Unable to add Google accounts using oAuth sign in method

[kellylford]

What happened

While attempting to sign in a second gmail account, and helping a friend add her gmail account, both of us received the message "This app has been blocked. It tried to access sensitive data on your account." This, after logging into the account, and expecting the google security and permissions screen to show. A few days ago, i was able to add my primary account just fine.

What you expected

The google account security permisions screen would be shown, after logging in.

Steps to reproduce

Start the process of adding a gmail address in the accounts manager, and make sure authorization type is set to google oAuth. Log into the google account and observe what happens after pressing the "sign in with google" button.

Environment

• QuickMail version: 0.8.36
• OS: Microsoft Windows NT 10.0.26200.0
• .NET runtime: 8.0.28
• Theme: System, showing Parchment
• View: Messages
• Sort: Newest First
• Message open mode: Reading pane

[kellylford]

Thanks for the detailed report — and for confirming it happened for two different accounts, that's useful.

This is not something wrong with your setup or your friend's. It's an authentication configuration issue on the Google side that I'm working through now. I don't have a timeline yet, but I'll update this issue as I learn more.

In the meantime there's a path that works today: use a Gmail app password instead of Google OAuth.

1. Turn on 2-Step Verification for the Google account at https://myaccount.google.com/security — this is required before app passwords become available.
2. Go to https://myaccount.google.com/apppasswords and create one. Google gives you a 16-character password.
3. In QuickMail, open Manage Accounts and add the account with authorization type set to Password rather than Google OAuth.
4. Enter the app password as the password, and use these servers:
   • IMAP: imap.gmail.com, port 993, SSL
   • SMTP: smtp.gmail.com, port 587
5. Leave the account's regular Google password out of it entirely — the 16-character app password is what QuickMail stores.

Two things to know about this route:

• App passwords aren't offered if the account is enrolled in Google's Advanced Protection Program.
• This gives you full mail — send, receive, folders, search. It does not carry Google calendar or contact sync, since those need the OAuth connection.

If you try it, let me know whether it works for both accounts. That's helpful data either way.