less secure apps message

Google Changing Less-Secure Apps

Google will be turning off access to less secure apps (LSA) — non-Google apps that can access Google accounts with only a username and password (basic authentication) — starting June 15, 2024.

This applies to Google Accounts that are used for scanning to email on MFC devices or scanners, and servers or other hardware such as Polaris that may be configured to send email using a Google account.

For scanners or other devices using simple mail transfer protocol (SMTP) or LSAs to send emails, configure to use OAuth, use an alternative method, or configure an App Password for use with the device. If you replace your device, look for one that sends email using OAuth.

For most situations, setting up an app password will be the proper remediation until MFC are phased out and replaced with modern ones that support OAuth to authenticate to Google. This requires setting up 2-step verification on the account in question which will give a new option to generate App Passwords. App Passwords do not need to be rotated and will continue to work for years unless the app password is disabled on the Google account being used to transact emails with legacy hardware.

Cave Consulting can help your organization navigate the “Less Secure Apps” change in Google Workspace and can help you run your business more effectively with our Google Workspace Management and Support services.

Contact us today for a free consultation and see if your business qualifies for our discounted Google Workspace Subscription promotion.