Say I want to "send as" gmail account 1 from gmail account 2.

It seems that once I activate 2FA for account 1, I now need to use an "app password" to use it in account 2.

But doesn't this defeat the purpose of 2FA on account 1? Because now there's an app password which can be used from anywhere by any client without 2FA.

Am I missing something?

  • The app password is valid for use once. You can't re-use it. And yes, it does defeat the purpose of 2fa. It's provided as an alternate – Sathyajith Bhat Feb 24 '19 at 16:35
  • I have been able to re-use it many times. – Dan Feb 26 '19 at 8:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.