You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Auth 2.0 Error 400 on Mail account

I try to add my account but I got this message


Authorisation Error
Error 400: invalid_request

You can't sign in to this app because it doesn't comply with Google's OAuth 2.0 policy for keeping apps secure.

You can let the app developer know that this app doesn't comply with one or more Google validation rules.
Learn more
Request Details
The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.
If you’re the app developer, make sure that these request details comply with Google policies.
redirect_uri: urn:ietf:wg:oauth:2.0:oob



What's wrong with Apple and Google? Google asks to contact the developer, yes Apple...


It's so frustrating...

Posted on Feb 22, 2023 2:58 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 9, 2023 9:12 PM

I FOUND THE SOLUTION.


People have mentioned it here, but with incomplete steps. So here is how to get it done:


1.) KNOW why this is happening in the first place: it's coz Google says your old mac and old mac OS have insufficient security. With that said, you can only update an old mac for about 7-10 years. Then you're SOL. Keep that in mind. Lucky for us old mac users (I'm running a 2011 MBPro with ElCapitan) -- we are still able to add new GMAIL accounts with a workaround.


2.) As mentioned here, open your GMAIL account preferences by signing into GMAIL by web browser and clicking on your avatar in the upper-right and selecting "Manage your Google Account". Then click on the "Security" tab on the left.


3.) Under "Signing in to Google" ENABLE 2-step verification. This alone will NOT fix it, but it WILL allow you use what Google calls "Less Secure Apps Access". If you notice in your account settings, Google automatically sets this to OFF -- essentially blocking access to any apps that Google dubs 'insufficient security'. Enabling 2-step verification will bring up a third line under "Signing in to Google" that says "App Passwords".


4.) Click on "App Passwords" and this will walk you through generating a password that you can use to manually add a GMAIL account with your old mac.


5.) Select and copy the generated password, go into Apple Mail preferences and select "other" when adding the new email account. Type in your gmail email address, and use the password you copied earlier, in the password field.


If this helps, PLEASE hit the kudos button to bring it to the top!

Similar questions

218 replies
Question marked as Top-ranking reply

Mar 9, 2023 9:12 PM in response to ays177

I FOUND THE SOLUTION.


People have mentioned it here, but with incomplete steps. So here is how to get it done:


1.) KNOW why this is happening in the first place: it's coz Google says your old mac and old mac OS have insufficient security. With that said, you can only update an old mac for about 7-10 years. Then you're SOL. Keep that in mind. Lucky for us old mac users (I'm running a 2011 MBPro with ElCapitan) -- we are still able to add new GMAIL accounts with a workaround.


2.) As mentioned here, open your GMAIL account preferences by signing into GMAIL by web browser and clicking on your avatar in the upper-right and selecting "Manage your Google Account". Then click on the "Security" tab on the left.


3.) Under "Signing in to Google" ENABLE 2-step verification. This alone will NOT fix it, but it WILL allow you use what Google calls "Less Secure Apps Access". If you notice in your account settings, Google automatically sets this to OFF -- essentially blocking access to any apps that Google dubs 'insufficient security'. Enabling 2-step verification will bring up a third line under "Signing in to Google" that says "App Passwords".


4.) Click on "App Passwords" and this will walk you through generating a password that you can use to manually add a GMAIL account with your old mac.


5.) Select and copy the generated password, go into Apple Mail preferences and select "other" when adding the new email account. Type in your gmail email address, and use the password you copied earlier, in the password field.


If this helps, PLEASE hit the kudos button to bring it to the top!

Mar 23, 2023 8:39 AM in response to ays177

SOLUTION


In google, goto "Manage your Google account"...


On the left menu, select "security"...


Scroll to "2-Step Verification" (Mine was on already)...


Scroll to the very bottom of the "2-Step verification" page and select "App passwords"...


Select app menu, select "Mail" in the "Select Device menu, select "Mac"...


Click the "Generate" button and copy the password in the yellow box...


Open the mail app...


Archive your mail for the account you are fixing (if you need to, most people wont)...


Open system preferences from the Apple Menu...


Select "Internet Accounts"...


Delete the broken Gmail account here by clicking on it and hitting the - at the bottom of the window and close that window...


Go back to the mail app...


In the "Mail" menu, select "preferences" and add a new account with the + at the bottom of the accounts list making sure to select "other mail account" as the account provider and click "continue"...


enter the name for the account, enter the gmail email address, and paste the password you copied from the yellow box as the password.


TADA!

Jan 29, 2024 6:11 AM in response to ays177

I could not, for the life of me, figure this out. The proposed solution still didn't work for me, but...


I found a solve


I noticed that the popup to login into google, when trying to add a new account, was opening in Safari Private Browsing mode. I went digging in Safari's settings, and in the "Advanced" tab under privacy I turned off the "Use advanced tracking and fingerprinting protection" AND the "Allow privacy-preserving measurement of ad effectiveness" and BAM... I was finally able to get past the 400 error that Google was sending back and I was able to authenticate and add my Gmail account to my Internet Accounts.


Hope this helps others.

Mar 7, 2023 7:31 AM in response to tnbriggs

tnbriggs wrote:

But Apple do insist you buy overpriced new equipment from them at an alarmingly increasing frequency to have that security and privacy, thus ensuring their bottom line. And considering Apple's market cap is about twice what Alphabet's is, that seems to be working for them quite well, but less so for we poor consumers who can no longer afford to fund their greed.


That (bold text) is a non-sequitur. All of my Macs are expected to remain in productive service for a period of about seven years. The one in my office is nine years old, the one I am using at the moment is twelve years old, and I have others that are fifteen years old. They all work perfectly fine.


However, none of them have ever any Google products installed.


So your assertion that Apple insists upon purchasing "overpriced new equipment from them at an alarmingly increasing frequency" is demonstrably false.


Apple derives substantially all its revenue from selling hardware. Google derives substantially all its revenue from selling advertisements. Apple's single-minded approach to user privacy and protecting its customers' personal information is a constant irritation to Google. Why should Apple make it easier for them?


  • If it is your desire to use Google products, then be prepared to replace your Macs every two to three years to keep up with its demands, which by the way have nothing to do with security and everything to do with their desire to harvest your personal information from your Macs, and sell it. You are the product Google sells. Presumably, your are being compensated for agreeing to that relationship. That's none of my business though. That's a private matter between you and Google.


  • If you are required to use Google products, then buy a Chromebook. In fact Google should buy them for you, considering how much revenue they get from your voluntary use of their "free" services.

Mar 4, 2023 12:18 PM in response to ays177

I also had the same issue on High Sierra. Do the following:

go to your google account settings, security tab and then app passwords. Select mail app on Mac device. Write down the generated password. Then on mail, click on add account, other mail account and type your email and the password you created in the previous step. That’s it 😉

Jul 11, 2023 6:51 AM in response to The Animaster

Animasters procedure worked for me on my MacBook Pro with High Sierra after figuring out two additional steps:

3a.) "app password" did not show up for me, but I could search it with the search bar on top which brought me to the page mentioned in 4.)

It didn't work right away, I got "password could not be verified" various times, until I had switched on "activities" in Google safety settings (not sure that bit was necessary, I changed it again after everything worked) and then clicked on the "check activity" button in the safety/confirmation email I got from google on my secondary email account regarding the creation of the app password. After that, the account was confirmed.

thx for the help!



Mar 23, 2023 1:49 AM in response to ays177

Hi Guys, I managed to solve everything!

I have Macbook Pro 2011, Hig Sierra.


My steps were as follows:

1) I left the old gmail account disabled which didn't work.

2) Thanks to the system indicated above I logged into my Google account and created a new password for MAC and Mail.

3) On the Mac, in the mail app I created a new account by choosing "other" and writing my email with a dot before the @ (example: mymail.@gmail.com)

4) At this point I verified that the new account was working properly.

5) I re-enabled the old GMAIL account which no longer worked and... as if by magic it started working again!

6) At this point I deleted the new account I had created thanks to the "others" function


The old GMAIL account works fine!!


[Edited by Moderator]


Mar 29, 2023 5:08 PM in response to The Animaster

Your solution was VERY helpful. I recently upgraded form OSX10.11 to 10.13 and was hit with the OAuth 2.0 Error

a small additional step to your #3.)step: after Enabling 2-step verification, the "App Passwords" did not show up on the "Signing in to Google" page. Instead, I had to click the right arrow at the far right side of the “2-Step Verification” line. That brought up a page titled "2-Step Verification" at the very bottom of THAT page is “App Passwords”

Mar 30, 2023 7:34 AM in response to ays177

I was able to fix this ...


The trick is to go to the Security section of your account manager.

Then ... click on "2-Step Verification"

Then ... Scroll all the way down to App Passwords

Then ... follow the prompts to Generate a 16-digit key from Google.

Copy that key.


Then ... open Mail.

Click on Add Account

DO NOT click on Goggle

Click on Other Mail Account

Then ... type in your Gmail account

DO NOT type your usual gmail password

Instead ... Copy in the 16-digit key you got from google.


Mail should be working fine now.





Feb 22, 2023 7:17 AM in response to ays177

To add to previous posting


Link below outlines some changes in Google regarding using Non Native Android Apps to access Google e-mail Services


The Application Specific Password factor was introduced not only in Google e-mail but also similar in Apple


Sign in to apps with your Apple ID using app-specific passwords - Apple Support


https://support.google.com/mail/answer/185833?hl=en-GB


Auth 2.0 Error 400 on Mail account

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.