Google will disable all but OAuth for IMAP, SMTP and POP starting September 30th

What’s changing?

As part of our commitment to user safety, Google Workspace will no longer support the sign-in method for third-party apps or devices that require users to share their Google username and password. This antiquated sign-in method, known as Less Secure Apps (LSAs), puts users at an additional risk since it requires sharing Google Account credentials with third-party apps and devices that can make it easier for bad actors to gain unauthorized access to your account.

Instead, you’ll need to use the option to Sign-In with Google, which is a safer and more secure way to sync your email to other apps. Sign-in with Google leverages industry standard and more secure OAuth method of authentication already used by the vast majority of third-party apps and devices.

Access to Less Secure Apps (LSA) will be turned off in two stages: 

1. Beginning June 15, 2024:
◦ The LSA settings will be removed from the Admin console and can no longer be changed. Enabled users can connect during this time, but disabled users will no longer be able to access LSAs. This includes all third-party apps that require password-only access to Gmail, Google Calendar, Contacts via protocols such as CalDAV, CardDAV, IMAP, SMTP, and POP. 
◦ The IMAP enable/disable settings will be removed from users’ Gmail settings.
◦ If you’ve been using LSAs prior to this date, you can continue using them until September 30, 2024.

2 Beginning September 30, 2024:
◦ Access to LSAs will be turned off for all Google Workspace accounts. CalDAV, CardDAV, IMAP, POP and Google Sync will no longer work when signing in with just a password — you will need to login with a more secure type of access called OAuth.

As part of this change, Google Sync will also be sunsetted: 
• Beginning June 15, 2024: New users will not be able to connect to Google Workspace via Google Sync.
• September 30, 2024: Existing Google Sync users will not be able to connect to Google Workspace. Here is how you can transition your organization off Google Sync. To find Google Sync usage in your organization, please go to the Admin Console, navigate to Devices > Mobile & Endpoints > Devices, and filter by Type: Google Sync.