Skip to main content

Gmail (@gmail.com) · 2-Step Verification + App Password

Gmail = Google's personal mailbox (@gmail.com). Binding it to Laifaxin requires 2 mandatory steps:

StepContentRequired
1️⃣ Enable 2-Step VerificationTurn on 2FA in Gmail backend, bind phone number✅ Required
2️⃣ Generate App-Specific Password16-digit standalone password for Laifaxin✅ Required

→ Fill the password field with the 16-digit app password (NOT your Gmail login password), otherwise it fails 100% of the time.

⚠️ Gmail does not allow direct login passwords

Since 2022, Gmail mandates app-specific passwords for third-party client login. Filling the login password directly → 535 Authentication failed error.

The only alternative is enabling "Less secure app access", which Google has been progressively disabling and is not recommended (high security risk).


1. Server Parameters

TypeServer AddressSSL Port
📥 IMAP (Receive)imap.gmail.com993
📤 SMTP (Send)smtp.gmail.com465

Encryption: SSL / TLS


2. Enable 2-Step Verification

1. Open Google Security Settings

Go directly to Google Security Settings. Once logged in, find 2-Step Verification and click in.

Google Security Settings · 2-Step Verification entry: "How you sign in to Google" section on Security page, "2-Step Verification" option

2. Get Started

Click Get started → enter Google login password to verify identity.

2-Step Verification · Get started button: welcome page primary "Get started" button, launches 2FA setup wizard

3. Enter Phone Number

Enter the phone number to receive verification codes:

2-Step Verification · Phone number entry: fill in phone number + select country code

Select SMS as the receiving method:

2-Step Verification · SMS receiving: choose SMS / voice call to receive code

4. Enter Code + Enable

Enter the SMS code → Next → after verification, click Turn on → 2-Step Verification activated.

2-Step Verification · Successfully enabled: "Turn on" button after verification, completes 2FA setup


3. Generate App-Specific Password

💡 Must enable 2-Step Verification first to see this option

Without 2-Step Verification → "App passwords" entry simply doesn't appear. Complete § 2 above first, then come here.

1. Open App Passwords Page

Go directly to Google App Passwords page.

You can also use the search bar at the top of Security settings — search "app passwords":

App Passwords · Entry: use Security page top search bar to find "app passwords" quickly

2. Create Password

Enter app name (e.g. Laifaxin) → click Create:

App Password · Create: enter app name "Laifaxin" + Create button

3. Copy and Save Immediately

Google generates a 16-digit app-specific password (4 groups, each 4 chars, e.g. abcd efgh ijkl mnop).

App Password · Result: popup shows 16-digit password (4-group format), shown only once — copy and save immediately

⚠️ Password shown only once

Once you close the popup, you can never see this password again. Immediately copy and save to a password manager (1Password / Bitwarden) or a text file.

If lost, your only option is to generate a new password — the original is invalidated.


4. Bind in Laifaxin

Go to Laifaxin Email Account and add Gmail:

FieldFill With
Email addressyour@gmail.com
Password⚠️ Paste the 16-digit app password (remove spaces, NOT the login password!)
IMAP serverimap.gmail.com · port 993 · SSL
SMTP serversmtp.gmail.com · port 465 · SSL

Laifaxin binding Gmail: password field with 16-digit app password (NOT login password!), other fields per server params table above

After binding succeeds, enable email sync + notifications (see Check New Emails).


📋 Pit-Avoidance Summary

PitConsequenceHow to Avoid
🔴 Bind with Gmail login password535 Authentication failedMust use 16-digit app-specific password
🔴 Look for App Passwords without 2-Step Verification"App passwords" entry doesn't appearMust enable 2-Step Verification first before generating app password
🔴 Forget to save the generated app passwordClosed popup, can never see againImmediately copy to password manager
🟡 Paste app password with spacesMay fail to recognizeGmail shows the password in 4 groups with spaces — remove spaces before pasting
🟡 IMAP protocol not enabledIMAP not enabled errorGo to Gmail Settings → Forwarding and POP/IMAP and enable IMAP
🟡 Bulk-send via GmailAccount suspended / throttled within 24hPersonal mailboxes are for 1-on-1 only; for bulk, use a Quality Channel
🟡 Changed Gmail password / deleted app passwordLaifaxin uses stale creds, send failsRegenerate app password, then re-sync in Laifaxin

❓ FAQ

Q1 · Got "IMAP not enabled" — what do I do?

Gmail's IMAP protocol is enabled by default, but some accounts require manual enabling. Steps:

StepAction
1️⃣Go to Gmail Settings → Forwarding and POP/IMAP
2️⃣Under "IMAP access" select Enable IMAP
3️⃣Click Save Changes

Q2 · Can I skip the app password and just use my Gmail login password?

❌ Strongly discouraged. Even if technically possible via "Less secure app access" (which Google has been progressively disabling), it's not recommended:

DimensionApp-specific PasswordLogin Password
Security✅ Compromise doesn't affect main account⚠️ Compromise = main account at risk
Invalidation control✅ Laifaxin's password can be invalidated alone⚠️ Change main password = all apps need reconnection
Google policy✅ Officially recommended⚠️ Deprecated

Q3 · Can the 16-digit app password be reused?

Yes. The same app password can be bound to multiple clients (e.g. Laifaxin + Foxmail). But we recommend generating one per client:

  • Higher security (a compromise of one client doesn't affect others)
  • Laifaxin's password leaked → delete it alone on the App Passwords page, other clients unaffected

Q4 · Do I need a VPN to send/receive Gmail?

❌ No. Laifaxin has built-in overseas email nodes — Gmail send/receive goes through Laifaxin's servers, no VPN needed for users.

Q5 · How many emails can Gmail send per day?

⚠️ Gmail's official cap is 500/day, but we strongly discourage hitting the cap — sudden high volume triggers Google's anti-spam system, easily leading to temporary suspension (24-48h) or permanent restriction.

👉 Recommended pacing (warming strategy):

StageDaily VolumePacing
🐣 Week 1 (newly bound)Start at 505-10 min between sends, mimic human behavior
🐤 Weeks 2-4100-200Adjust based on reply / bounce rate
🦅 Stable phase (1 month+)Max 300Not recommended to exceed, leave a safety margin

Never "bulk send" at any stage! Bulk = same content sent en masse in short time = 100% triggers risk control.

🚀 For real bulk sending, use a Quality Channel:

  • Doesn't bind your Gmail, no risk of suspension
  • ¥0.007 per email, far cheaper than losing your Gmail main account
  • ✅ System auto-throttles + random template variations + multi-account rotation, anti-spam systems can't catch it

Q6 · Lost my app password — what now?

You can't recover the original password (Google only displays it once). Steps:

StepAction
1️⃣Go to App Passwords page delete old password
2️⃣Generate new password
3️⃣In Laifaxin Email Account update password + re-verify save

💡 Learning Tips

StageTip
🔐 Safeguard the app passwordUse a password manager (1Password / Bitwarden); if lost, only regeneration works
📋 One password per client1 for Laifaxin, 1 for Foxmail — delete a single one if leaked, others unaffected
🔄 Quarterly reviewGo to App Passwords page and delete apps you no longer use
⚙️ Pair with Laifaxin advanced featuresOnce bound, play with Email Tracking / Templates / Smart Follow-up
🚀 Bulk-send via Quality ChannelHeavy bulk via Gmail will get suspended — always use a Quality Channel (doesn't bind your mailbox)
🆘 Check docs on errorCodes like 535 / IMAP not enabled — see email-account error-code troubleshooting

TopicLinkDescription
📨 Email Account Configurationemail-accountBinding flow + error code troubleshooting table
🏢 Google Business Mail201-guge-qiyeyouxiang-google-business-mailGoogle Workspace (company domain)
📮 Personal Mailboxes100-gerenyouxiang-personal-mailbox16 Major Mailboxes Quick Reference
📬 Check New Emailscheck-new-emailsAfter binding, enable sync + notifications
🚀 Email Mass Sendingemail-mass-sendingBulk send via Quality Channel (doesn't bind Gmail)
📊 Email Trackingemail-trackingSee whether Gmail-sent emails got opened

📱 Issues with configuration?

Scroll to the bottom of this page, scan the support WeChat QR (in footer) for one-on-one help — immediate response during work hours, replies first thing next morning if after hours.


📖 About Gmail (@gmail.com)

What is Gmail?

Gmail is the free email service launched by Google in 2004. As of today, it has over 1.8 billion monthly active users globally — one of the most widely used mailboxes in the world. Gmail provides 15 GB free storage (shared with Google Drive), supports multi-device sync, powerful anti-spam filtering, smart categorization (Promotions / Social / Updates), and more.

Personal Gmail vs Google Workspace (Business)

Dimension👤 Personal Gmail (@gmail.com)🏢 Google Workspace (company domain)
Email suffix@gmail.com@yourcompany.com
PriceFreePaid (monthly per user)
Storage15 GB (shared with Drive)30 GB - 5 TB (by plan)
ProfessionalismPersonal-gradeEnterprise-grade, B2B foreign-trade recommended
Admin consoleNoneYes (manage all employee mailboxes in domain)
Custom domain
ConfigurationThis articleSee Google Business Mail

Why does Gmail require app-specific passwords?

Google security policy evolution:

  • 2014: Google introduced "Less secure app access" toggle — main password can log in third-party clients
  • May 2022: Google officially disabled this toggle, mandating OAuth 2.0 or app-specific passwords for third-party clients
  • Since 2024: all new accounts and most old accounts no longer support less secure apps

→ Now, binding Gmail to any third-party client (Laifaxin / Foxmail / Thunderbird, etc.) requires 2-Step Verification + an app-specific password.

Is Gmail suitable for foreign-trade development?

1-on-1 follow-up / inquiry replies ✅ Suitable (high international acceptance) Bulk cold emails ⚠️ High risk:

RiskDescription
Send volume limitsGmail's official cap is 500/day, but strongly discouraged from hitting cap: Week 1 start at 50 → gradually scale to max 300 in stable phase; bulk not recommended — high volume of identical content quickly gets suspended
Domain reputationHeavy bulk → triggers anti-spam rules → domain on spam list
Account riskHigh volume in short time → Google suspects compromise → temporary suspension

Foreign-trade verdict:

  • 🤝 Light precise follow-up → Gmail works
  • 🚀 Heavy cold email → use a Quality Channel (doesn't bind Gmail, no risk of suspension)

Laifaxin's built-in overseas email nodes · Gmail access from China made easy

Due to network conditions, direct Gmail connections from China are often unstable. Laifaxin has built-in overseas email nodes:

  • ✅ Gmail send/receive goes through Laifaxin servers
  • No need for users to use VPN
  • ✅ Receive latency < 1 minute (sync interval recommended 3-5 min)

🔗 Permalink: https://laifa.xin/youxiang/101-guge-gmailyouxiang-google-personal-email