An app password is a 16-digit code that lets an email client, printer, or script sign in to your Gmail account when regular sign-in isn’t available. You only need one if your Google Account has 2-Step Verification turned on and the app you’re connecting doesn’t support “Sign in with Google.” This guide walks through the exact steps to generate, use, and later remove a Gmail app password safely.
What Is a Gmail App Password?
A Gmail app password is a randomly generated 16-character code that grants a specific app or device access to your Google Account, separate from your main password. Google introduced app passwords because some older or third-party apps cannot handle the extra verification step required by 2-Step Verification. Consequently, Google lets these apps use a dedicated password instead, without exposing your actual account password.
App passwords work only for Google Accounts that already have 2-Step Verification enabled. Without it, the App Passwords option will not appear in your account settings at all.
When You Actually Need One (and When You Don’t)
You should not create an app password unless the app or device you want to connect genuinely lacks a “Sign in with Google” option. Most modern apps, including Gmail on iPhone and iPad running iOS 11 or later, support Google sign-in directly and never need an app password.
You’ll typically need an app password for older desktop email clients such as Outlook or Thunderbird, printers and scanners that send documents by email, smart home devices, and custom scripts that send email through Gmail’s SMTP server. In contrast, if the app offers Google sign-in, use that instead, as it’s more secure and doesn’t require managing a separate code.
Step 1: Turn On 2-Step Verification
Before you can generate an app password, 2-Step Verification must already be active on your account. To check or enable it, open your Google Account, go to the Security tab, and turn on 2-Step Verification under “How you sign in to Google.” You’ll need to confirm the setup using your phone. Once this is done, the app password option becomes available.
Step 2: Generate an App Password for Gmail
With 2-Step Verification active, follow these steps to create your app password:
1. Go to myaccount.google.com/apppasswords and sign in if prompted.
2. Enter a name for the app or device you’re connecting, such as “Outlook” or “Office Printer,” so you can identify it later.
3. Click Create. Google will display a 16-digit password in a yellow box.
4. Copy this code immediately, since it’s shown only once and cannot be viewed again later.
5. Paste the app password into the password field of the app or device you’re setting up, in place of your normal Gmail password.
Therefore, once entered correctly, the app should connect and stay signed in without asking for the code again on that device.
Common Problems and How to Fix Them
If you don’t see the option to create an app password, a few things could be blocking it. First, check that 2-Step Verification is fully enabled and not limited to security keys only, since that configuration hides the app password option. Additionally, work, school, or managed organization accounts often disable app passwords entirely through admin policy. Finally, accounts enrolled in Google’s Advanced Protection Program cannot use app passwords by design, as this is a deliberate security restriction.
If an app suddenly stops working after you changed your Google Account password, that’s expected behavior. Google automatically revokes all existing app passwords whenever you change your main password, so you’ll need to generate a new one and update the app.
How to Remove or Revoke an App Password
If you lose a device or stop using an app that had an app password, revoke it right away to keep your account secure. Visit your App Passwords page, find the entry for that app or device in the list, and click Remove next to it. As a result, that app password stops working immediately and can never be used again, even if someone else has it.
Is It Safe to Use an App Password?
Yes, app passwords are safe when used correctly, because each one only grants access to a single app rather than exposing your full account credentials. However, you should still treat an app password like any sensitive credential: never share it, store it insecurely, or reuse it across multiple apps. If you ever suspect one has been exposed, revoke it immediately and generate a fresh one.
Frequently Asked Questions
Do I need an app password for Gmail on my phone?
Usually not. Modern Gmail apps on Android and iOS support “Sign in with Google” directly, so an app password is rarely needed unless you’re using an unsupported or very old email app.
Why can’t I find the app password option in my Google Account?
This usually means 2-Step Verification isn’t turned on yet, is limited to security keys only, or your account is managed by a school, employer, or organization that disables the feature.
How long does a Gmail app password last?
An app password remains valid until you manually revoke it or until you change your main Google Account password, which automatically revokes all app passwords at once.
Can I use the same app password for multiple apps?
You can technically reuse one, but it’s not recommended. Generating a separate app password for each app or device makes it easier to track access and revoke a single one if a device is lost, without affecting your other connected apps.
Is an app password the same as my regular Gmail password?
No. An app password is a separate 16-digit code created specifically for one app or device, while your regular password is used to sign in to your Google Account directly.
Still running into sign-in issues after generating a password? Visit our Fix & Support section for more troubleshooting guides, or head to our Contact Us page if you need direct help. You can also browse our full app guides library for step-by-step tutorials on other apps.
