If a mail client reports that its OAuth access is blocked by your organization, changing the Gmail password will usually not change that policy decision. Ask the administrator to review the exact application and requested access.
Identify the application precisely
Record the client name and version, the work account, the full error, and the operation that failed. An application can have several OAuth client IDs, so a familiar brand name alone is not enough for approval.
Use the vendor’s supported Sign in with Google or other documented OAuth flow. Do not follow an unexpected support link asking for your password, security code, or session token.
Review API and mail-client policy together
An authorized administrator can inspect Security, Access and data control, API controls and the app’s identity, requested Google service scopes, and configured access. Google distinguishes configured apps from apps that have accessed data.
Also check the relevant Gmail POP or IMAP settings if the client uses those protocols. Allowing a protocol and trusting an app are separate decisions; one does not automatically satisfy the other. Education and managed-device policies can introduce further restrictions.
Approve only the justified capability
The administrator should compare the requested scopes with the actual business task and the vendor’s privacy and support information. A narrowly scoped, approved application is preferable to making all Gmail data unrestricted for every third party.
Google notes that app-access lists can take time to update and that restricting a service can revoke tokens for untrusted apps. Plan changes and test the affected users rather than broadly toggling controls. Do not bypass a block by using a personal account or reviving unsupported basic authentication. After an authorized approval, reconnect using the supported flow and verify reading and sending with harmless mail. Approval of access is not a guarantee of the app’s security.
Browse Gmail & Google Account help
References
- Control which third-party & internal apps access Google Workspace data | Apps & integrations | Google Workspace Help
- Turn POP & IMAP on or off for users | Sync data | Google Workspace Help
- Transition from less secure apps to OAuth | Sync data | Google Workspace Help
Reviewed against the linked product guidance, standards, and identified vendor or public-authority guidance on October 29, 2026. Available options and screen labels can vary by account, device, region, and organization policy.