Skip to content
OutlookAdvanced

How to Set Up Google Workspace Email in Microsoft Outlook with OAuth, 2-Step Verification & App Password – Complete 2026 Guide

Google Workspace provides Gmail using your organization's custom domain, such as name@yourcompany.com. Although Gmail can be used directly through a web brow...

BI
Bison Technical Team Enterprise IT specialists
Updated 22 Sep 2024 15 min read 1,168 total views
Structured technical guidanceSafety notes included where requiredSources listed below

Google Workspace provides Gmail using your organization's custom domain, such as name@yourcompany.com. Although Gmail can be used directly through a web browser, many organizations prefer Microsoft Outlook because employees may already use Outlook for email management, contacts, calendars, archives, PST files, and other business workflows.

Connecting a Google Workspace mailbox to Outlook is straightforward, but the authentication process has changed significantly over the years.

Advertisement

The most important point for modern installations is:

Do not configure a Google Workspace account in Outlook using only the normal Google account password. Modern Outlook installations should use Google's OAuth-based sign-in process whenever possible.

Google has discontinued traditional "Less Secure Apps" authentication for Google Workspace. Therefore, an old configuration guide telling users simply to enter their Google Workspace username and normal password may no longer work.

This guide explains both modern and legacy configuration methods, including:

  • Modern OAuth / Sign in with Google
  • New Outlook for Windows
  • Classic Outlook
  • IMAP and SMTP configuration
  • Google Workspace administrator requirements
  • 2-Step Verification / 2FA
  • Google Authenticator
  • App Passwords
  • Troubleshooting password and synchronization problems
  • Security recommendations

1. Understand OAuth, 2FA and App Passwords First

These three technologies are related but are not the same thing.

OAuth

OAuth allows Outlook to access your Google Workspace account without Outlook directly storing and repeatedly submitting your normal Google password.

When adding the account, Google displays its own sign-in window. You authenticate with Google and approve Outlook's requested permissions.

This is the preferred method.

2-Step Verification / 2FA

2-Step Verification adds another verification mechanism after your password.

Depending on your organization's policies and account configuration, verification can involve:

  • Google Prompt
  • Google Authenticator
  • Security key
  • Passkey
  • Verification code
  • Other administrator-approved methods

App Password

An App Password is a special 16-character password generated by Google for an application or device that cannot use Google's modern sign-in process.

App Passwords should not normally be your first choice for current Outlook versions.

Use an App Password primarily when:

  1. 2-Step Verification is enabled.
  2. Your application cannot use OAuth / Sign in with Google.
  3. Your Google Workspace administrator permits the required configuration.

2. Recommended Configuration in 2026

For most businesses, the preferred configuration is:

Google Workspace → OAuth → Microsoft Outlook

Instead of:

Google Workspace → IMAP → Normal Google Password

The normal Google account password should not be treated as the standard authentication method for a manually configured legacy mail client.


3. Before Adding Google Workspace to Outlook

Check the following before starting.

You should have:

  • Your complete Google Workspace email address
  • Your Google account password
  • Access to your 2-Step Verification method, if enabled
  • Microsoft Outlook installed and updated
  • Working internet connection
  • Permission from your Google Workspace administrator to use IMAP or third-party mail clients, where applicable

For example:

accounts@company.com

The full email address should normally be used as the username.


4. Google Workspace Administrator: Check IMAP Access

In managed Google Workspace environments, administrators can control whether users are allowed to access Gmail through IMAP.

If Outlook cannot connect even though the user's credentials are correct, the Google Workspace administrator should verify the organization's Gmail POP/IMAP policies.

Depending on the Google Admin Console interface and organizational policies, settings can be applied:

  • Organization-wide
  • To an Organizational Unit
  • To specific groups/users

If IMAP has been disabled by the administrator, changing settings inside Outlook will not solve the problem.


5. Method 1 – Add Google Workspace to New Outlook

Modern Outlook normally provides the simplest configuration experience.

Open Outlook.

Go to:

Settings → Accounts → Your accounts

Select:

Add Account

Enter your complete Google Workspace email address.

Example:

user@company.com

Click Continue.

Outlook should redirect you to a Google sign-in window.

Enter your Google Workspace credentials.

If 2-Step Verification is enabled, complete the verification request.

Google may then display a permissions page showing what Outlook is requesting access to.

Review the permissions and select:

Allow

Outlook should complete the account configuration automatically.

You generally do not need to manually enter IMAP and SMTP server addresses when the OAuth setup completes successfully.


6. Method 2 – Add Google Workspace to Classic Outlook

For Classic Outlook, go to:

File → Add Account

Enter your complete Google Workspace email address.

Example:

accounts@example.com

Click:

Connect

A Google authentication window should appear.

Sign in using your Google Workspace account.

Complete 2-Step Verification if requested.

Google will display the permissions requested by Microsoft Outlook.

Select:

Allow

After Outlook completes configuration, click:

Done

Restart Outlook if necessary.

Allow some time for the initial mailbox synchronization, especially if the mailbox contains many years of email.


7. Manual IMAP Configuration

Manual configuration may occasionally be required for older Outlook versions or unusual installations.

Use the following settings.

Incoming Mail – IMAP

Server: imap.gmail.com

Port: 993

Encryption: SSL/TLS

Username: Your complete Google Workspace email address

Example:

user@example.com

Outgoing Mail – SMTP

Server: smtp.gmail.com

Common configurations include:

Port 465: SSL/TLS

or

Port 587: STARTTLS/TLS

SMTP authentication should be enabled.

Use the same Google Workspace email address for authentication.


8. Do Not Use Your Normal Password with Legacy Authentication

This is one of the most common causes of failed Google Workspace Outlook configurations.

A user may enter:

  • Correct email address
  • Correct IMAP server
  • Correct SMTP server
  • Correct ports
  • Correct Google password

and Outlook may still display:

Password incorrect

or:

Authentication failed

This does not necessarily mean the Google password is wrong.

The application may be attempting to use an authentication mechanism Google no longer permits.

The preferred solution is to configure Outlook using Google's OAuth sign-in process.


9. Enable 2-Step Verification for Google Workspace

Sign in to your Google account.

Open:

Google Account → Security

Locate:

2-Step Verification

Follow Google's instructions to configure it.

Your organization's Google Workspace administrator may enforce 2-Step Verification or restrict which verification methods employees can use.


10. Recommended 2-Step Verification Methods

Google provides multiple verification methods.

Google Prompt

Google sends a sign-in approval request to an authorized mobile device.

This is convenient for many users.

Google Authenticator

Google Authenticator generates time-based verification codes.

This is useful because the generated code does not require SMS delivery.

Security Keys

Physical security keys can provide strong protection against phishing.

They are particularly useful for:

  • Administrators
  • Finance departments
  • Senior management
  • High-risk accounts
  • Users handling confidential information

Passkeys

Where supported by your organization's configuration, passkeys provide another modern authentication option.


11. How to Create an App Password

Only use this method when Outlook or another application cannot use Google's modern OAuth sign-in.

First enable:

2-Step Verification

Then open your Google Account security settings and locate:

App Passwords

Google may require you to authenticate again.

Create a password for the application.

For example, name it:

Outlook Office PC

Google generates a 16-character App Password.

Enter this password into Outlook instead of your normal Google account password.

You generally need to enter the App Password only when configuring the application.


12. Why Is "App Passwords" Missing?

This is another common question.

Even after enabling 2-Step Verification, some users cannot find the App Password option.

Possible reasons include:

  • Google Workspace administrator restrictions
  • Your organization's security policy
  • Advanced Protection
  • Security-key-only 2-Step Verification configuration
  • Account-specific restrictions

Do not assume that every Google Workspace user will automatically have access to App Passwords.

Contact your Google Workspace administrator if the option is unavailable.


13. What Happens to App Passwords After Changing the Google Password?

This is extremely important for troubleshooting.

Google revokes App Passwords when the Google Account password is changed.

Therefore, suppose Outlook was configured with an App Password and was working normally.

Later, the user changes the Google account password.

Outlook may suddenly stop sending or receiving mail.

In this situation:

  1. Sign in to the Google account.
  2. Generate a new App Password.
  3. Update Outlook with the new App Password.

Do not simply keep entering the previous App Password.


14. IMAP vs POP – Which Should You Use?

For normal Outlook integration, IMAP is generally preferable to POP.

IMAP

IMAP keeps email synchronized between Gmail and Outlook.

Actions such as reading or organizing messages can be synchronized with the server.

This is useful when the mailbox is accessed from:

  • Desktop computer
  • Laptop
  • Mobile phone
  • Gmail web interface
  • Outlook

POP

POP is primarily designed to download email from the server.

Its behavior is less suitable when users expect a consistently synchronized mailbox across multiple devices.

For modern Google Workspace environments, IMAP/OAuth is usually the better choice.


15. Outlook Says "Password Incorrect" Even Though Password Is Correct

Check the following:

  1. Confirm the user can sign in through Gmail in a browser.
  2. Confirm the complete Google Workspace email address is being used.
  3. Update Outlook.
  4. Remove the failed account configuration and add it again.
  5. Use Google's sign-in/OAuth window.
  6. Check whether 2-Step Verification is enabled.
  7. If using an older application that cannot support OAuth, determine whether an App Password can be used.
  8. Verify IMAP access has not been blocked by the Google Workspace administrator.

16. Outlook Is Receiving Email but Cannot Send

Check SMTP configuration.

Recommended settings are generally:

SMTP Server: smtp.gmail.com

Port: 465 with SSL/TLS

or

Port: 587 with STARTTLS/TLS

Also verify:

Outgoing server requires authentication

The outgoing username should normally be the complete Google Workspace email address.


17. Outlook Can Send but Is Not Receiving Email

Check:

  • Internet connectivity
  • IMAP access
  • Outlook Send/Receive status
  • Offline mode
  • Gmail storage/account status
  • Google Workspace administrator policies
  • Outlook synchronization errors
  • Whether Gmail receives the message through its web interface

A useful diagnostic test is to open Gmail in a browser.

If the new message appears in Gmail but not Outlook, the problem is probably between Outlook and Google's mailbox synchronization.

If the message does not reach Gmail either, investigate mail delivery, routing, DNS or Google Workspace configuration instead.


18. Gmail Works in Browser but Outlook Does Not

This usually indicates that the Google Workspace account itself is operational.

Possible Outlook-side causes include:

  • Old Outlook version
  • Broken OAuth authorization
  • Incorrect IMAP configuration
  • Damaged Outlook profile
  • App Password issue
  • IMAP disabled by policy
  • Network/security software interference

Try removing and adding the Google Workspace account again using OAuth before performing complicated manual troubleshooting.


19. Outlook Suddenly Stops Working After Months

Check whether any of these events recently occurred:

  • Google password changed
  • Administrator changed security policies
  • 2-Step Verification policy changed
  • App Password revoked
  • Microsoft Outlook updated
  • Google account access revoked
  • IMAP policy changed
  • Windows/Office profile changed

If an App Password was being used and the user's Google password was recently changed, generating a new App Password is an important troubleshooting step.


20. Check Google Account Third-Party Access

If Outlook was previously authorized but authentication is behaving unexpectedly, review the Google Account security section for applications and services that have account access.

If appropriate, remove the existing authorization and add the account to Outlook again.

This forces Outlook and Google to establish a fresh authorization.

Do this carefully because revoking access can interrupt an existing working application.


21. Security Recommendations for Businesses

Google Workspace administrators should avoid treating email-client configuration as only an Outlook issue.

The following practices improve security:

  • Enable or enforce 2-Step Verification.
  • Prefer OAuth over password-based authentication.
  • Keep Microsoft Outlook updated.
  • Avoid sharing Google passwords with IT technicians or other employees.
  • Use separate user accounts for individual employees.
  • Avoid shared passwords wherever possible.
  • Review third-party application access periodically.
  • Remove App Passwords that are no longer required.
  • Immediately revoke credentials for lost or retired devices.
  • Use stronger authentication methods for administrators and sensitive accounts.
  • Keep recovery information current.
  • Review suspicious login alerts.
  • Train users to identify fake Google login pages.

22. Important Warning About App Passwords

An App Password effectively provides an application with access without requiring the normal second-factor prompt every time it connects.

Therefore:

Never email, WhatsApp, photograph, publicly store or casually share an App Password.

If an employee's computer is retired, lost or compromised, revoke the associated App Password.

Where OAuth is available, prefer OAuth instead.


23. Recommended Setup for Different Outlook Versions

New Outlook

Use:

Add Account → Google sign-in → Allow

This is the recommended approach.

Microsoft 365 / Current Classic Outlook

Use:

File → Add Account → Google sign-in → Allow

OAuth should normally be used.

Outlook 2024 / 2021 / 2019

First try the automatic Google/OAuth configuration.

Keep Office fully updated.

Older Outlook Installations

Compatibility can vary according to the exact Office version, updates and authentication support.

If the application cannot use OAuth, consider upgrading Outlook.

An App Password may be usable in certain configurations, but should be considered a compatibility fallback rather than the preferred long-term solution.


24. Quick Reference – Google Workspace Outlook Settings

Setting Value
Account Type IMAP
Incoming Server imap.gmail.com
Incoming Port 993
Incoming Encryption SSL/TLS
Outgoing Server smtp.gmail.com
SMTP Port 465
SMTP Encryption SSL/TLS
Alternative SMTP Port 587
Alternative Encryption STARTTLS/TLS
Username Complete Google Workspace email address
Preferred Authentication OAuth / Sign in with Google
Legacy Alternative App Password where supported
Normal Google Password with legacy authentication Not recommended/supported

25. OAuth vs App Password – Quick Comparison

Feature OAuth App Password
Recommended for modern Outlook Yes No, fallback only
Requires sharing normal Google password with Outlook No No
Designed for modern applications Yes Primarily legacy compatibility
2-Step Verification Supported Required to generate
Can be revoked Yes Yes
Recommended long-term solution Yes Only when necessary

26. Common Mistakes to Avoid

Mistake 1: Using only the normal Google password

This is one of the most common problems with old setup instructions.

Use OAuth whenever supported.

Mistake 2: Assuming App Password is mandatory

Modern Outlook normally supports Google OAuth authentication.

An App Password is primarily for applications that cannot use the modern Google sign-in process.

Mistake 3: Assuming IMAP has been discontinued

IMAP itself has not disappeared.

The major change concerns authentication.

IMAP can still be used with secure authentication.

Mistake 4: Using port 25 for normal Outlook SMTP submission

Use Google's supported authenticated submission configuration, normally port 465 or 587.

Mistake 5: Ignoring Google Workspace administrator policies

A technically correct Outlook configuration may still fail when the administrator has restricted IMAP, authentication methods or third-party application access.


27. Frequently Asked Questions (FAQ)

Q1. Can I use Google Workspace email in Microsoft Outlook?

Yes. Google Workspace Gmail accounts can be used with supported versions of Microsoft Outlook.

Q2. Should I use IMAP or POP?

IMAP is generally recommended because it provides better synchronization across Outlook, Gmail web and other devices.

Q3. What is the Gmail IMAP server?

imap.gmail.com

Use port 993 with SSL/TLS.

Q4. What is the Gmail SMTP server?

smtp.gmail.com

Common secure configurations use port 465 with SSL/TLS or 587 with STARTTLS/TLS.

Q5. Can I use my normal Google password in Outlook?

Modern configurations should use Google's OAuth / Sign in with Google process. Ordinary username-and-password authentication used by older "less secure" applications is no longer the recommended or supported approach for Google Workspace.

Q6. Do I need an App Password for Outlook?

Usually not with a current Outlook version that supports Google OAuth.

App Passwords are mainly intended for applications that cannot use Google's modern sign-in method.

Q7. Does an App Password require 2-Step Verification?

Yes. 2-Step Verification must be enabled before an App Password can be generated.

Q8. Why can't I see the App Password option?

Possible reasons include Google Workspace administrator policies, Advanced Protection, security-key-only configurations or other account security restrictions.

Q9. Is an App Password the same as my Google password?

No. It is a separate 16-character application-specific credential.

Q10. Can I use the same App Password on several computers?

It is better security practice to create separate credentials for separate applications/devices when App Passwords are necessary. This makes individual access easier to revoke.

Q11. What happens if I change my Google password?

Google revokes existing App Passwords after a Google Account password change. Applications using them may require a newly generated App Password.

Q12. Why does Outlook say my Google password is wrong?

The password may actually be correct. Outlook could be attempting an unsupported authentication method. Try adding the account through Google's OAuth sign-in window.

Q13. Why does Gmail work in Chrome but not Outlook?

That usually indicates that the mailbox itself is working. Investigate Outlook authentication, profile configuration, IMAP access and synchronization.

Q14. Why can Outlook receive email but not send?

Check SMTP authentication, SMTP server, port and encryption settings.

Q15. Why can Outlook send but not receive?

Check IMAP access, Outlook synchronization, Offline mode and Google Workspace administrator policies.

Q16. Should I enable "Less Secure Apps"?

No. Less Secure Apps should not be used as a solution. Google has discontinued this old authentication approach for Google Workspace.

Q17. Is IMAP considered a less-secure technology?

Not by itself. IMAP is a mail access protocol. The important security issue is the authentication method used with it.

Q18. Can a Google Workspace administrator disable IMAP?

Yes. Administrators can control POP and IMAP availability for users or organizational units.

Q19. Is 2-Step Verification recommended for business email?

Yes. Business email accounts are frequent targets for phishing and account takeover, so additional authentication is strongly recommended.

Q20. Which is better: Google Authenticator or SMS?

Authenticator applications, Google Prompt, passkeys and hardware security keys can provide advantages over relying solely on SMS. Your organization's security requirements should determine the appropriate method.

Q21. Can Outlook synchronize Google Calendar and Contacts through basic IMAP?

IMAP is primarily an email synchronization protocol. Calendar and contact integration is a separate consideration and depends on the Outlook/Google integration method being used.

Q22. Will removing the account from Outlook delete email from Google Workspace?

Removing the Outlook account/profile normally does not delete the mailbox stored in Google Workspace. However, locally stored data and special configurations should always be backed up before changing Outlook profiles.

Q23. Should I delete my Outlook profile if synchronization fails?

Not initially. First try repairing or re-adding the account. Profile recreation should be a later troubleshooting step, particularly if the profile contains PST files, archives or other accounts.

Q24. Can antivirus or firewall software interfere with Outlook and Gmail?

Yes. Security software, SSL inspection, firewalls, proxies and restrictive networks can sometimes interfere with authentication or mail connections.

Q25. What should I do if Outlook keeps asking for my password?

Update Outlook, confirm that OAuth is being used, check 2-Step Verification, review account authorization and verify whether an old App Password or authentication configuration is involved.


Conclusion

Configuring Google Workspace email in Microsoft Outlook is considerably more secure today than older username-and-password IMAP configurations.

For a modern installation, the recommended approach is:

Google Workspace account → Microsoft Outlook → Sign in with Google/OAuth → Complete 2-Step Verification → Grant required permissions

Manual IMAP/SMTP configuration and App Passwords should mainly be used when compatibility or legacy software requires them.

For businesses, enabling 2-Step Verification, keeping Outlook updated and preferring OAuth substantially improves protection against unauthorized mailbox access.


Bison Infosolutions Support

For assistance with Google Workspace configuration, Microsoft Outlook setup, email troubleshooting, DNS configuration, email migration, 2-Step Verification and business email security, contact:

Bison Infosolutions

Website: bison.co.in
Email: info@bison.co.in
Support: +91 9212522725


Disclaimer

The information in this article is provided for educational and technical guidance purposes. Google Workspace, Gmail and Microsoft Outlook features, interfaces, authentication policies and security requirements may change over time. Menu names and available options may also vary depending on your Google Workspace edition, administrator policies, Microsoft Outlook version and operating system.

Before making organization-wide security or email configuration changes, verify the latest requirements with Google Workspace and Microsoft documentation or consult your organization's qualified IT administrator.

#Tags

#GoogleWorkspace #MicrosoftOutlook #GoogleWorkspaceEmail #Gmail #Outlook #GmailOutlook #GoogleWorkspaceOutlook #OutlookSetup #EmailSetup #BusinessEmail #GoogleWorkspaceAdmin #GoogleAdmin #OAuth #OAuth2 #GoogleOAuth #ModernAuthentication #TwoFactorAuthentication #2FA #TwoStepVerification #Google2FA #GoogleAuthenticator #AppPassword #GoogleAppPassword #IMAP #SMTP #GmailIMAP #GmailSMTP #IMAPSettings #SMTPSettings #EmailSecurity #GoogleSecurity #OutlookSecurity #EmailAuthentication #OutlookTroubleshooting #GmailTroubleshooting #GoogleWorkspaceSupport #OutlookConfiguration #EmailConfiguration #BusinessIT #ITSupport #CyberSecurity #AccountSecurity #GoogleAccount #Microsoft365 #Outlook2024 #Outlook2021 #ClassicOutlook #NewOutlook #BisonInfosolutions #BisonKnowledgebase

YOUR FEEDBACK

Was this guide useful?

Your answer helps us keep BISONKB accurate and practical.

THE BISON BRIEF

Practical IT knowledge, once a week.

New troubleshooting guides, scripts and infrastructure notes. No noise.

By subscribing, you agree to our privacy policy. Unsubscribe at any time.