As an administrator, follow these recommendations when you set up IMAP for your organization. First, complete the steps for admins. Then, make sure that your users turn on IMAP. If needed, have users refer to the troubleshooting section below.
Starting in March 2025, Google Workspace accounts no longer support less secure apps, third-party apps, or devices that ask you to sign in to your Google Account with your username and password. You must use OAuth to let these apps and devices access your account. Third-party email apps that are no longer supported include Microsoft Outlook and the mail app on iOS and MacOS. For detailed instructions and information, visit Transition from less secure apps to OAuth. For the latest dates, visit Google Workspace Updates.
Admin tasks
Turn on IMAP
Before you begin: If you need to set up a department or team for this setting, go to Add an organizational unit.
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Apps > Google Workspace > Gmail > End User Access.
Requires having the Gmail Settings administrator privilege.
- (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
- Scroll to POP and IMAP access.
- Click Enable IMAP access for all users.
- Choose an option for allowed email clients:
- Allow any mail client—Any IMAP email client can sync with Gmail.
- Restrict which mail clients users can use (OAuth mail clients only)—Limit the third-party email clients that can sync with Gmail.
- Enter the OAuth IDs of allowed email clients in the Comma separated list of OAuth client IDs field. For details, see OAuth IDs for common email clients.
- (Optional) To add more clients, separate OAuth IDs with a comma.
Important: You can’t add third-party email clients that use domain-wide delegation through a service account.
- Repeat these steps for each organizational unit where you want to turn on IMAP.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit.
Changes can take up to 24 hours but typically happen more quickly. Learn more
(Optional) Turn on less secure apps
If necessary, you can also turn on less secure apps for your users. Find the instructions at Manage access to less secure apps.
User tasks
Turn on IMAP
Have your users follow the instructions to Turn on IMAP in Gmail.
Troubleshoot
If you have issues getting IMAP to work, try these troubleshooting steps.
Enabling less secure apps leaves your data less secure.
- (Not Recommended) Turn on less secure apps on your Google Account page—If less secure app access is turned off for your account, leave this off and switch to more secure apps instead. If you can’t switch to a third-party mail app that supports modern security standards, you can turn less secure app access back on.
- Unlock CAPTCHA—If you can’t access your email, you might need to Take a CAPTCHA test.
Related topics
- Less secure apps & your Google Account
- Control access to less secure apps
- Google Account security settings
