IT Admin Change Calendar Google Workspace
Less secure apps and Google Sync password-only access turned off
Google turned off password-only (less secure app) access to Gmail, Calendar, and Contacts through late 2024. Apps must use OAuth instead.
Product
Google Workspace (accounts)
Announced
29 September 2023
Effective from
15 June 2024
Completes
30 September 2024
Who is affected
Organizations with legacy mail/calendar/contact clients, scanners, CRMs, or scripts that authenticate to Google with a password instead of OAuth.
Admin roles to involve: Google Workspace super admin, Security admin, Endpoint/MDM admin
What administrators should do
Move any device or third-party app that signs in with only a password over IMAP, POP, CalDAV, CardDAV, SMTP, or Google Sync (Exchange ActiveSync) to OAuth. The Admin console LSA settings were removed on June 15, 2024, and password-only access was turned off for all accounts on September 30, 2024. For MDM-managed devices, re-add the Google account through your MDM provider so it uses OAuth.
What happens if this is ignored
Password-only clients can no longer sign in, so legacy mail, calendar, and contact integrations silently stop syncing or sending.
Official source
Beginning September 30, 2024: third-party apps that use only a password will no longer be supported
Published by Google · Source dated 29 September 2023 · Checked 24 August 2026
Last verified 24 August 2026
Related changes
- Gmail enforces authentication requirements for bulk senders (1 February 2024)
- Multi-party approvals available for sensitive Admin console actions (9 April 2024)
- Google Jamboard app goes view-only, then shuts down on December 31, 2024 (1 October 2024)