Auth 2.0 Error 400 on Mail account

I try to add my account but I got this message


Authorisation Error
Error 400: invalid_request

You can't sign in to this app because it doesn't comply with Google's OAuth 2.0 policy for keeping apps secure.

You can let the app developer know that this app doesn't comply with one or more Google validation rules.
Learn more
Request Details
The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.
If you’re the app developer, make sure that these request details comply with Google policies.
redirect_uri: urn:ietf:wg:oauth:2.0:oob



What's wrong with Apple and Google? Google asks to contact the developer, yes Apple...


It's so frustrating...

Posted on Feb 22, 2023 2:58 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 9, 2023 9:12 PM

I FOUND THE SOLUTION.


People have mentioned it here, but with incomplete steps. So here is how to get it done:


1.) KNOW why this is happening in the first place: it's coz Google says your old mac and old mac OS have insufficient security. With that said, you can only update an old mac for about 7-10 years. Then you're SOL. Keep that in mind. Lucky for us old mac users (I'm running a 2011 MBPro with ElCapitan) -- we are still able to add new GMAIL accounts with a workaround.


2.) As mentioned here, open your GMAIL account preferences by signing into GMAIL by web browser and clicking on your avatar in the upper-right and selecting "Manage your Google Account". Then click on the "Security" tab on the left.


3.) Under "Signing in to Google" ENABLE 2-step verification. This alone will NOT fix it, but it WILL allow you use what Google calls "Less Secure Apps Access". If you notice in your account settings, Google automatically sets this to OFF -- essentially blocking access to any apps that Google dubs 'insufficient security'. Enabling 2-step verification will bring up a third line under "Signing in to Google" that says "App Passwords".


4.) Click on "App Passwords" and this will walk you through generating a password that you can use to manually add a GMAIL account with your old mac.


5.) Select and copy the generated password, go into Apple Mail preferences and select "other" when adding the new email account. Type in your gmail email address, and use the password you copied earlier, in the password field.


If this helps, PLEASE hit the kudos button to bring it to the top!

218 replies

Mar 23, 2023 1:49 AM in response to ays177

Hi Guys, I managed to solve everything!

I have Macbook Pro 2011, Hig Sierra.


My steps were as follows:

1) I left the old gmail account disabled which didn't work.

2) Thanks to the system indicated above I logged into my Google account and created a new password for MAC and Mail.

3) On the Mac, in the mail app I created a new account by choosing "other" and writing my email with a dot before the @ (example: mymail.@gmail.com)

4) At this point I verified that the new account was working properly.

5) I re-enabled the old GMAIL account which no longer worked and... as if by magic it started working again!

6) At this point I deleted the new account I had created thanks to the "others" function


The old GMAIL account works fine!!


[Edited by Moderator]


Mar 29, 2023 5:08 PM in response to The Animaster

Your solution was VERY helpful. I recently upgraded form OSX10.11 to 10.13 and was hit with the OAuth 2.0 Error

a small additional step to your #3.)step: after Enabling 2-step verification, the "App Passwords" did not show up on the "Signing in to Google" page. Instead, I had to click the right arrow at the far right side of the “2-Step Verification” line. That brought up a page titled "2-Step Verification" at the very bottom of THAT page is “App Passwords”

Apr 9, 2023 6:24 AM in response to vascomark

The solution by "the Animaster" works. I have High Sierra on a 2020 Macbook. Pro. You need to follow Animaster's directions carefully. In step 4, copy the new password, but then ignore Google's on-screen instructions, and follow what it says in steps 4 and 5. However, if you do not remove the old instance in your Mac mail account list, it will say there is already an account with the same name, and it won't let you create a new one. Delete the old one. It does not get rid of all your emails. Choose "other", using the same email name as you had before, and the new password that you get in step 4. Then it works, and the old emails are still there (including those that came in while it wasn't working).

Apr 12, 2023 12:16 PM in response to vasilis113

This solution actually worked, THANK YOU!


As of 4.12.23, there are a few more steps to get to the app passwords now. AND you must go into your Gmail settings and go to "permissions" to make sure you have IMAP authorized/give permission. If you miss that second step it won't authorize. This solution remedies the need to give google your phone number (yay!).


Stick with it, guys because I am not super techy and if I can do it, I am confident that you all can do it, too! Good luck!!

Nov 13, 2023 10:59 AM in response to mnazzaro89

Thx! I managed to get access to my G mail on my mail using the the process all OK and good but did hit issues as the g mail on my phone then wouldnt accept the Pwd and had to try and change it via g mail. Did so but kicked me out of Mac Mail. Was like vicious tech circle. Seems cant operate g mail using the 'other e mail acct' both on mac mail and also on my phone.

In the end i went for less pain and updated my Mac to OS to Monterrey. Was able to transfer g mails to may mac no problem. Cheers!

Oct 21, 2023 6:45 AM in response to The Animaster

Animaster's advice is very helpful, but I needed to make two changes since the OP. First, the App Password did not automatically appear as an option on my Security Page unless I typed App Password in the search field. I also had to take one extra step in between 4 and 5, then it worked. While still in your Google account security page, under Recent Security Activity, open "App password created" and authorize the change. Then you can proceed with step 5 above.

Jan 29, 2024 6:11 AM in response to ays177

I could not, for the life of me, figure this out. The proposed solution still didn't work for me, but...


I found a solve


I noticed that the popup to login into google, when trying to add a new account, was opening in Safari Private Browsing mode. I went digging in Safari's settings, and in the "Advanced" tab under privacy I turned off the "Use advanced tracking and fingerprinting protection" AND the "Allow privacy-preserving measurement of ad effectiveness" and BAM... I was finally able to get past the 400 error that Google was sending back and I was able to authenticate and add my Gmail account to my Internet Accounts.


Hope this helps others.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Auth 2.0 Error 400 on Mail account

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.