Gmail App Password Generator

When you enable 2-Step Verification (2FA) on your Google/Gmail account, regular passwords no longer work for third-party email clients like Outlook, Thunderbird, Apple Mail, or SMTP applications. Instead, you need a Gmail app password — a 16-character unique code that grants access to your Gmail account from less secure apps. This guide explains how to generate an official Google App Password, and below we provide a secure random generator for demonstration and understanding of app password structure.

Important: The official Google App Password can ONLY be generated from your Google Account security settings. Use our generator below to create a sample 16-character password format, but you must follow the steps to get a working Google App Password.

📧 How to Generate a Real Gmail App Password (Official Google Steps)

Step 1: Go to your Google Account → Security → 2-Step Verification (must be enabled).

Step 2: Scroll down and click on App passwords.

Step 3: Select the app you're using (e.g., Mail, Outlook, or Other) and device.

Step 4: Click Generate — Google will show a 16-character password.

Step 5: Copy this password and use it in your email client (replace your regular Gmail password).

Note: App passwords work even if you have 2FA enabled and cannot be used to log into your Google account via web browser.

🔐 Generate a Sample App Password (16-Character Format)

Use this tool to generate a secure 16-character password that follows the same format as official Google App Passwords. This helps you understand the structure or create temporary test passwords. Remember: Only Google's official generator creates working app passwords for your account.

Password Length

Include Special Characters?

Complete Guide to Gmail App Passwords

What is a Gmail App Password? An app password is a 16-character code that allows less secure apps or devices to access your Google Account when 2-Step Verification is enabled. Without an app password, email clients like Microsoft Outlook, Mozilla Thunderbird, Apple Mail, or SMTP-based applications cannot send or receive Gmail emails. App passwords are required because these older protocols (IMAP, POP3, SMTP) don't support modern 2FA verification codes.

Why You Need a Gmail App Password

Google introduced app passwords to enhance security while maintaining compatibility with third-party email clients. When you enable 2-Step Verification on your Google account, your regular Gmail password is no longer accepted by IMAP, POP3, or SMTP services. Instead, you must generate a unique 16-character Gmail app password for each device or application. This ensures that even if an app password is compromised, an attacker cannot access your Google account directly or bypass your 2FA.

Common Scenarios Requiring App Passwords

Outlook (Windows/Mac): Adding Gmail account via IMAP/SMTP.
Thunderbird: Open-source email client configuration.
Apple Mail & iOS Mail: Native email apps on iPhone/Mac.
WordPress or CMS: Sending emails via Gmail SMTP (smtp.gmail.com).
Backup Software: Tools that send email notifications via Gmail.
Legacy Applications: Old CRM or ERP systems with email integration.

Gmail SMTP Settings for App Passwords

When configuring an email client with your Gmail app password, use these standard Gmail SMTP/IMAP settings:

IMAP Server: imap.gmail.com (Port: 993, Security: SSL/TLS)
SMTP Server: smtp.gmail.com (Port: 587, Security: STARTTLS or TLS)
Username: Your full Gmail address (name@gmail.com)
Password: The 16-character app password (not your regular password)

Managing and Revoking App Passwords

You can manage all your generated app passwords from your Google Account Security page. It's recommended to create separate app passwords for each device/application — this way if one device is lost or compromised, you can revoke only that specific app password without affecting others. To revoke an app password: Go to Google Account → Security → App passwords → click the trash icon next to the password you want to remove. Regular password rotation (every 6-12 months) is also a security best practice.

Troubleshooting Gmail App Password Issues

If your app password doesn't work, check these common issues: Ensure 2-Step Verification is enabled on your Google account (required). Make sure you're using the correct 16-character password (no spaces). Verify that "Less secure app access" is not needed — app passwords replace that setting. If problems persist, generate a new app password and update your email client. Also ensure your client uses modern authentication (OAuth2 when available, otherwise app password). Google occasionally requires re-authorization, so refreshing your app password can resolve connection errors.

Security Best Practices

Never share your app password with anyone.
Store app passwords in a secure password manager.
Revoke unused or old app passwords immediately.
Use separate app passwords for each device/application.
Consider using OAuth2 authentication when supported instead of app passwords.
Regularly audit your Google Account's third-party access.

Use the Gmail app password generator above to create sample 16-character passwords in the correct format. For official working app passwords, always follow Google's 2-Step Verification → App passwords process. This ensures your Gmail account remains secure while allowing third-party email clients to function properly.