I-Thunderbird Isithangami Sokwesekwa

Gmail is going to require OAuth 2.0 sign-in SFAIK, that means I will no longer be able to access gmail with Thunderbird. Are there plans for Thunderbird to meet the OAuth 2.0 requirement?

I used to be able to send emails using Thunderbird to Office365 using SMTP, but it is no longer working, although I'm still receiving emails.

Getting the following error: Login to server smtp.office365.com with username ***@*** failed

Settings Server: smtp.office365.com Port: 587 Encryption: STARTTLS

The problem occurs with Windows and also Mac OS (I installed Thunderbird to help troubleshoot).

I'm using Office 365 Family, so there is no option to manage the users, as there is in the business version, and which has been suggested by others with the same problem.

It's unclear to me if the problem lies with Thunderbird or Microsoft (I suspect the latter). Any advice would be very welcome.

Hi, My institution has stopped allowing mail to be sent via Thunderbird using OAuth2 because of security concerns. They write:

"While Thunderbird uses Oauth2, it doesn't use/support it fully for sending mail. As such you can authenticate with oauth2 and download/receive mail on Thunderbird, but you can't send mail. Despite saying Outgoing mail uses oAuth2, Thunderbird still requires SMTP to be turned on to use it. This negates the security benefit from the decision to end legacy authentication, and is the change we are not able to do from the new policy. If Thunderbird were to fully support/use oauth2 for sending and receiving it should work. However, while thunderbird - or other mail clients - require SMTP in order to send mail, they will not be able to properly send mail."

Does / will Thunderbird address this and update? Is there an existing solution or explanation?

I received the following from my e-mail provider, and as a total dumbo about this, want to ask if I need to do anything about this in Thunderbird (Linux). As far as I can see, my e-mail account in Thunderbird is set to POP3, encrypted using SSL/TLs, normal password - can anyone tell me if this is OK - Thanks.

Quote: "We are contacting you because one or more of your devices or programs uses the TLS 1.0 and/or TLS 1.1 encryption protocols to connect to our mail.com email servers, or is using an unencrypted connection. This involves either access via SMTP (sending emails) or retrieval via POP3/IMAP (receiving emails).

Unfortunately, the TLS 1.0 and TLS 1.1 encryption protocols are outdated and no longer meet current security standards. To protect your email communications, soon we will no longer allow access to our mail.com servers with these outdated protocols. Unencrypted access will also no longer be possible.

After the protocols have been deactivated, the transfer of emails between your affected device or program and our mail.com servers will no longer work; i.e. no emails will be transmitted to or from your mail.com email account using TLS 1.0 and TLS 1.1. Furthermore, unencrypted SMTP/IMAP/POP3 connections will no longer function. In other words, as of Oct. 5, 2022, it will only be possible to connect if TLS 1.2 or TLS 1.3 encryption is in place." Unquote

When I enter my SMS code as part of SSL/TLS security OAuth2 authentication method (see my account5 below) I get the following: __________________________________________________ Need admin approval Thunderbird www.thunderbird.net

Thunderbird needs permission to access resources in your organisation that only an admin can grant. Please ask an admin to grant permission to this app before you can use it. Have an admin account? Sign in with that account Return to the application without granting consent __________________________________________________

I don't know what app is being refered to in the above message but I am the administrator of my account and have given full permissions for Thunderbird to cross Windows Firewall etc. etc.

Since this problem started this morning I get the busy rotating symbol when accessing my account5 mail directories and their contents do not appear to be updating.

Some of the copious troubleshooting information provided from Thunderbire Help follows: ____________________________________________________

 Application Basics

   Name: Thunderbird
   Version: 91.4.1
   Build ID: 20211216022855
   Distribution ID:

   Update Channel: release
   User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.4.1
   OS: Windows_NT 6.1 7601

   Launcher Process: Enabled
   Multiprocess Windows: 0/0
   Fission Windows: 0/0
             Disabled by default
   Remote Processes: 4
   Enterprise Policies: Inactive
   Google Location Service Key: Missing
   Google Safebrowsing Key: Missing
   Mozilla Location Service Key: Missing
   Safe Mode: false

 Mail and News Accounts
   account1:
     INCOMING: account1, , (imap) outlook.office365.com:993, SSL, 3
     OUTGOING: , smtp.office365.com:587, 2, 3, true

   account2:
     INCOMING: account2, , (none) Local Folders, 0, 3

   account5:
     INCOMING: account5, , (imap) outlook.office365.com:993, SSL, 10
     OUTGOING: , smtp.office365.com:587, 2, 10, true

 Crash Reports for the Last 3 Days

 Remote Processes

   Type: Count

     Web Content: 3 / 8
     Extension: 1

 Security Software

   Type: Name

     Antivirus:
     Antispyware:
     Firewall:

 Environment Variables

   MOZ_CRASHREPORTER_DATA_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Crash Reports
   MOZ_CRASHREPORTER_EVENTS_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Profiles\fwghi177.IETimport\crashes\events
   MOZ_CRASHREPORTER_PING_DIRECTORY: C:\Users\re\AppData\Roaming\Thunderbird\Pending Pings
   MOZ_CRASHREPORTER_RESTART_ARG_0: C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
   MOZ_CRASHREPORTER_STRINGS_OVERRIDE: C:\Program Files (x86)\Mozilla Thunderbird\crashreporter-override.ini
   MOZ_LAUNCHER_PROCESS: 1

 Important Modified Preferences

   accessibility.typeaheadfind.flashBar: 0
   browser.cache.disk.amount_written: 849303
   browser.cache.disk.capacity: 1048576
   browser.cache.disk.filesystem_reported: 1
   browser.search.region: AU
   extensions.lastAppVersion: 91.4.1
   font.internaluseonly.changed: true
   font.name.monospace.el: Consolas
   font.name.monospace.x-cyrillic: Consolas
   font.name.monospace.x-unicode: Consolas
   font.name.monospace.x-western: Consolas
   font.name.sans-serif.el: Calibri
   font.name.sans-serif.x-cyrillic: Calibri
   font.name.sans-serif.x-unicode: Calibri
   font.name.sans-serif.x-western: Times New Roman
   font.name.serif.el: Cambria
   font.name.serif.x-cyrillic: Cambria
   font.name.serif.x-unicode: Cambria
   font.name.serif.x-western: Cambria
   font.size.monospace.el: 14
   font.size.monospace.x-cyrillic: 14
   font.size.monospace.x-unicode: 14
   font.size.monospace.x-western: 14
   font.size.variable.el: 17
   font.size.variable.x-cyrillic: 17
   font.size.variable.x-unicode: 17
   gfx.crash-guard.d3d11layers.appVersion: 91.4.1
   gfx.crash-guard.d3d11layers.deviceID: 0x0659
   gfx.crash-guard.d3d11layers.driverVersion: 8.17.12.7628
   gfx.crash-guard.d3d11layers.feature-d2d: true
   gfx.crash-guard.d3d11layers.feature-d3d11: true
   gfx.crash-guard.d3d9video.appVersion: 78.14.0
   gfx.crash-guard.d3d9video.deviceID: 0x0659
   gfx.crash-guard.d3d9video.driverVersion: 8.17.12.7628
   gfx.crash-guard.status.d3d11layers: 2
   gfx.crash-guard.status.d3d9video: 2
   gfx.crash-guard.status.wmfvpxvideo: 2
   gfx.crash-guard.wmfvpxvideo.appVersion: 78.14.0
   gfx.crash-guard.wmfvpxvideo.deviceID: 0x0659
   gfx.crash-guard.wmfvpxvideo.driverVersion: 8.17.12.7628
   idle.lastDailyNotification: 1641365785
   layers.mlgpu.sanity-test-failed: false
   media.gmp.storage.version.observed: 1
   media.hardware-video-decoding.failed: false
   network.predictor.cleaned-up: true
   network.trr.blocklist_cleanup_done: true
   places.database.lastMaintenance: 1641185870
   places.history.expiration.transient_current_max_pages: 112348
   privacy.purge_trackers.date_in_cookie_database: 0
   security.disable_button.openCertManager: false
   security.disable_button.openDeviceManager: false
   security.remote_settings.crlite_filters.checked: 1635390021
   security.remote_settings.intermediates.checked: 1635390021
   security.sandbox.content.tempDirSuffix: {bfda8a1a-634b-4d7e-8fe6-b8b6bfbd896c}
   security.sandbox.plugin.tempDirSuffix: {65f21b5f-d21c-40f9-9190-e19dcdf55ea8}
   signon.importedFromSqlite: true
   storage.vacuum.last.index: 1
   storage.vacuum.last.places.sqlite: 1641272744

 Important Locked Preferences

 fission.autostart.session: false

 Places Database

 Accessibility

   Activated: false
   Prevent Accessibility: 0
   Accessible Handler Used: true
   Accessibility Instantiator:

 Library Versions

     Expected minimum version
     Version in use

     NSPR
     4.32
     4.32

     NSS
     3.68.2
     3.68.2

     NSSSMIME
     3.68.2
     3.68.2

     NSSSSL
     3.68.2
     3.68.2

     NSSUTIL
     3.68.2
     3.68.2

 Sandbox

   Content Process Sandbox Level: 0
   Effective Content Process Sandbox Level: 1
   Win32k Lockdown State for Content Process: Win32k Lockdown disabled -- Operating system not supported

 Startup Cache

   Disk Cache Path: C:\Users\re\AppData\Local\Thunderbird\Profiles\fwghi177.IETimport\startupCache\startupCache.8.little
   Ignore Disk Cache: false
   Found Disk Cache on Init: false
   Wrote to Disk Cache: true

 Internationalisation & Localisation

     Application Settings
     Requested Locales: ["en-GB","fr"]
     Available Locales: ["en-GB","en-US","fr"]
     App Locales: ["en-GB","en-US","fr"]
     Regional Preferences: ["en-AU"]
     Default Locale: "en-GB"

     Operating System
     System Locales: ["en-US"]
     Regional Preferences: ["en-AU"]

 Remote Debugging (Chromium Protocol)

   Accepting Connections: false
   URL:

Hello, I received a Yubikey 5 and all is working fine using GPG with it, except integration with Thunderbird on Windows.

I followed this guide: https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards including 64 windows section

I was able to successfully send mail to myself, but then thunderbird failed at decrypting this message: Thunderbird is indicating that key is not available and I see no prompt from gpg-agent. Key is correctly declared as GPG external.

If I try to decrypt tis email by storing it on file and using gpg in command line, it works fine: agent is asking for Yubikey PIN and gpg is decrypting the message. But this is an awful workaround, not user friendly at all.

I also did sanity check by sending to myself a message encrypted with a key generated by Thunderbird: all is working fine, the message is decrypted within Thunderbird.

=> How do you make Thunderbird decrypt message encrypted with key stored in Yubikey? How do you make the gpg-agent called by thunderbird?

Hello,

This morning when I opened Thunderbird it wouldn't accept my master/primary password. I've used the same one for years, so I know I've not forgotten it. Plus it worked yesterday!

Only thing that seems to have changed is the update to Thunderbird 91.

Any tips would be greatly appreciated.

I have been using Thunderbird for several years for my GMail accounts, and have always preferred to download my messages using the POP and SMTP protocols, rather than use the IMAP protocol which leaves them all on the web. Google now inform me that "To help keep your account secure, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. Instead, you’ll need to sign in using Sign in with Google or other more secure technologies, like OAuth 2.0. What do you need to do? Email software, like Outlook 2016 or earlier, has less secure access to your Gmail. Switch to Office 365, Outlook 2019 or newer, or any other email software where you can sign in using Sign in with Google." These changes are due to take effect from May 30th. How can I prepare for them and still use the POP and SMTP protocols after that date? Is OAuth 2.0 appropriate?

I have just received this message from Google / Gmail:

"Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password. Instead, you’ll need to sign in using Sign in with Google or other more secure technologies, like OAuth 2.0"

I currently use an older version of MS Outlook that apparently won't work after these changes are introduced.

My question is - will Thunderbird work with Gmail after the 30th May deadline? Is it compatible with 'Sign in with Google'?

Thank you for your help.

Mike

Running Windows 11, Thunderbird version 91.6.2(64 bit), NordVPN Prior to installing NordVPN all the gmail accounts worked fine. Since installing the vpn I get an email message from Google, for each of my gmail accounts, saying my account has been locked or blocked due to suspicious activity. The messages goes on to say someone tried to sign into my email account, using my password, from Phoenix, AZ (I live in Texas) with the date, time, etc. Since I won't give Google my cell phone number, I had to set up something like a recovery email address, other than gmail, for each gmail accounts. Every time I open the vpn I get these messages in 6 different email accounts and I have to disconnect the vpn and then open the messages in each account and click on "Yes it was me". I'm not sure what the time frame is but if I don't respond "Yes it was me" within the time frame I have to change the passwords on all my Gmail accounts. As a side note I have other mail accounts with @verizon.net and I never have this problem with the @verizon.net accounts. What I have been doing is closing Thunderbird before I open the vpn, but it's a pain, and I'm hoping there is a better solution. I'm attaching a screen shot of my Gmail account setting in hopes it's just a setting that needs to be tweaked.

I have tried to do the reset as described (I entered chrome://pippki/content/resetpassword.xhtml in Firefox) and got to the dialog with the reset option and selected it and got message that password had been reset. However, I still cannot get into Thunderbird without entering the Primary Password. How do I actually reset the password so that I can get into Thunderbird?

Hi

I'm trying to set up another email account but the Confirm Security Exception dialogue is preventing it. The exception is already stored but still keeps asking and when I reconfirm the dialogue flashes off/on and doesn't not disappear preventing the set up of the account. I have other emails from the same host and have not had this issue before. Anything I maybe doing wrong or bug? I've added a screenshot.

Many thanks Alan

I have upgraded to the Microsoft 365 Business Professional email service which should allow me to continue with Thunderbird, now that basic authentication is no longer supported.

I have enabled Exchange settings. Also, POP/IMAP and SMTP are authorized in the MS 365 account, and those setting are correct in T-Bird. From within Thunderbird, a login screen for the MS 365 email account is generated when T-Bird attempts to log in to the server, but the log in just takes me to the server page in the browser.

This help article https://support.mozilla.org/en-US/kb/microsoft-oauth-authentication-and-thunderbird-202 advises that Thunderbird may need to be authorized. I followed the link, but was not able to make it work.

Given the following provided link, what is to be used for {tenant-id} ? https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=9e5f94bc-e8a4-4e73-b8be-63364c29d753

Any other advice? Thank you very much!

I have been getting this message since January and am starting to be concerned

Secure connection failed start.thunderbird.net uses an invalid security certificate. The certificate is not trusted because the issuer certificate has expired. Error code: <a id="errorCode" title="SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE">SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</a>

  This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
  If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception… When I click on add an exception nothing happens. I tried closing Thunderbird, deleting my cert8.db file and restarting Thunderbird - no change - same message. I am running Windows 10, Thunderbird version 45.8.0

Help, please ! Thanks, Sarah

Hi,

I used to use Thunderbird to access Gmail, Yahoo mail and normal email account (all POP3).

I have updated (not reinstall) Thunderbird to the latest version since Gmail disabled non secure apps access.

I have changed the Authentication to OAuth by follow the instruction from your page, but the system keep asking me to login (I have grant access in Gmail).

This happens not only Gmail as well as my Yahoo mail and normal POP3 account. I am sure the password is correct and still cannot get my emails from all of my accounts.

I also notice the token/password has not been saved to the system in Saved Password session. ( I have tried to run as administrator but still doesn't work.)

What have I missed? Can still using POP3 method to get email if problem solved?

My current system is Win7 with Thunderbird 32bit installed.

Thanks!!

Network Solutions upgraded their email, and I multiply-checked all my settings in Thunderbird (102.3.2) and can retrieve mail but the outgoing mail hangs and time out with an error. I just discovered it's not my settings, but there's no password listed for the default outgoing SMTP server (my own domain). (I have 2 email accounts, and listed in the "Saved Passwords" are 2 passwords for incoming IMAP plus one the other account outgoing SMTP, 3 total.)

Is there any way to add a password without deleting the default server and then adding it back in, or some other solution?

Thanks

I am using the latest Thunderbird 91.2.1 under Windows 10.

Passwords are not being saved even when I click to save with password manager.

Older posts suggest deleting:

  \Users\userid\AppData\Roaming\Thunderbird\Profiles\defaultProfile\pkcs11.txt
  

but this file is not present in the latest version.

An earlier version of Thunderbird was uninstalled before the latest version was downloaded and installed.

I have w10 laptop and TB junk settings set to Other>Junk @email address. In my listings of folders under the Junk setting there appears two folders -one for junk and one for spam which is just fine. My problem is that every day the same type junk/spam emails come into my inbox and I have to again mark as spam/junk. Each day after I move the message to my junk/spam I make sure the junk icon is orange. I have tried to leave them there for a few days and/or delete them after making sure they are marked as Junk/spam. How do I get them to automatically go there and not come into my inbox once marked?

It would be great if Mozilla Support would stop archiving the old threads on the OAuth2 issues.

Every 2 years or so something happens and I have to reconfigure Thunderbird to accept my gmail account. Every single time, there are problems with OAuth2.

The credentials pop-up window will not allow me to enter a password. It just keeps refreshing to the login prompt - 'Email address or Phone'. I type in the e-mail address; it refreshes to 'Email address or Phone'.

I have checked TB updates - all updated. I deleted the account, deleted all saved e-mail logins and passwords in Thunderbird, and in my browser, and tried to add the account again to Thunderbird. The credentials window won't let me get to the password fill in. And even if get there, am I still going to have problems with OAuth2?