Cuir Leaganacha i gComparáid

How to set up Yahoo! services (including AOL, AT&T and other services that use Yahoo servers) in Thunderbird.

=NEW! Update to secure PKCE authentication settings, March 2026= {warning}You may have been asked in Thunderbird to log in your Yahoo, A&TT or AOL accounts, or seen a notice with the title '''Upcoming Account Change'''. This is the result of Thunderbird, as of version 148.0 on February 22, 2026, switching to a more secure authorization protocol known as OAuth2 with the [https://www.rfc-editor.org/rfc/rfc7636 PKCE] mechanism. Below are instructions to facilitate the login process.<br><br> In addition to increased security, this update also enables access to Yahoo, AOL, and AT&T calendars and address books directly in Thunderbird, which is a significant benefit for users. For more information, see the [[#w_oauth2-authorization|OAuth2 Authorization]] section below.{/warning} ==Using a single account== If you have only one account, no changes in Thunderbird are required for PKCE to work correctly. Simply log in ("authenticate") using your email address and account password ('''App passwords''' do not work with the OAuth2 protocol), and then grant Thunderbird permission to access your data on the provider's servers (AOL, AT&T, Yahoo, etc). This is a standard and secure process. If you encounter any problems, please refer to the [[#w_troubleshooting|Troubleshooting]] section below. ==Using multiple accounts== [[UI:details_start]] If you have more than one account, such as one one AOL account and one Yahoo account, the following steps must be performed for the PKCE mechanism to function correctly. ===Configuring a Thunderbird hidden preference to support multiple accounts=== For more information on hidden settings, see the [[Config Editor]] article. # [[T:optionspreferencestypeTb|type={menu Settings}]] # In the {menu General} panel scroll down to the bottom and click {button Config Editor…} button. # Click {pref Accept the risk and continue} if that appears. # Type '''mailnews.oauth.usePrivateBrowser''' into the search box. # Click the ''Toggle'' button [[Image:Config Editor Toggle|width=20]] to change the value to '''true'''. # Close Thunderbird {for win,linux}({key Ctrl+Q}){/for}{for mac}({key Command+Q}){/for}, then restart it. #Retry logging in to your accounts (Yahoo, AT&T, AOL). If you encounter issues, refer to the section [[#w_troubleshooting|Troubleshooting]]. [[UI:details_end]] <br> __TOC__ =OAuth2 Authorization= The OAuth2 protocol is used by default to access Yahoo services and partners such as AOL and AT&T. The partner provider (not Thunderbird) first displays its own OAuth2 dialog to confirm your account name and password, followed by a request to authorize the types of data Thunderbird will be allowed to use. [[UI:details_start]] ==OAuth2 Dialog Details== # First, you will be asked for your Username which is your email address and your Account Password (don't use any "App Passwords" that you might have). # Next, choose a method to verify your identity by sending a code to your phone or backup email address, then enter the received code in the next window. # Finally, grant permissions to the '''Thunderbird''' application to allow it to access your data – as before, access to mail is required, plus additionally to calendar and contacts. [[UI:details_end]] The access token (a string of characters, not a password) sent by the provider is then stored in Thunderbird's password manager, enabling future access to the server. Tokens expire after some time. In such a case, you must provide your login details along with your password again. If you do not know your password, use the provider's account page in a web browser to create a new password. This process is often called a "password reset". This authentication setting is automatically configured in Thunderbird '''Account Settings''' on first access for both sending and receiving email, and for accessing calendars and contacts in the respective settings of Thunderbird. The OAuth2 protocol also requires JavaScript and cookies, which are enabled by default in Thunderbird. =Mail Settings= ==POP== POP protocol settings are described on the Yahoo help page: [https://help.yahoo.com/kb/SLN3217.html POP access settings and instructions for Yahoo Mail]. ==IMAP== IMAP protocol settings are described on the Yahoo help page: [https://help.yahoo.com/kb/SLN4075.html IMAP server settings for Yahoo Mail]. ==Sign-in attempt was prevented== If you see the warning '''Username or password invalid''' and receive an email saying '''Sign-in attempt prevented''' while trying to connect to Yahoo mail with Thunderbird, it means Yahoo has blocked Thunderbird as a "less secure" third-party application.<br> Update: please refer to the section [[#w_important-changes-to-authentication-method-notice|Important Changes to Authentication Method Notice]] below. In Thunderbird version 68.5 and later, you can change the POP server to ''pop.mail.yahoo.<!---->com'' (port 995). ==Important Changes to Authentication Method Notice== Applies to people with a POP or IMAP mail account in Thunderbird who received a message from Yahoo saying: <br> ''"We’ve noticed that you’re using non-Yahoo applications (such as third-party email,calendar, or contact applications) that may use a less secure sign-in method. To protect you and your data, Yahoo will no longer support the current sign-in functionality in your application starting on 20 October 2020."'' '''Check if cookie support in Thunderbird is enabled.''' # [[T:optionspreferencestypeTb|type={menu Settings}]] #Open {menu Privacy & Security} panel and in the ''Web Content'' section check if the preference {pref &#9989; Accept cookies from sites} is selected. #Click the {button Exceptions…} button next to the {pref Accept cookies from sites} preference to ensure that cookies from sites like ''yahoo<!---->.com'', ''aol.<!---->com'' and ''att.<!---->com'' are not blocked. '''Update the 'Authentication Method' for a POP3 or IMAP mail account.''' # [[T:optionspreferencestypeTb|type={menu Settings}]] # At the bottom left panel of the window that appears, click {menu Account Settings}. # At the bottom in the right-hand corner of the account configuration window, click the {button Edit outgoing server…}. # Set the {pref Authentication method} to {menu OAuth2}. # Click the {button OK} button. # In the sidebar on the left, select the account and click {menu Outgoing Server Settings}. # In the window that appears, select the server and click the {button Edit…}. # Set the {pref Authentication method} to {menu OAuth2}. # Click the {button OK} button. # Close Thunderbird.<br>Wait a moment for background processes to finish. # Start Thunderbird. A prompt will appear asking you to log in to Yahoo ISP partner. During this process, an OAuth 2.0 key exchange will occur in Thunderbird, which will enable client authentication during future logins. =Import Yahoo's Contact List to Thunderbird= # Log in to your Yahoo mail account in any web browser. # In the panel on the right side of the screen click the [[Image:yahoo_contacts|width=20]] icon or the '''Contacts''' menu – depending on the Yahoo interface you are using. The contact list will be displayed. # At the top of the list, click the [[Image:3-dotMenu|width=20]] icon. # From the menu, select {menu Export to CSV file}. # Save the file ({filepath contacts.csv}) on your desktop or another easy-to-find location. # Open Thunderbird. # In the {menu Tools} menu, select {menu Import…}. # In the import tool window that appears, select {pref Import from file} and click {button Continue}. The import from file window will be displayed. # Select {pref Import Address Books} and click the {button Continue} button. # In the window that appears, select {pref Comma or Tab separated file (.csv, .tsv)} and click the {button Continue} button. # Point to the previously saved {filepath contacts.csv} file. A list of contacts to import will be displayed. # Click the {button Continue} button. # Select where to import the data and click the {button Continue} button. In the window that appears, confirm the import by clicking the {button Start Import} button. # Yahoo contacts will be imported according to the selected options. =Calendar= To configure a Thunderbird calendar with a Yahoo Calendar, follow the instructions at the page [https://help.yahoo.com/kb/SLN4704.html Sync or access your calendar on multiple devices and applications] on the Yahoo support site. =Troubleshooting= {note}The following actions: deleting and re-adding accounts, clearing the cache, creating a new profile, and restoring a profile from a backup usually do not help resolve issues.{/note} ==What to check before asking for support?== # Does the password that is being rejected by Thunderbird allow you to log in to the provider's webmail interface? If you cannot log in via the website, the password may be incorrect or has expired. The simplest solution is to reset it on the provider's website. # Is cookie support enabled in Thunderbird? In Thunderbird settings, under the "Privacy & Security" panel, the {pref Accept cookies from sites} option must be checked. # Is the OAuth2 dialog window fully visible, or are any buttons missing? Check if the OAuth2 window is hidden behind another window. #Are you connecting from the country where the account is typically used, and are you sure a VPN is not active? # Is the authentication method set to '''OAuth2''' in {menu Account Settings} under {menu Server Settings} for AOL, AT&T, and Yahoo accounts? # Is your antivirus or firewall potentially blocking Thunderbird from opening the authentication page? Try temporarily disabling it to test the connection. ==How to ask for support?== If the problem persists, you can send a help request [https://support.mozilla.org/questions/new/thunderbird on this page], providing the following information: * Thunderbird version number, e.g., 148.0, 140.8.0esr, 149.0b1. * A list of all mail providers, e.g., AT&T, AOL, Yahoo, etc. * A list of all steps taken to resolve the issue and confirmation of checking the points listed in the [[#w_what-to-check-before-asking-for-support|What to check before asking for support]] section. * Screenshots showing failed attempts or the exact text of the error message from the mail provider.