How to Generate a Yahoo App Password for Outlook and Thunderbird

You add your Yahoo Mail account to Outlook or Thunderbird, enter the password you use on the website, and the sign-in fails again and again. The password is correct, so why will the program not accept it?

The answer is that Yahoo treats desktop mail programs differently. For security, Yahoo expects a special app password: a unique, randomly generated password created inside your Yahoo account just for that program. This guide shows how to generate one and use it correctly in both Outlook and Thunderbird.

Quick Answer

To generate a Yahoo app password, sign in to Yahoo in your browser, open Account Security, choose the option to generate an app password, name it for the program you are setting up, and copy the 16-character password Yahoo gives you. Then paste that app password, not your normal password, into Outlook or Thunderbird when it asks for your Yahoo password. Yahoo explains the feature on its help page about third-party app passwords.

Why Yahoo Requires an App Password

Your normal Yahoo password unlocks everything: your mail, your account settings, and your recovery options. Typing it into many different programs increases the risk if any one program or computer is compromised.

An app password is narrower. It lets one program send and receive mail for your account, but it cannot be used to change your account settings or sign in on the website. You can delete an app password at any time without affecting your main password.

Key Facts About Yahoo App Passwords

• Each app password is 16 letters long and shown only once when created.
• You can create a separate app password for each program and device.
• Deleting an app password immediately stops that program from accessing your mail.
• Your normal password keeps working on the Yahoo website and the Yahoo Mail app.
• If you change your main password, review your app passwords as part of your security check.

If you also use Gmail in Outlook, the process is similar but separate; see our guide about generating a Gmail app password for Outlook for that account.

Before You Start

1. Make sure you can sign in to Yahoo Mail in a web browser with your normal password.
2. Complete any security verification Yahoo requests, such as a code by text.
3. Have Outlook or Thunderbird open and ready, so you can paste the app password straight away.
4. Decide on a clear name for the app password, such as “Outlook on home laptop” or “Thunderbird on office PC”.
5. Plan to set up one program at a time, with its own app password.

Step-by-Step: Generate the Yahoo App Password

1. Open your browser and sign in to your Yahoo account.
2. Click your profile icon or name and open Account Info, then go to the Account Security tab. You can also open Yahoo’s account security page directly.
3. Look for the section about other ways to sign in or app passwords, and choose the option to generate an app password. Yahoo may ask you to confirm your password or complete a quick verification.
4. Type a name for the app password that tells you where it will be used.
5. Click Generate. Yahoo shows a 16-character password, usually grouped in four blocks of four letters.
6. Copy it exactly, including checking that no extra space is added at the start or end.
7. Keep the page open until the mail program accepts the password, because Yahoo will not show it again.

If you lose the password before using it, do not worry. Delete that app password entry and generate a fresh one. There is no way to view an old one again, by design.

Using the App Password in Outlook

1. Open Outlook and start adding a new account with your full Yahoo email address.
2. If Outlook offers automatic setup, let it try, and when it asks for a password, paste the app password instead of your normal one.
3. If automatic setup fails, choose manual setup and select IMAP.
4. Use imap.mail.yahoo.com as the incoming server with port 993 and SSL encryption.
5. Use smtp.mail.yahoo.com as the outgoing server with port 465 or 587 and SSL or TLS encryption.
6. Set the username to your full Yahoo email address everywhere it is asked.
7. Finish the setup and send a test message to yourself to confirm both sending and receiving work.

Using the App Password in Thunderbird

1. Open Thunderbird and choose to add a new mail account.
2. Enter your name, full Yahoo email address, and the app password in the password box.
3. Let Thunderbird look up the server settings, or enter them manually using the same IMAP and SMTP details listed for Outlook above.
4. Make sure authentication is set to use the password normally, and the username is your full email address.
5. Complete the setup and allow Thunderbird a few minutes to download your folders.
6. If you later change the password, update it in Thunderbird’s saved passwords under its settings, then restart Thunderbird.

Managing and Revoking App Passwords

Return to the Account Security page in your Yahoo account to see the list of app passwords you have created, shown by the names you gave them. Delete any you no longer use, such as one for a computer you have sold or a program you uninstalled. Deleting takes effect quickly and blocks that program’s access without touching your main password or your other app passwords. A tidy list also makes it obvious if an entry appears that you do not recognize, which would be a warning sign worth investigating immediately.

Troubleshooting When the App Password Fails

• Check for copied spaces: Paste the password into a plain text note first if you suspect extra characters, then copy it cleanly.
• Confirm the username: It must be the full email address, not just the part before the @ sign.
• Generate a fresh password: If one does not work after two careful tries, delete it and create a new one.
• Check server settings: One wrong port or encryption choice will block the sign-in even with the right password.
• Wait after account changes: If you just changed your main password or security settings, give the account a few minutes before testing.
• Test web sign-in: If you cannot sign in on the website either, the problem is the account itself, not the app password.

Common Mistakes to Avoid

• Using your normal password in the mail program: That is the original problem. Desktop programs need the app password.
• Sharing one app password across several programs: Use one per program so you can revoke access individually.
• Writing the app password on paper left by the computer: Store it in a password manager if you must keep it, though normally you only enter it once.
• Closing the Yahoo page before setup is finished: The password is shown once. Keep it visible or copied until the program accepts it.
• Trying to use the app password on the Yahoo website: It only works in the program it was created for, not for web sign-in.
• Creating many app passwords while troubleshooting: A pile of unnamed passwords becomes a security risk. Delete the failed ones as you go.

Conclusion

A Yahoo app password is a small extra step that makes using Outlook and Thunderbird safer. Generate it from your Yahoo Account Security page, give it a clear name, and paste it into your mail program in place of your normal password, using the standard Yahoo IMAP and SMTP settings. Keep the list of app passwords tidy, revoke the ones you stop using, and your desktop mail will stay connected without putting your main password at risk.

Frequently Asked Questions

How many Yahoo app passwords can I create?

Yahoo allows multiple app passwords so you can use a separate one for each program and device. Create only the ones you actually need, and delete any that stop being used so the list stays manageable and secure.

Is an app password the same as turning on two-step verification?

No. They are related security features but not the same thing. App passwords exist so older-style programs that cannot complete modern sign-in steps can still connect safely with a limited, revocable password.

Why is there no app password option in my account?

Make sure you are fully signed in and on the Account Security page, and complete any verification Yahoo requests. The option can also move slightly as Yahoo updates its pages, so look for wording about generating a password for third-party apps.

Do I need a new app password if I change computers?

Yes, that is the recommended approach. Generate a fresh app password for the new computer, and delete the one belonging to the old computer so it can no longer access your mail.

Will the app password stop working if I change my Yahoo password?

Your existing app passwords generally keep working, but changing your main password is a good moment to review the list. Delete anything you do not recognize or no longer use, and generate replacements where needed.