How to Generate a Gmail App Password for the Outlook Desktop App

Adding a Gmail account to the Outlook desktop app is usually a two-minute job. You enter your email address, sign in with Google, and you are done. But sometimes Outlook keeps asking for a password, or the account setup fails with a vague error, even though your password is correct.

In those cases the missing piece is often an app password: a special sixteen-character code that Google creates for programs that cannot complete the normal modern sign-in. This guide explains when you need one, how to generate it safely, and how to use it in Outlook without weakening the security of your main Google password.

Quick Answer

Turn on two-step verification for your Google account first, because app passwords only exist when it is active. Then go to your Google Account, open Security, and choose App Passwords. Create a password for Mail, copy the sixteen-character code, and paste it into Outlook in place of your normal Gmail password when you add the account manually. Save the code somewhere safe, because Google shows it only once.

What Is a Gmail App Password?

An app password is a one-purpose password that Google generates for a single program or device. Instead of giving Outlook your real Google password, you give it this code. The code only opens your mail, and you can cancel it at any time without changing your main password anywhere else.

This design solves two problems at once. First, older programs and some manual setups cannot show the Google sign-in window with its two-step verification, so they need another secure way in. Second, if the program or computer is ever compromised, you can revoke that one code and leave the rest of your account untouched.

When You Actually Need One

• Outlook asks for a password again and again, even though the password is right.
• You are adding Gmail with manual IMAP settings instead of the Google sign-in window.
• Your Outlook version is older and does not support modern Google sign-in.
• You use a scanner, backup tool, or other program that sends or reads mail through Gmail.

If the standard sign-in works, you do not need an app password at all. Google has been pushing accounts toward the safer sign-in window for years, and it should always be your first choice.

Before You Start: Turn On Two-Step Verification

Google only offers app passwords on accounts that use two-step verification. If you have never set it up, do that first.

1. Open your browser and sign in to your Google Account.
2. Click Security in the left-hand menu.
3. Under the heading about signing in to Google, choose 2-Step Verification.
4. Click Get Started and follow the steps to add your phone as the second step.
5. Finish the setup and confirm the status shows as On.

Google explains the whole process in its official guide to turning on two-step verification for your account. Keep your phone nearby, because you will need it again in a moment to approve the app password page.

Some work and school accounts are managed by an administrator who has disabled app passwords. If the option never appears even with two-step verification on, that policy is usually the reason, and only your administrator can change it.

How to Generate the App Password

With two-step verification active, generating the code takes less than a minute.

1. Go to your Google Account page and open the Security section.
2. Click App Passwords. Google may ask you to sign in again and confirm with your second step.
3. Type a name that will help you remember where the code is used, such as Outlook on my laptop.
4. Click Create.
5. Google shows a sixteen-character code, usually grouped in fours with spaces.
6. Copy the code exactly. The spaces do not matter when you paste it, but every character does.
7. Click Done only after you have saved the code.

Google’s own documentation, signing in with app passwords, confirms that each code is shown only once. If you close the window without saving it, there is no way to view it again; you simply create a new one and delete the old entry.

How to Use the App Password in Outlook Desktop

Now switch to Outlook and add the account using the manual route, which is where the app password belongs.

1. Open Outlook and go to File, then Add Account.
2. Enter your full Gmail address.
3. If Outlook opens the Google sign-in window, complete it normally; that route does not need the app password.
4. If Outlook instead shows fields for servers and a password, continue with manual setup and choose IMAP.
5. For the incoming server, use imap.gmail.com with port 993 and SSL/TLS encryption.
6. For the outgoing server, use smtp.gmail.com with port 587 and STARTTLS, or port 465 with SSL/TLS.
7. Enter your full Gmail address as the username for both servers.
8. In the password field, paste the sixteen-character app password, not your normal Gmail password.
9. Finish the wizard and let Outlook run its test messages.

Before Outlook can use IMAP, confirm it is enabled in Gmail itself. In Gmail settings on the web, open the Forwarding and POP/IMAP tab and make sure IMAP access is turned on.

The same idea works for other mail providers too. If you also use Yahoo, our walkthrough about generating a Yahoo app password for Outlook and Thunderbird follows the same pattern with Yahoo’s own security page.

Managing and Revoking App Passwords

Every app password you create is listed on the App Passwords page in your Google Account. Review that list from time to time. Delete any entry you no longer recognise or no longer use, such as one made for an old laptop you have sold.

Revoking a code takes effect right away. The program using it will stop syncing and ask for a password, which is exactly what you want if a device is lost. Your normal sign-in, your phone, and your other programs keep working because each code stands alone.

One important detail: changing your main Google password automatically revokes all app passwords. After a password change, you will need to create fresh codes for any program that used the old ones.

Troubleshooting Common Problems

Outlook Rejects the App Password

Paste the code again carefully, without extra spaces at the start or end. Confirm the username is the full Gmail address and that IMAP is enabled in Gmail settings. Also check that you did not accidentally paste your normal password or an older, revoked code.

The App Passwords Option Is Missing

This almost always means two-step verification is off, or your administrator has disabled the feature. Turn on two-step verification and look again. On managed accounts, ask the administrator about the policy or use the standard Google sign-in window in Outlook instead.

Setup Works but Sending Fails

Sending problems usually come from the outgoing settings. Double-check the SMTP server name, use port 587 with STARTTLS, and make sure outgoing authentication uses the same address and app password as the incoming side.

Common Mistakes to Avoid

• Using your real Gmail password in manual setup. With two-step verification on, manual setups need the app password; the real password will be rejected.
• Closing the code window without saving it. Google will never show that code again. Copy it first, then click Done.
• Sharing one app password across many programs. Create a separate code for each program so you can revoke them one at a time.
• Typing the code with the spaces and giving up. Spaces are optional, but missing or wrong characters are not. Pasting is safer than typing.
• Leaving old codes active forever. Review the list a few times a year and delete anything you do not still use.
• Saving the code in a plain note on the desktop. Store it in a password manager, or do not store it at all and simply generate a new one when needed.

Conclusion

A Gmail app password gives the Outlook desktop app a secure way in when the normal sign-in window cannot be used. Turn on two-step verification, create a named code on Google’s App Passwords page, and paste that code into Outlook’s manual IMAP setup in place of your real password. Keep each code separate for each program, review the list now and then, and revoke anything you no longer need. Your main password stays private, and Outlook stays connected.

Frequently Asked Questions

Is an app password less safe than my normal password?

No, when used properly it is safer for this job. It only gives access to mail through that one program, you can revoke it at any time, and your main password is never stored inside Outlook.

Why can I not find the App Passwords page?

The page only appears when two-step verification is turned on. It can also be hidden on work or school accounts by an administrator’s policy. Turn on two-step verification first, then look under Security in your Google Account.

How many app passwords can I create?

Google allows a generous number, enough for every program and device most people own. Create one per program rather than sharing, and delete codes for devices you no longer have.

What happens to app passwords if I change my Google password?

They are all revoked automatically as a safety measure. Any program that used one will stop syncing until you generate a fresh code and enter it again.

Can I use the same app password in Outlook on two computers?

It will work, but it is not the best habit. Separate codes let you cut off one computer, for example a lost laptop, without breaking mail on the other machine.