Use OAuth or a secure mail key for email apps

You have to use either OAuth or a secure mail key to get your email through an app.

Using OAuth or secure mail keys

Access AT&T email with an app that uses OAuth
If you’re like most people, you have email apps that let you read and manage email on your computer and mobile devices. We suggest you only use email apps with OAuth (Open Authentication). OAuth encrypts your username and password to protect you from hackers and fraudsters.

Device & operating system (OS)Apps and programs that use OAuth
iPhones® & iPads® running iOS 9.0 and above
  • Apple Mail
  • Outlook® Mobile
  • Yahoo!® Mail app
Android devices running Lollipop/5.0 or above
  • GmailTM
  • Outlook® Mobile 
  • Yahoo!® Mail app
Mac computer running OS 10.11/El Capitan or aboveApple Mail
PC running Windows 10Windows® Mail
Email app not listed?
Here’s a quick way to find out if your email app uses OAuth. Start setting up a new email account in your app. Your app may offer you a list of email providers that includes Yahoo. If it does, your email app is OAuth compatible. Be sure to select Yahoo as your provider. You’re all set!

Non-OAuth compatible email apps
  • Outlook 2010, 2013, 2016, 2019
  • Mozilla® Thunderbird®
  • Windows Mail on personal computers running Windows 8 or older
  • Apple Mail/Mac Mail on macOS 10.10/Yosemite or older

Get email with an app and a secure mail key
If you prefer to use an email app that isn’t compatible with OAuth, you’ll have to create a special code called a secure mail key. You’ll use this secure mail key instead of your AT&T password when you set up an email app.

Learn how to create a secure mail key

Check email at
You can always use a web browser and your AT&T password to check your email at (formerly

Getting email on all devices

Multiple devices using different email apps
Do you check your AT&T email on devices with different email apps? If so, you'll have to check for OAuth on each email app you use on every device. For example, you may use Outlook Mail on a laptop, Gmail on a smartphone, and Apple Mail on a tablet. Each device must use either an OAuth app or secure mail key.

Email aliases and disposable email addresses
You don't need a secure mail key for an email alias or disposable email address that's part of your AT&T email account. Both the alias and disposable email use the same password as the email address it's tied to.
Last updated: August 3, 2023