks or workarounds :slightly_smiling_face: