How to Connect Google Workspace via App Password

App Password lets you connect your Gmail or Google Workspace inbox to ColdSend using SMTP and IMAP credentials. You'll generate a dedicated password from your Google account settings and enter it in ColdSend — no OAuth setup required.

Recommended: Use OAuth instead. OAuth is more secure (no password storage), more reliable (automatic token refresh), and supports higher daily sending limits. See the Shared OAuth Guide for the quickest setup, or the Private OAuth Guide if you need your own app.

When to Use App Password

Use this option if:

• OAuth is not available for your account (e.g., restricted Workspace policies)
• You prefer SMTP/IMAP-based connections
• You're connecting a large number of inboxes via CSV bulk upload
• Your organization doesn't allow third-party OAuth apps

Prerequisites

• A Google Workspace or personal Gmail account
• 2-Step Verification enabled on your Google account (required to generate App Passwords)
• IMAP access enabled in your Gmail settings (usually on by default)

---

Step 1: Enable 2-Step Verification

App Passwords require 2-Step Verification to be active on your Google account.

1. Go to myaccount.google.com.
2. Click Security in the left sidebar.
3. Under Signing in to Google, find 2-Step Verification.
4. If it shows Off, click it and follow the setup:
   • Enter your Google account password
   • Add your phone number and verify the OTP
   • Click Turn On
5. You should now see a checkmark next to 2-Step Verification.

2-Step Verification

Google Workspace users: If 2-Step Verification is enforced by your admin, it may already be enabled. If it's disabled and you can't enable it, contact your Workspace admin.

---

Step 2: Generate an App Password

1. Go to myaccount.google.com/apppasswords.
2. You may be asked to re-enter your Google account password.
3. In the App name field, enter a descriptive label like "ColdSend".
4. Click Generate.
5. Google will display a 16-character password (e.g., abcd efgh ijkl mnop).

App Password

Important: Copy this password immediately — it will only be shown once. You'll use it in ColdSend in the next step. Spaces in the password are ignored by Google, so you can enter it with or without spaces.

---

Step 3: Connect in ColdSend

1. Log into your ColdSend account.
2. In the left sidebar, go to Sender Accounts.
3. Click the Create Email Account dropdown and choose Google Workspace.
4. Click the App Password tab at the top of the page.
5. Fill in the form:

App Password Form

1. The SMTP and IMAP settings are pre-filled for Google:

1. Click Connect.

---

Step 4: Verify Connection

1. ColdSend will test both the SMTP and IMAP connections.
2. On success, you'll see a confirmation message and your inbox will appear in the Connected Accounts section.
3. If the test fails, check the troubleshooting section below.

Connected Account

---

Connecting Multiple Accounts via CSV

If you need to connect many Google accounts at once, ColdSend supports bulk CSV upload.

1. Go to Sender Accounts → Create Email Account → Google Workspace.
2. Switch to the Bulk Upload tab.
3. Download the CSV template. It requires 4 columns:

email_address,display_name,app_password,daily_limit
john@company.com,John Doe,abcdefghijklmnop,100
jane@company.com,Jane Smith,qrstuvwxyzabcdef,50

1. Fill in your accounts and upload the CSV.
2. ColdSend will connect each inbox and report any failures.

Tip: Each account in the CSV needs its own App Password. The email account owner must generate one following Steps 1–2 above.

---

Troubleshooting

"Authentication failed" or "Invalid credentials"

• Ensure you're using an App Password, not your regular Google account password
• Verify the 16-character password was copied correctly (spaces are optional)
• Confirm the email address matches the Google account that generated the App Password

"IMAP is disabled for this account"

• Personal Gmail: Go to Gmail → Settings → Forwarding and POP/IMAP → Ensure IMAP is enabled
• Google Workspace: Your admin may have disabled IMAP. Ask them to go to admin.google.com → Apps → Google Workspace → Gmail → End User Access → Enable IMAP

"App passwords are not available"

• 2-Step Verification must be enabled to use App Passwords
• Google Workspace: Your admin may have disabled App Passwords for your organization. Contact your admin or use OAuth instead

SMTP connection timed out

• Ensure your network allows outbound connections on port 587
• Check that no firewall or proxy is blocking smtp.gmail.com
• Try a different network or VPN

Connection succeeds but emails aren't sending

• Verify your Google account isn't restricted from sending via less secure apps
• Check your daily sending limit hasn't been exceeded
• Look for any bounce notifications in ColdSend

---

FAQs

Is App Password as secure as OAuth?
No. OAuth is more secure because your password is never stored — authentication happens via encrypted tokens that auto-refresh. App Password stores your password (encrypted) and doesn't rotate automatically. We recommend OAuth whenever possible.

Can I use my regular Google password instead of an App Password?
No. Google requires App Passwords for SMTP/IMAP access when 2-Step Verification is enabled. Using your regular password will fail.

What's the daily sending limit?
Google Workspace accounts can send up to 2,000 emails per day via SMTP. Personal Gmail accounts are limited to 500 emails per day. Set your daily limit in ColdSend accordingly.

Can I use the same App Password for multiple ColdSend connections?
Technically yes, but we recommend generating a separate App Password for each connection. This lets you revoke individual connections without affecting others.

How do I revoke an App Password?
Go to myaccount.google.com/apppasswords and click the trash icon next to the App Password you want to remove. The corresponding ColdSend connection will stop working immediately.

Does this work with personal Gmail (not Workspace)?
Yes. App Password works with both Google Workspace and personal Gmail accounts, as long as 2-Step Verification is enabled.

Should I switch to OAuth later?
Yes, if possible. You can disconnect the App Password inbox, reconnect via Shared OAuth or Private OAuth, and your campaigns and sending history will be unaffected.