Firetrust Support Forums

As of 15th May 2019, MailWasher users will have their OAUTH tokens revoked, and MailWasher will no longer be able to access GMail accounts using the OAUTH system.


What this means for users.
Users will have to be sure Less Secure Apps is enabled for their GMail account here
https://myaccount.google.com/lesssecureapps

In MailWasher you can check if you are using the OAUTH system presently, under Settings >> Accounts >> Incoming >> Advanced >> if Use OAUTH is checked, uncheck this Save.

Alternatively, if the Less Secure Apps option is not present, you need to create an App Password to use in MailWasher.
Your main GMail password stays the same, this special password is to only use in programs like MailWasher
https://support.google.com/accounts/answer/185833?hl=en




This is due to Google implementation a policy where only approved applications can access the OAUTH system, and to be approved you must have your application audited, costing anywhere between 15000-75000.

https://www.voice2biz.com/oauth-2-0-for ... -shutdown/

https://www.theregister.co.uk/2019/02/1 ... developer/

and to be approved you must have your application audited, costing anywhere between 15000-75000.

 

Can you say "extortion"?

Given it's a third party evaluation process, I imagine that is quite expensive depending on the scale of your app. In either case, too costly for us even at the bottom end

Well, it seems to me it would be an automated evaluation process. Sure they had to develop the evaluation code and create a safe and isolated testing environment. But I cannot imagine they need to charge those prices to recoup their investment.

FTR, I already had that option unchecked. What are the risks for us having that unchecked? I really don't want to stop using my gmail accounts.

I doubt there's any real risk, you're still using SSL when checking the account.

Long winded OAUTH article here https://www.csoonline.com/article/32164 ... works.html

Thanks. I'm not really worried - just wondering.

Never felt the need to use this so the loss does not impact me

Never used OAUTH — have also, been suggesting to most Users (at the public forums) to disable the damn thing.

FYI - I just got two MailWasher Newsletter emails about this new gmail policy. Both emails were tagged as spam by my ISP, Cox Communications. I'm not smart enough to know what caused them to be tagged as spam, but I note the default setting for Cox is for tagged emails to be dumped into their spam folders. These spam folders can only be accessed via their webmail webpage. Unless Cox users change how their Cox spam filters work, these notices may not be seen. I manually changed mine years ago so tagged messages remain in the Cox Inbox for MWP to grab. Most users don't do that.

I don't think this will result in MWP users missing the notice as they only got to my Cox email inbox because I registered my Cox email address with FT. MWP users who registered with a Gmail address should get the notice in their Gmail inbox - unless Gmail decides it is spam too!

Anyway, I thought I would mention this so FT can look at their newsletters to see if there is something in them triggering spam filters.

Thanks for your note! I've been wondering why my attempts to get gmail posts wasn't working. Noticed some disparities in the note:

You said we should get the latest version 7.12.5

My MW Help > About gives 7.12.1; Check for Updates gives "up to date".

At firetrust.com, the current version is 7.12.06

Pretty confusing. So for the devil of it I ran your first option in ver. 7.12.1. Works fine.

HTH - ed agro

Yeah the newsletter went south fast, we sent one version in error, the second had a typo in version.

The actual version is 7.12.6. To fix the update not detecting go into Settings >> General >> Updates >> click Go To Folder >> delete the updates.aiu file >> check for updates again.

Hi all, is there an issue with receiving gmail emails via MWPro please?

_Chris_ wrote: ↑

Tue May 14, 2019 5:59 pm

Hi all, is there an issue with receiving gmail emails via MWPro please?

You need to be sure Less Secure Apps is set to ON here https://myaccount.google.com/lesssecureapps
Then it should be business as usual.

Thank you. Is this something that has recently changed?

_Chris_ wrote: ↑

Tue May 14, 2019 6:13 pm

Thank you. Is this something that has recently changed?

Yes. The latest version of MailWasher no longer uses the OAUTH system for GMail accounts, as Google is going to revoke our ability to use OAUTH in a few days from now.

This is due to a change in Googles requirements, not a big deal, but certainly a bit annoying.