Showing questions tagged: Show all questions
  • Solved
  • Archived

OAuth 2.0

Gmail is going to require OAuth 2.0 sign-in SFAIK, that means I will no longer be able to access gmail with Thunderbird. Are there plans for Thunderbird to meet the OAuth… (read more)

Gmail is going to require OAuth 2.0 sign-in SFAIK, that means I will no longer be able to access gmail with Thunderbird. Are there plans for Thunderbird to meet the OAuth 2.0 requirement?

Asked by car-nuts 9 months ago

Answered by christ1 9 months ago

  • Solved
  • Archived

GMail security changes coming soon, affects access to POP and SMTP

I have been using Thunderbird for several years for my GMail accounts, and have always preferred to download my messages using the POP and SMTP protocols, rather than use… (read more)

I have been using Thunderbird for several years for my GMail accounts, and have always preferred to download my messages using the POP and SMTP protocols, rather than use the IMAP protocol which leaves them all on the web. Google now inform me that "To help keep your account secure, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. Instead, you’ll need to sign in using Sign in with Google or other more secure technologies, like OAuth 2.0. What do you need to do? Email software, like Outlook 2016 or earlier, has less secure access to your Gmail. Switch to Office 365, Outlook 2019 or newer, or any other email software where you can sign in using Sign in with Google." These changes are due to take effect from May 30th. How can I prepare for them and still use the POP and SMTP protocols after that date? Is OAuth 2.0 appropriate?

Asked by blackberrylane.co.uk 9 months ago

Answered by sfhowes 9 months ago

  • Solved
  • Archived

Thunderbird suddenly rejects my pop.gmail.com password.

Three days ago, Thunderbird started to give me a "Sending of password for user xxx.xxx@gmail.com did not succeed. Mail server pop.gmail.com responded: Username and passwo… (read more)

Three days ago, Thunderbird started to give me a "Sending of password for user xxx.xxx@gmail.com did not succeed. Mail server pop.gmail.com responded: Username and password not accepted.

I checked that it was accurate in the Saved Passwords panel and it is. I've entered it manually and still get the error message.

When I log onto Google from any browser with this account, it accepts the password. I can then access my gmail account with no trouble. My Firefox password manager shows the same password that is rejected by TB. My Gmail Android app on my smartphone and tablet also accept my logons with the same password. Only Thunderbird doesn't. I've tried deleting my pop.gmail.com login entry and re-creating it under the xxx.xxx@gmail.com account.

I had a Google Security warning 3 days ago, so suspect somebody might have hacked the account, changed the password, but didn't save his new password anywhere, so I have no idea what new password he might have changed it to. I am going to try changing my entire Google password and see if this will allow me to reset the TB password, but any other suggestions would be appreciated.

I have several other gmail accounts on Thunderbird and all of my accounts use the same passwords set for their accounts.google.com under the separate gmail addresses. How do I find out what to do to fix it?

Asked by Beartooth 2 years ago

Answered by sfhowes 2 years ago

  • Solved
  • Archived

Can't log in to GMail SMTP Server from TB

I have recently changed from using Microsoft Online to GMail service (not by choice). I now have a problem in that I cannot send emails from TB because TB still wants to … (read more)

I have recently changed from using Microsoft Online to GMail service (not by choice). I now have a problem in that I cannot send emails from TB because TB still wants to sign in to the Microsoft SMTP server, not the GMail SMTP server. I have tried various strategies, including delete / recreate account, but TB insists that I need to log in to the MS server. So atm I am receiving / viewing emails in TB (because I prefer TB), but sending / replying via GMail. Please help.

OS = openSUSE Leap 15.2 TB = 78.6.0

Asked by Greg_B 1 year ago

Answered by sfhowes 1 year ago

  • Solved
  • Archived

Will Thunderbird work with Gmail after 30th May 2022

I have just received this message from Google / Gmail: "Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Accou… (read more)

I have just received this message from Google / Gmail:

"Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. Instead, you’ll need to sign in using Sign in with Google or other more secure technologies, like OAuth 2.0"

I currently use an older version of MS Outlook that apparently won't work after these changes are introduced.

My question is - will Thunderbird work with Gmail after the 30th May deadline? Is it compatible with 'Sign in with Google'?

Thank you for your help.

Mike

Asked by Mike 9 months ago

Answered by Mike 9 months ago

  • Solved
  • Archived

Why all of a sudden is Google asking: Sign in with your Google Account?

Hi, TBird stores my email addresses and passwords - So why should Google get involved? Today I can't get to my Gmail accounts because a window pops up - << One ac… (read more)

Hi, TBird stores my email addresses and passwords - So why should Google get involved? Today I can't get to my Gmail accounts because a window pops up - << One account. All of Google.

Sign in with your Google Account...  >>

Why should I trust Google with all my eggs? The way they ask is aggressive even - a big white window, not a lot of text, no Help, no explanation; with no Hide/maximise/close window controls.

Phil.

Asked by Phil 1 year ago

Answered by christ1 1 year ago

  • Solved
  • Archived

How do I export my private PGP Key from the new Thunderbird Version?

How do I export my private PGP Key from the new Thunderbird Version? I created it when 72.2.1 was released and I want to backup it, but I have now idea how to export it. … (read more)

How do I export my private PGP Key from the new Thunderbird Version? I created it when 72.2.1 was released and I want to backup it, but I have now idea how to export it. I am using MacOS.

Thank you!

Asked by simclaphi 2 years ago

Answered by Wayne Mery 2 years ago

  • Solved
  • Archived

Thunderbird is not allowed to send mail for 2FA with Office365

Hi, My institution has stopped allowing mail to be sent via Thunderbird using OAuth2 because of security concerns. They write: "While Thunderbird uses Oauth2, it doesn't… (read more)

Hi, My institution has stopped allowing mail to be sent via Thunderbird using OAuth2 because of security concerns. They write:

"While Thunderbird uses Oauth2, it doesn't use/support it fully for sending mail. As such you can authenticate with oauth2 and download/receive mail on Thunderbird, but you can't send mail. Despite saying Outgoing mail uses oAuth2, Thunderbird still requires SMTP to be turned on to use it. This negates the security benefit from the decision to end legacy authentication, and is the change we are not able to do from the new policy. If Thunderbird were to fully support/use oauth2 for sending and receiving it should work. However, while thunderbird - or other mail clients - require SMTP in order to send mail, they will not be able to properly send mail."

Does / will Thunderbird address this and update? Is there an existing solution or explanation?

Asked by epoehler 10 months ago

Answered by Owl 10 months ago

  • Solved
  • Archived

Office365 SMTP Not Working

I used to be able to send emails using Thunderbird to Office365 using SMTP, but it is no longer working, although I'm still receiving emails. Getting the following error… (read more)

I used to be able to send emails using Thunderbird to Office365 using SMTP, but it is no longer working, although I'm still receiving emails.

Getting the following error: Login to server smtp.office365.com with username ***@*** failed

Settings Server: smtp.office365.com Port: 587 Encryption: STARTTLS

The problem occurs with Windows and also Mac OS (I installed Thunderbird to help troubleshoot).

I'm using Office 365 Family, so there is no option to manage the users, as there is in the business version, and which has been suggested by others with the same problem.

It's unclear to me if the problem lies with Thunderbird or Microsoft (I suspect the latter). Any advice would be very welcome.

Asked by codlins 12 months ago

Answered by codlins 11 months ago

  • Solved
  • Archived

Configuring Verizon e-mail to work with new AOL protocols - Follow Up Issue

I posted a question and got one answer that does not help. Verizon.net is now handled by AOL. In 4 days Thunderbird will not support it unless I comply with the new AOL … (read more)

I posted a question and got one answer that does not help.

Verizon.net is now handled by AOL. In 4 days Thunderbird will not support it unless I comply with the new AOL security settings. I am having trouble doing that unless I delete the Verizon.net account and re-install it thereby losing all my Sent messages. That will be painful. AOL did give me an App Generated Password to use but I cannot find the place in Thunderbird to add it.

The one answer* said if my incoming and outgoing servers are imap.aol.com and smtp.aol.com it would be easy. The server settings are: pop.verizon.net and smtp.verizon.net

Any other suggestions?????

  • Thank you SFH

Asked by mlipis 1 year ago

Answered by sfhowes 1 year ago

  • Solved
  • Archived

Thunderbird Password Manager Issues (91.2.1 64-bit Win7)

I've been using an older version of Thunderbird for years without issue to sign into my POP3 optimum online mail server. I recently "updated" so I could get the "Remove D… (read more)

I've been using an older version of Thunderbird for years without issue to sign into my POP3 optimum online mail server. I recently "updated" so I could get the "Remove Duplicate Emails" plugin working.

I now have the issue I've seen mentioned here numerous times: I can no longer save my password. I have to manually input it every time I open Thunderbird. If I enter my password and sign in, my mail works fine.

If I check the box to remember my password, it no longer connects to the server. Instead it attempts to connect for a few minutes, then gives me a "mail server timed out" error.

My saved passwords list is completely blank. There is only one profile folder in the Thunderbird profiles directory.

I have tried deleting/renaming the following files in the profile folder: - key3.db (does not reappear after new version, probably legacy) - key4.db - cert9.db - signons.sqlite (has also not reappeared after removing)

I have seen it also advised to delete/rename the following files, but they do not exist in my local profile folder: - pkcs11.txt - logins.json

I am not using CC cleaner or any other programs to scrub passwords.

Asked by jball9 1 year ago

Answered by sfhowes 1 year ago

  • Solved
  • Archived

Self-Signed Certificates. Unable to send mail with version 7.8.3.2. (Found a work-around)

I'm using hmailserver on a standalone Server 2019 (not a DC). It's for internal mail only, and that's it. So set up for SSL/TLS on port 465 and STARTTLS on port 143 using… (read more)

I'm using hmailserver on a standalone Server 2019 (not a DC). It's for internal mail only, and that's it. So set up for SSL/TLS on port 465 and STARTTLS on port 143 using a self-signed e-mail cert. There's no problem receiving, but unable to send e-mail with a a warning that the certificate can't be verified. Tried to "solve" the problem and I was unable to after a few hours. Overall, I'm not yet convinced where the problem is - the hmailserver program or the Thunderbird program. So time for a new approach. Instead of trying to figure out why it won't work, what can I do to "make" it work? So with a new approach I decided to see if I could find a work-around. I did.

Navigate to C:\Users\<pofile_name>\AppData\Roaming\Thunderbird\Profiles\<profile_in_use>\ and open the Cert_Override.txt file using notepad. List there you will see the data for your self-signed certificate, but only for the incoming mail port. (Port 143) in my case. It will look something like this: my.mail.server:143 OID.2.16.840.1.101.3.4.2.1 CE:D6:4C: (buch of key gibberish after this)

Copy the above to a new line, and the only thing you need to change is the port number. In my case, I changed it from port 143 to port 465 since that's what I use on the hmailserver program for the SMTP port. Then save the file. Now now the file looks like this: my.mail.server:143 OID.2.16.840.1.101.3.4.2.1 CE:D6:4C: (buch of key gibberish after this) my.mail.server:465 OID.2.16.840.1.101.3.4.2.1 CE:D6:4C: (buch of key gibberish after this) Now you can restart Thunderbird and when you check the certificate exceptions you'll see the cert listed twice - once for the incoming port and again for the outgoing port. I now have no problem receiving "or" sending e-mail through my end-to-end encrypted hmailserver program.

Asked by Carl1959 2 years ago

Answered by sfhowes 2 years ago

  • Solved
  • Archived

How to make Thunderbird 91 work with Yubikey 5?

Hello, I received a Yubikey 5 and all is working fine using GPG with it, except integration with Thunderbird on Windows. I followed this guide: https://wiki.mozilla.org/T… (read more)

Hello, I received a Yubikey 5 and all is working fine using GPG with it, except integration with Thunderbird on Windows.

I followed this guide: https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards including 64 windows section

I was able to successfully send mail to myself, but then thunderbird failed at decrypting this message: Thunderbird is indicating that key is not available and I see no prompt from gpg-agent. Key is correctly declared as GPG external.

If I try to decrypt tis email by storing it on file and using gpg in command line, it works fine: agent is asking for Yubikey PIN and gpg is decrypting the message. But this is an awful workaround, not user friendly at all.

I also did sanity check by sending to myself a message encrypted with a key generated by Thunderbird: all is working fine, the message is decrypted within Thunderbird.

=> How do you make Thunderbird decrypt message encrypted with key stored in Yubikey? How do you make the gpg-agent called by thunderbird?

Asked by AVsociaux 10 months ago

Answered by AVsociaux 9 months ago

  • Solved
  • Archived

How to use my certificate to sign digitally

Hi, I've been looking for the way to sign digitally my emails using my personal certificate (given to me by the government), but unfortunately I didn't found it. Several … (read more)

Hi, I've been looking for the way to sign digitally my emails using my personal certificate (given to me by the government), but unfortunately I didn't found it. Several tutorials indicate that the way to do this is configuring the certificate in Account settings -> Security, but for me there is no such option. The last group of settings for each account I have in my Thunderbird is "Return Receipts". Maybe I'm missing something?

Thank you for your help and time :)

Asked by dgarciagarcia 1 year ago

Answered by christ1 1 year ago

  • Solved
  • Archived

How do I cancel or bypass Add Security Exception pop up

I cannot override or cancel Add Security Exception pop up which has appeared this morning. All other functionality is inaccessible because of the pop-up and I cannot even… (read more)

I cannot override or cancel Add Security Exception pop up which has appeared this morning. All other functionality is inaccessible because of the pop-up and I cannot even close TB with X in top corner. I can only kill TB using Task Manager on my PC

This has been the result of my hosting company (Siteground) removing cpanel from its hosting last night and replacing it with something called Site Tools.

All my emails are safe and accessible via webmail but my business uses Thunderbird on numerous email accounts on several machines in different locations (COVID work at home) and all users have lost Thunderbird access.

Siteground writes this message on its service webpage: Your hosting plan(s) has been successfully switched to our Site Tools infrastructure. Although we have automatically verified the key functionalities of the migrated websites, we kindly ask you to check your website(s), emails, FTP accounts, SSH accounts, cron jobs or any other specific functionality you may have used. 
 IMPORTANT: If you use a local email client, please check its current outgoing/incoming server name setting. If they use the server hostname (example: secureXXX55.sgcpanel.com), you need to change them to mail.yourdomain.com (where you replace yourdomain.com with the domain name you are using for the email in questions). Otherwise your email client may stop working.

I spoke to the Siteground helpdesk who say this has to be done to make TB work again.

Unfortunately the popup is preventing me from making changes or doing anything to Thunderbird. Is there a way round this to change account settings? How do I avoid having to delete TB from every machine and rebuild dozens of email accounts on each one? HELP!

Asked by steve338 1 year ago

Answered by steve338 1 year ago

  • Solved
  • Archived

S/MIME and trusting other certificates

I am trying to get S/MIME set up properly. I have my personal certificate set up and installed - I can send signed messages. However, when I try to send an ecrypted mes… (read more)

I am trying to get S/MIME set up properly. I have my personal certificate set up and installed - I can send signed messages. However, when I try to send an ecrypted message to a recipent with a DOD certificate, I run into an error that the certificate is not valid. I have installed the DOD root certificates, trusted them for email/websites, and imported the individual's signature cert into the store.

How do I change the settings / trust on the individual's certificate to trust it? It is within the valid date range.

Asked by alan158 1 year ago

Answered by alan158 1 year ago

  • Solved
  • Archived

Storage of PGP passphrase

I have just upgraded from 68.12 to 78.2.2. I used Enigmail but I have migrated to the built-in openPGP. Everything runs as it should. But it seems that my passphrase has… (read more)

I have just upgraded from 68.12 to 78.2.2. I used Enigmail but I have migrated to the built-in openPGP. Everything runs as it should.

But it seems that my passphrase has been saved. In the old Enigmail, it used to ask for the passphrase regularly, which I found safer.

So in Thunderbird 78.2.2, is there a way to avoid the saving of the passphrase, or to define how long the passphrase should be saved (e.g. 15 min, session...)? If not, should I then use a master password to protect it? I cannot find the passphrase under saved passwords, so I am not sure where it is stored and therefore if the master password would protect the passphrase.

Thank you!

Asked by i 2 years ago

Answered by christ1 2 years ago

  • Solved
  • Archived

Thunderbird permissions for app

When I enter my SMS code as part of SSL/TLS security OAuth2 authentication method (see my account5 below) I get the following: ___________________________________________… (read more)

When I enter my SMS code as part of SSL/TLS security OAuth2 authentication method (see my account5 below) I get the following: __________________________________________________ Need admin approval Thunderbird www.thunderbird.net

Thunderbird needs permission to access resources in your organisation that only an admin can grant. Please ask an admin to grant permission to this app before you can use it. Have an admin account? Sign in with that account Return to the application without granting consent __________________________________________________

I don't know what app is being refered to in the above message but I am the administrator of my account and have given full permissions for Thunderbird to cross Windows Firewall etc. etc.

Since this problem started this morning I get the busy rotating symbol when accessing my account5 mail directories and their contents do not appear to be updating.

Some of the copious troubleshooting information provided from Thunderbire Help follows: ____________________________________________________

 Application Basics
   Name: Thunderbird
   Version: 91.4.1
   Build ID: 20211216022855
   Distribution ID:
   Update Channel: release
   User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.4.1
   OS: Windows_NT 6.1 7601
   Launcher Process: Enabled
   Multiprocess Windows: 0/0
   Fission Windows: 0/0
             Disabled by default
   Remote Processes: 4
   Enterprise Policies: Inactive
   Google Location Service Key: Missing
   Google Safebrowsing Key: Missing
   Mozilla Location Service Key: Missing
   Safe Mode: false
 Mail and News Accounts
   account1:
     INCOMING: account1, , (imap) outlook.office365.com:993, SSL, 3
     OUTGOING: , smtp.office365.com:587, 2, 3, true
   account2:
     INCOMING: account2, , (none) Local Folders, 0, 3
   account5:
     INCOMING: account5, , (imap) outlook.office365.com:993, SSL, 10
     OUTGOING: , smtp.office365.com:587, 2, 10, true
 Crash Reports for the Last 3 Days
 Remote Processes
   Type: Count
     Web Content: 3 / 8
     Extension: 1
 Security Software
   Type: Name
     Antivirus:
     Antispyware:
     Firewall:
 Environment Variables
   MOZ_CRASHREPORTER_DATA_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Crash Reports
   MOZ_CRASHREPORTER_EVENTS_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Profiles\fwghi177.IETimport\crashes\events
   MOZ_CRASHREPORTER_PING_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Pending Pings
   MOZ_CRASHREPORTER_RESTART_ARG_0: C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
   MOZ_CRASHREPORTER_STRINGS_OVERRIDE: C:\Program Files (x86)\Mozilla Thunderbird\crashreporter-override.ini
   MOZ_LAUNCHER_PROCESS: 1
 Important Modified Preferences
   accessibility.typeaheadfind.flashBar: 0
   browser.cache.disk.amount_written: 849303
   browser.cache.disk.capacity: 1048576
   browser.cache.disk.filesystem_reported: 1
   browser.search.region: AU
   extensions.lastAppVersion: 91.4.1
   font.internaluseonly.changed: true
   font.name.monospace.el: Consolas
   font.name.monospace.x-cyrillic: Consolas
   font.name.monospace.x-unicode: Consolas
   font.name.monospace.x-western: Consolas
   font.name.sans-serif.el: Calibri
   font.name.sans-serif.x-cyrillic: Calibri
   font.name.sans-serif.x-unicode: Calibri
   font.name.sans-serif.x-western: Times New Roman
   font.name.serif.el: Cambria
   font.name.serif.x-cyrillic: Cambria
   font.name.serif.x-unicode: Cambria
   font.name.serif.x-western: Cambria
   font.size.monospace.el: 14
   font.size.monospace.x-cyrillic: 14
   font.size.monospace.x-unicode: 14
   font.size.monospace.x-western: 14
   font.size.variable.el: 17
   font.size.variable.x-cyrillic: 17
   font.size.variable.x-unicode: 17
   gfx.crash-guard.d3d11layers.appVersion: 91.4.1
   gfx.crash-guard.d3d11layers.deviceID: 0x0659
   gfx.crash-guard.d3d11layers.driverVersion: 8.17.12.7628
   gfx.crash-guard.d3d11layers.feature-d2d: true
   gfx.crash-guard.d3d11layers.feature-d3d11: true
   gfx.crash-guard.d3d9video.appVersion: 78.14.0
   gfx.crash-guard.d3d9video.deviceID: 0x0659
   gfx.crash-guard.d3d9video.driverVersion: 8.17.12.7628
   gfx.crash-guard.status.d3d11layers: 2
   gfx.crash-guard.status.d3d9video: 2
   gfx.crash-guard.status.wmfvpxvideo: 2
   gfx.crash-guard.wmfvpxvideo.appVersion: 78.14.0
   gfx.crash-guard.wmfvpxvideo.deviceID: 0x0659
   gfx.crash-guard.wmfvpxvideo.driverVersion: 8.17.12.7628
   idle.lastDailyNotification: 1641365785
   layers.mlgpu.sanity-test-failed: false
   media.gmp.storage.version.observed: 1
   media.hardware-video-decoding.failed: false
   network.predictor.cleaned-up: true
   network.trr.blocklist_cleanup_done: true
   places.database.lastMaintenance: 1641185870
   places.history.expiration.transient_current_max_pages: 112348
   privacy.purge_trackers.date_in_cookie_database: 0
   security.disable_button.openCertManager: false
   security.disable_button.openDeviceManager: false
   security.remote_settings.crlite_filters.checked: 1635390021
   security.remote_settings.intermediates.checked: 1635390021
   security.sandbox.content.tempDirSuffix: {bfda8a1a-634b-4d7e-8fe6-b8b6bfbd896c}
   security.sandbox.plugin.tempDirSuffix: {65f21b5f-d21c-40f9-9190-e19dcdf55ea8}
   signon.importedFromSqlite: true
   storage.vacuum.last.index: 1
   storage.vacuum.last.places.sqlite: 1641272744
 Important Locked Preferences
 fission.autostart.session: false
 Places Database
 Accessibility
   Activated: false
   Prevent Accessibility: 0
   Accessible Handler Used: true
   Accessibility Instantiator:
 Library Versions
     Expected minimum version
     Version in use
     NSPR
     4.32
     4.32
     NSS
     3.68.2
     3.68.2
     NSSSMIME
     3.68.2
     3.68.2
     NSSSSL
     3.68.2
     3.68.2
     NSSUTIL
     3.68.2
     3.68.2
 Sandbox
   Content Process Sandbox Level: 0
   Effective Content Process Sandbox Level: 1
   Win32k Lockdown State for Content Process: Win32k Lockdown disabled -- Operating system not supported
 Startup Cache
   Disk Cache Path: C:\Users\re\AppData\Local\Thunderbird\Profiles\fwghi177.IETimport\startupCache\startupCache.8.little
   Ignore Disk Cache: false
   Found Disk Cache on Init: false
   Wrote to Disk Cache: true
 Internationalisation & Localisation
     Application Settings
     Requested Locales: ["en-GB","fr"]
     Available Locales: ["en-GB","en-US","fr"]
     App Locales: ["en-GB","en-US","fr"]
     Regional Preferences: ["en-AU"]
     Default Locale: "en-GB"
     Operating System
     System Locales: ["en-US"]
     Regional Preferences: ["en-AU"]
 Remote Debugging (Chromium Protocol)
   Accepting Connections: false
   URL:

Asked by u4207231 11 months ago

Answered by sfhowes 11 months ago

  • Solved
  • Archived

Thunderbird can not find PGP-keys for recipient

Hi, i can not send encrypted messages anymore. TB says the recipient has no matching key, but in the key-list the key is clearly shown. How can i debug this? Thanks! … (read more)

Hi,

i can not send encrypted messages anymore. TB says the recipient has no matching key, but in the key-list the key is clearly shown.

How can i debug this?

Thanks!

Asked by Commi_M 1 year ago

Answered by christ1 1 year ago

  • Solved
  • Archived

Gmail with Thunderbird using OAUTH2 - not Connecting nor creating a Cookie

This is my first post. But I have been reading and benefiting from all the expertise I have found here for many years! Thanks to all! Trying to plan ahead for the Gmail… (read more)

This is my first post. But I have been reading and benefiting from all the expertise I have found here for many years! Thanks to all!

Trying to plan ahead for the Gmail OAUTH2 change, I upgraded to Tbird 91.9.0.

My Account Settings all transferred to the new version. I do have multi Gmail accounts, as well as other email accounts, but from other posts here, this should matter.

While I am a long term Tbird user, I am a newbie with OAUTH2. I can't seem to connect. So I am writing here for help!

My setup: - Dell notebook running W10 - internet connection strong - am using a Netgear Nighthawk Hotspot Router, which works great with

    everything else, so I really doubt that is an issue

- testing without a firewall; running McAfee - resetting Tbird account back to "Normal Password", then Gmail connects

Incoming Server set to IMAP: imap.gmail.com:993 w SSL/TLS and OAuth2 Outgoing: smtp.gmail.com:465 w SSL/TLS and OAuth2

I have been consistently testing with the same gmail account: - YES, I know my password; it works with both the Gmail web interface,

   or after going back to "Normal Password" instead of OAUTH2

- allow any Alert emails via Gmail Web Interface, repeatedly. - Ran Captcha ... many times! In case someone else reading here needs this, it is here: https://accounts.google.com/b/0/DisplayUnlockCaptcha and you must be logged into the Gmail Web Interface when running this. I have learned to take a pause after running this, for it do its thing.

If Toad-Hall is reading this, I found your list of steps here very helpful: https://support.mozilla.org/en-US/questions/1375558 Worth repeating for others who are struggling, like me.

As recommended here: https://support.mozilla.org/en-US/questions/1373706 Cookies: all cleared Remembered Passwords: all cleared

Also looked at this: https://support.mozilla.org/en-US/questions/1375702 Originally, my cookies WERE blocked. I did need to change my Web Content as recommended in this post:

   Selected: Remember web sites and links I've visited
   Selected: Accept cookies from sites
   Accept third-party cookies: Always
   Keep until : they expire
   Not selected: 'Send web sites 'Do not track'..... 

Also: In Privacy and Security -> Web content -> Exceptions, added: https://accounts.google.com set to 'Allow' and Saved Changes. Then exit Tbird, took a short pause, started Tbird again, per the advice to properly update the files.

Should I be doing BOTH of these? This post shows options: https://support.mozilla.org/en-US/kb/automatic-conversion-google-mail-accounts-oauth20 So if I Select to accept cookies, should I also set the Exception??? I have tested various combinations of these settings, but not seeing a cookie.

In Tbird, when testing to connect, I see:

"Sign in with your Google Account" Enter my account password (I see an error msg here when I typo the password, no error when entered correctly) Also, have checked "Stay Signed In" while trying to Authorize, as recommended. then click Allow on the second screen.

After a few seconds, keep seeing popup in lower right corner of screen: "Authentication failure while connecting to server imap.gmail.com" Sometimes, this msg does not popup, which seems odd to me, but it still fails: Cookies: still empty Password: still empty

I keep updating and reading and updating the setups and testing again, but no cookies for me!


I admit I have gotten off track, testing and reading posts:

Thought my problem might involve Certificates for a while, but now do not think OAUTH2 is using Certificates. Right?

Thought for a bit it might be Javascript disabled, but I am NOT seeing the popup window that shows this error, from this post: https://support.mozilla.org/en-US/questions/1373379 refers to: https://support.mozilla.org/en-US/questions/1286410 Did find my way to Config editor: https://support.mozilla.org/en-US/questions/1349136 Followed this advice: "Click the 3-bar menu icon, Preferences, and find Config. editor at the bottom of the General section. Or, type editor in the search box at the top of Preferences." Then searched for "Javascript" and found most of settings were true, like javascript.enabled is "true". Should everything that a search for javascript finds be set to true? Since I do not see the error msg, I believe this is not my problem.


Stans posted another helpful summary here: https://support.mozilla.org/en-US/questions/1375538 "After you've changed your accounts to OAuth2, delete all records of your Google Account passwords from Thunderbird's password vault (Saved Passwords). With OAuth2, your passwords are not stored by Tbird. Instead, an OAuth2 token (a long string of meaningless characters) is stored in the password field. That's what you should see after completing the OAuth2 process for each of your accounts. You have to do it twice, once for incoming and once for outgoing server. Also, you must allow cookies in Thunderbird's Preferences, otherwise it won't work."

If I am following this correctly, after testing to try and authenticate, I should see a Cookie and a Saved Password being created but they are not.

Think this is my problem!


In Gmail web interface, I am not sure of some settings:

In Manage Your Google Account -> Security:

1. Should Sign-in 2-step verification be on/off? (its off) 2. Third Party apps w access shows Tbird (think this is new, don't recall it before) 3. Allow Less Secure App: turn off (was On for normal pswd; either way fails w OAUTH2) (think I have tested all combinations of the above, with no success) I welcome suggestions on how I should set these to connect with OAUTH2.

I feel like I am getting close here, but I am stuck. Is there anything else, maybe something I have not heard about, like Captcha, that I should try?

Have I missed a setting somewhere? Suggestions???

Meadowlark13

Asked by Meadowlark13 7 months ago

Answered by Toad-Hall 6 months ago