Carnegie Mellon University
Office of the CIO  ›  Computing Services  ›  Services  ›  Communication and Collaboration  ›  Email and Calendaring  ›  Google Mail  ›  How to Use Google Mail  ›  Retiring Less Secure Apps

Retiring Less Secure Apps

Beginning September 30, 2024, Google will no longer allow you to connect your Google account to non-Google apps via basic authentication, a method that grants an app direct access to your username and password.

Impacted apps you may be connected to via basic authentication, known as Less Secure Apps (LSAs), include older versions of email, calendar, and contacts apps like Thunderbird, Apple Mail, and Outlook. 

How does this change impact me?

If you are using LSAs or Google Sync, you will receive an email from Computing Services. You will need to reconnect to impacted apps or switch to a more modern option.  

If you don’t take action, you will receive login errors from impacted apps beginning September 30, 2024. 

Ultimately, we recommend using Google Mail and Calendar in a browser. If you wish to continue using other options, we offer basic support for Apple Mail and Calendar (Mac) and Outlook 365 (Windows), and configuration instructions for Mozilla Thunderbird.

How do I determine which LSAs I’m using?

Computing Services is unable to determine which LSAs you are using.  To determine which LSAs you are using, follow one of two strategies:

  • Review the list of common LSAs below and determine if you use any of them.
  • Wait until September 30, 2024, to see which apps begin generating login errors.

Remember to check all your devices, including both work and personal laptops, desktops, tablets, and mobile devices. If you do lose access to an app on September 30, you can use Google Mail and Calendar in a browser until you are able to reconnect.

Recconect or Replace Common LSAs

Switch to one of the following alternative tools:

  • Google Mail on the web
  • Google Mail mobile app (available from the Apple App Store or Google Play Store)
  • Apple Mail on iOS or macOS (Apple devices only)
  • Outlook 365 (Windows devices only)

Visit Client Configuration to learn how to set up Apple Mail, Outlook 365, and mobile applications.

1. Enable IMAP in Google Mail

  1. Visit https://mail.google.com/ and log in with your Andrew userID and password.
  2. Click the gear icon and then click See all settings.
  3. Click Forwarding and POP/IMAP.
  4. Click Enable IMAP.

Google Mail enables IMAP by default. If you do not see Enable IMAP, proceed to the next step.

2. Disconnect Your CMU Account in Thunderbird

  1. Open the Thunderbird application.
  2. Click the menu icon, and then click Account Settings. 
  3. If you are connected to multiple accounts, click on your @andrew.cmu.edu address.
  4. Click Account Actions, and then click Remove Account.

3. Reconnect Your CMU Account in Thunderbird

  1. From Account Settings, click Account Actions, and then click Add Mail Account.
  2. Review your full name, enter your @andrew.cmu.edu address, and click Continue.
  3. Opt to configure with IMAP (the default recommendation) and click Done.
  4. Use your Andrew userID and password to complete the login process.

Computing Services provides configuration instructions for Thunderbird because the app supports accessibility features that some users may need or prefer, but we are unable to offer direct support. Alternatively, you may consider switching to the Google Mail mobile app or Google Mail on the web.

We recommend switching to the Google Mail mobile app or Google Mail on the web. If you prefer to continue using Apple Mail, follow these steps:

MacOS (Apple Computers)

  1. Select the Apple menu and click System Settings.
  2. Click Internet Accounts.
  3. Click on your CMU Google account, then click Delete Account to remove the account from Apple Mail.
  4. From the Internet Accounts menu, click Add Account.
  5. Click Google and then Open Browser.
  6. Enter your @andrew.cmu.edu email address and click Next.
  7. Use your Andrew userID and password to complete the login process.

iOS (iPhone and iPad)

  1. Tap Settings, then Mail, then Accounts.
  2. Tap your CMU Google account, then click Delete Account.
  3. From the Accounts menu, tap Add Account.
  4. Tap Google, then tap Continue.
  5. Enter your @andrew.cmu.edu email address and click Next.
  6. Use your Andrew userID and password to complete the login process.
  1. Open the application and remove your CMU account.
  2. Reconnect your CMU account, opting to Sign In with Google.

Alternatively, switch to the mobile app or Google Mail on the web, Google Calendar on the web