Using EurekaLog with GMail (Google Mail) after May 1, 2025 and after May 14, 2025

Google has announced that it’s disabling the less secure apps, third-party apps, or devices that ask you to sign in to your Google Account with your username and password on Google Workspace accounts from May 1st or May 14, 2025:

Starting March 14, 2025, you and your users must use OAuth with third-party apps to access Gmail, Google Calendar, and Google Contacts.You will no longer use a password for access (with the exception of app passwords). Google is turning off access to less secure apps—non-Google apps that can access Google Accounts with a username and password (basic authentication).

This is the same change that Google did in 2022 for most user accounts. But this time the same change is applied to Google Workspace accounts.

• This change will affect you if you are using EurekaLog to send bug reports via GMail while using your GMail password. This method is considered unsecure and will no longer work on all Google accounts starting May 14, 2025.
• This change will not affect you if you are using EurekaLog to send bug reports via GMail while using application-specific passwords.

While we’ve recommended using application-specific passwords instead of your GMail passwords for quite some time, but some customers have chosen to use the "Less Secure Apps" feature since it’s a little more straightforward.

In other words:

1. If you don't already have 2-Step Verification (also known as two-factor authentication) enabled for your account - you must turn it on. (Application-specific passwords can only be used with accounts that have 2-Step Verification turned on.) Once enabled - you will have to confirm each sign in using your GMail password via a promt on already signed device, a physical security key, a code from a verification app, a phone call/SMS, or a backup code.
2. (Optional) Turn off/disable the "Less secure app access" feature.
3. You should create an application-specific password for your application with EurekaLog. An App Password is a 16-digit (random) passcode that gives your app permission to access your Google Account.
   
   Basically, you can use App Password instead of your (main/primary) GMail password. Most of the time, you’ll only have to enter an App Password once (per application), so don’t worry about memorizing it. You can always create a new/additional one.

Please note that we also recommend to use web-based bug tracker instead of e-mails for many reasons:

• Using the large number's law and Exception Driven Development - EDD.
• Using HTTP(S) typically avoids all pitfalls with firewalls and security.
• Finer control over access rights.
• Better UI and report management.
• Etc...

P.S. There are two other alternative methods:

1. SMTP relay service
2. Restricted GMail SMTP server