Skip to content

Connecting mail

Google connects through an app password, not OAuth — one password unlocks mail, calendar and contacts at once (IMAP, SMTP, CalDAV, CardDAV). A regular OAuth sign-in would need Google’s broad “sensitive” scopes, which require an annual security review (CASA); an app password needs none of that and grants exactly what’s needed.

The wizard at Settings → Accounts → Add Google account walks through:

  1. Turn on two-factor authentication, if it isn’t already — Google won’t let you create app passwords without it.
  2. Create an app password at myaccount.google.com/apppasswords — a 16-character code, separate from your regular password.
  3. Enter it in Yttri.
  4. Verification — the app tests mail, calendar and contacts one by one and shows which services connected.
  5. Done — you can subscribe to the calendar as .ics right away.

Yandex, Mail.ru, Rambler, iCloud, Fastmail, ProtonMail (via Bridge), Zoho, GMX, Yahoo, AOL — nothing to configure for these: enter the email and password, the app fills in the server addresses and ports itself.

If your provider isn’t on that list, Yttri tries to detect the settings automatically — first via the Mozilla Autoconfig standard, then by the domain’s MX record. If that doesn’t work either, the server and port are entered by hand.

These two connect via OAuth, not a password: a Microsoft sign-in window opens, and there is no password to type into Yttri.

Two different paths depending on where the mailbox lives:

  • Office 365 / Microsoft 365 — signs in through Microsoft Graph, the same OAuth as Outlook.com.
  • Your own server (on-premises) — via EWS (Exchange Web Services): you need the EWS endpoint address and a login/password (NTLM or Basic) — check with your IT admin, the address often differs from the webmail address.
  • Google — check that 2FA is really on and the app password hasn’t been revoked.
  • Autoconfiguration didn’t find your provider — enter the server and port by hand, check your mail provider’s help pages (usually imap.<domain> / smtp.<domain>, ports 993 and 587).
  • On-premises Exchange — the EWS address is usually different from the webmail (OWA) address, your IT department has it.