Google Workspace: connect with an app password

GTM Engine connects Google mailboxes over SMTP and IMAP with an app password. Google refuses your normal password for this (the error mentions 5.7.9 "application-specific password required"). Google sign-in (OAuth) for mailboxes is not available yet.

1. Turn on 2-Step Verification

App passwords exist only for accounts with 2-Step Verification. In your Google Account, open Security and turn on 2-Step Verification. On Google Workspace, an administrator may need to allow it in the Admin console (Security → Authentication → 2-Step Verification).

2. Create the app password

1. Open Google Account → Security → 2-Step Verification → App passwords (Google's help: Sign in with app passwords (opens in a new tab)).
2. Enter a name you will recognize, for example "GTM Engine", and create it.
3. Copy the 16-character password. Google shows it once.

If App passwords is missing, 2-Step Verification is off, the account only uses security keys, or your administrator disabled app passwords for the organization.

3. Make sure IMAP is on

Replies and bounces are read over IMAP. In Gmail settings, under Forwarding and POP/IMAP, IMAP access should be enabled (it is on by default for most accounts).

4. Connect in the app

In Email accounts → Connect, choose Google Workspace (app password). The servers are filled in for you:

Use the full email address as the user name for both and paste the app password. Test connection checks sending and receiving without saving or sending anything; Connect account tests again and saves only when it passes. The password is stored encrypted and never shown again.

If the test fails

• "Wrong user name or password": the app password was mistyped or revoked; create a new one.
• "Application-specific password required": you used the normal account password.
• IMAP fails but SMTP works: enable IMAP (step 3), or turn IMAP off in the form — then reply and bounce detection is off for that account.