Thunderbird Community Forum

Microsoft tell me that I must use OAuth2 for my accounts, else I'll be locked out.

Server is imap-mail.outlook.com. If I select OAuth2, then I can't receive emails unless I reset back to Normal Password.

I'm also supposed to set my SMTP server (smtp-mail.outlook.com) to OAuth2, but this isn't an option on the drop down list.

Help, please!

Hi, 3 weeks ago I suddenly could not log in to my email without errors.

First I get a Google screen "Choose an account" showing the three Gmail accounts I use. I select the first one.

"Mozilla Thunderbird wants to access your Google Account". This refers to calendars. I take the Allow option.

Then I get the message "Warning: Potential Security Risk Ahead

Thunderbird detected a potential security threat and did not continue to localhost. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

When I close this window I get another Google screen .

"Mozilla Thunderbird wants to access your Google Account". This refers to i) mail, ii) contacts, and iii) calendars. I take the Allow option.

Then I get the same message message "Warning: Potential Security Risk Ahead

Thunderbird detected a potential security threat and did not continue to localhost. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

This process cycles through the other two emails. Then I get and authentication failure message.

I have seen hints that this might be a certificate issue but I have tried in vain to find certificates stored in Thunderbird.

Any help approeciated.

Thanks

PaulM

I use Thunderbird 115.12.2 (64-bit) with Hotmail, using a local account on Windows 10. Microsoft is introducing 'modern authentication' on Hotmail, and I want to be ready for this, but I cannot follow the guidance at https://support.microsoft.com/en-gb/office/modern-authentication-methods-now-needed-to-continue-syncing-outlook-email-in-non-microsoft-email-apps-c5d65390-9676-4763-b41f-d7986499a90d

If I try to alter my existing Thunderbird Account Settings for my Hotmail account, the authentication method for Outgoing Server (SMTP) is shown as Normal Password but there is no option to change it to OAuth2. If I delete and recreate my Hotmail account in Thunderbird, I get an error message from Microsoft saying that I cannot log in because my browser is not set to allow cookies -- even though I believe I have set both Thunderbird and Firefox (my default browser) to allow cookies.

From Sept-16-2024 Microsoft will deprecate Normal Password and require OAuth2 authentication on its email accounts accessed from Thunderbird and other clients.

I'm trying to convert my hotmail accounts on Thunderbird to OAuth2 authentication.

Server Settings Authentication can be set to OAuth2 because OAuth2 is an option in that menu.

But SMTP Server Authentication cannot be set to OAuth2 because OAuth2 is not an option in that menu.

Both Connection Security methods ( Inbound and SMTP ), are set to STARTTLS.

See screenshots, thank you.

I have received an email from Microsoft informing me of changes to its authentification procedure. As from Sept, to continue using Thunderbird to access my outlook/hotmail accounts, I have to change the authentification method to Oauth2. The reasons and changes required are detailed here: https://support.mozilla.org/en-US/kb/microsoft-oauth-authentication-and-thunderbird-202 I have 2 problems. 1. imap-mail.outlook.com - I can change my authentification method to Oauth2. However, when I then try to access my mail via TB, I get an error stating that the server imap-mail.outlook.com does not support the authentification method! (see image) 2. Outgoing Server SMTP There is no Oauth2 option available to choose!

Can anyone help? I am using the most up to date version of Thunderbird 115.12.2 (64-bit).

My Thunderbird Version: 115.12.2 (32 Bit)

Microsoft is changing the authentication method for outlook mail to OAuth2. I follow the guide here,

https://support.mozilla.org/en-US/kb/microsoft-oauth-authentication-and-thunderbird-202

And I get to this screen - but my version of the program does not have OAuth2 as an option (see attached image).

Thanks for the help.

Microsoft sent email last night announcing the end of "Normal Password" for Hotmail, and warning that Hotmail would REQUIRE "modern authrentication" beginning 9/16. I have personal desktop subscription to Microsoft 365. I have set Microsoft account to 2FA and checked in Tbird that cookies are enabled.

I have spent hours and days trying & failing. With server imap-mail.outlook.com using OAUTH2, Thunderbird won't sync and shows message saying that server doesn't support the authentication protocol please enter another one. With 2FA still turned on and using Normal Password setting and entering an App Password from Microsoft, the Imap connection is fine about 85% of the time, needing re-entry of the App password about once a day or so (usually requires several tries until App Password gets accepted.)

The 0AUTH2 fails with Norton Smart Firewall turned Off or Turned On-makes no difference.

(Sending email with Outlook and 0AUTH2 DOES work okay.)

I've also tried Imap connection with a different server: Outlook.office365.com, using 0AUTH2.

In this case, Tbird shows me a Timeout error and never makes an Imap connection to the server.  

I've been limping along with the app password, and "normal password" authentication, but now Microsoft announces they will stop accepting connections that are not 0Auth2 ("modern authentication") from Tbird or any other software after 9/16. The clock is ticking. I've tried every remedy I've seen online from Tbird or from Microsoft. Nothing has yet allowed a QAUTH connection for Tbird to a hotmail IMAP server. Please help! !

I would like to change my account settings for my hotmail account, but when I try to change from Normal Password under Outgoing Server (SMTP) there is no option for Oauth. Is there something I can do to enable this option.

I am running version 115.12.2 (64-bit). I have deleted all stored passwords using Settings -> Privacy and Security -> Show Passwords. As expected, when I try to retrieve emails a pop-up appears asking for the password - which I save. However, when I try to send an email there is no pop-up and the remote server rejects the email. How do I set a new outgoing password?

I've appreciated using Thunderbird for an ad-free Hotmail experience for quite some time. I've changed my Hotmail password every few weeks lately and Thunderbird worked fine when I entered the new password at the prompt when Thunderbird started.

Just now however, I needed to get into my Microsoft account that uses the same password as my Hotmail account. My login to Microsoft failed. Trying to understand why, I looked in Thunderbird at the saved password for Hotmail's server:

oauth://login.microsoftonline.com (https://outlook.office.com/IMAP.AccessAsUser.All

https://outlook.office.com/POP.AccessAsUser.All 
https://outlook.office.com/SMTP.Send offline_access)

The saved password was a 464 character long ASCII string totally irrelevant to the password I'd selected for Hotmail and Microsoft.

I went through the password change process for Hotmail, was then able to get into my Microsoft account and restarted Thunderbird. As usual, Thunderbird asked for the new password. I entered it and was then able to receive new mail from the Hotmail server in Thunderbird. However, again, the saved password in Thunderbird for Hotmail was not the password I'd entered.

Next, I deleted the saved passwords in Thunderbird, restarted it and this time it prompted me to be sure I'd downloaded it from a reliable source. I've never seen that prompt before. It came with my Linux Mint installation, so I thought it would be safe, but again there's an irrelevant password saved for my Hotmail account.

It's like it eventually changes my password for Hotmail and Microsoft since I can get mail through Thunderbird with the odd password it saves, but if I use what should be my password for Hotmail or my Microsoft account via a web page interface, the password doesn't work.

I'll have to stop using Thunderbird if this continues.

I have a problem with Thunderbird 115.11.1 with the POP3 server inbound.att.net. Someone on at at7t forum suggested changing from Userid/password to Secure Mail Key. I had previously set up two Keys with at&t, but AI have never activated them. I looked at one URL, and was able to change the settings for inbound.att.net. But I did not see anywhere to enter one of the Keys that I had generated earlier. When I tried to re-configure outbound.att.net, I did not see a OAuth2 option. I do not need to re-configure outbound at the present time, as I can send mail without a problem. But receiving mail does not work. Here is what I see in the error console log:

mailnews.pop3.246: Connecting to pop://inbound.att.net:995 Pop3Client.jsm:141:18 mailnews.pop3.246: Connected Pop3Client.jsm:295:18 mailnews.pop3.246: S: +OK Hello from jpop-0.1

Pop3Client.jsm:348:18 mailnews.pop3.246: C: CAPA Pop3Client.jsm:508:20 mailnews.pop3.246: S: +OK CAPA list follows

IMPLEMENTATION jpop-0.1

EXPIRE-NEVER

PIPELINING

RESP-CODES

TOP

UIDL

USER

SASL PLAIN XOAUTH2

.

Pop3Client.jsm:348:18 mailnews.pop3.246: Possible auth methods: XOAUTH2 Pop3Client.jsm:597:18 mailnews.pop3.246: Current auth method: XOAUTH2 Pop3Client.jsm:668:18 mailnews.pop3.246: C: AUTH XOAUTH2 Pop3Client.jsm:508:20 mailnews.pop3.246: S: +

Pop3Client.jsm:348:18 uncaught exception: initFromMail failed, hostname: inbound.att.net Prompter.sys.mjs:1231:17 mailnews.pop3.246: NetworkTimeoutError: a Network error occurred Pop3Client.jsm:369:18 mailnews.pop3.246: Connection closed. Pop3Client.jsm:395:18 mailnews.pop3.246: SecurityError info: Pop3Client.jsm:375:20 mailnews.pop3.246: Done with status=2152398862 Pop3Client.jsm:1486:18 mailnews.pop3.247: Connecting to pop://inbound.att.net:587 Pop3Client.jsm:141:18 mailnews.pop3.247: ConnectionRefusedError: a Network error occurred Pop3Client.jsm:369:18 mailnews.pop3.247: SecurityError info: Pop3Client.jsm:375:20 mailnews.pop3.247: Done with status=2152398861 Pop3Client.jsm:1486:18 mailnews.pop3.248: Connecting to pop://inbound.att.net:587 Pop3Client.jsm:141:18 mailnews.pop3.248: ConnectionRefusedError: a Network error occurred Pop3Client.jsm:369:18 mailnews.pop3.248: SecurityError info: Pop3Client.jsm:375:20 mailnews.pop3.248: Done with status=2152398861 Pop3Client.jsm:1486:18 mailnews.pop3.249: Connecting to pop://inbound.att.net:587 Pop3Client.jsm:141:18 mailnews.pop3.249: ConnectionRefusedError: a Network error occurred Pop3Client.jsm:369:18 mailnews.pop3.249: SecurityError info: Pop3Client.jsm:375:20 mailnews.pop3.249: Done with status=2152398861

Here is what I changed: Thunderbird: Account Settings --> Server Setings --> Security Settings --> Authentication Method Normal Pasword -> OAuth2

                                                   Inbound.att.net: Port 995 --> 587
                                                   Connection Security: SSL/TLS --> STARTTLS 
   

What do I have to do to get one of my two Keys into the inbound Thunderbird configuration? Thanks.

I've encountered one message in Thunderbird that has remote content enabled (which I don't recall explicitly enabling). In Settings, under "Allow remote content in messages" (unchecked), the "Exceptions..." list is empty. I've also cleared the cache, switched to offline mode, and went back to that message, but it still shows remote content.

I keep getting the prompt* about new.thunderbird.net expiration.

Indeed, after opening https://new.thunderbird.net in Firefox, the subdomain uses the Let's Encrypt SSL certificate that expired on 22nd May 2024. This certificate list many subdomains by name.

For https://www.thunderbird.net (after opening it in Firefox), another SSL certificate file is used (issued by Google Trust Services LLC by on 13 May 2024) valid until 11 Aug 2024. It says it should apply to thunderbird.net and *.thunderbird.net, but the new.thunderbird.net still points to the old Let's Encrypt certificate perhaps?

• I know I could just allow the expired one as an exception

While using Thunderbird, it mysteriously stopped connecting to Yahoo Mail. This happens every few years and I think it's related to Oauth2 credentials.

I generated a new secure mail key and copied it into Thunderbird but that didn't work. So then I checked online, and one of the steps in the Thunderbird instructions is: "Select 'Server Settings' for mail account; Set incoming server 'Authentication Method' to 'Oauth2'; Click on 'OK' ". But Oauth2 isn't one of the options. The choices are normal password, encrypted password, Kerberos/GSSAPI, and NTLM.

I'm using POP. Tbird version 115.11.1.

Guten Tag,

ich benötige Hilfe das Googlefenster weg zu bekommen. Ich möchte mich nicht über Google anmelden, wenn ich es auch über Mozilla kann. Die Anmeldedaten von Mozilla funktionieren nicht.

Bitte sagen Sie mir, wie ich das Problem lösen kann.

In dem Fenster habe ich keine Möglichkeiten die Links an zu klicken, da dann das Fenster weiß wird. Ich kann es nur wegklicken, es kommt aber innerhalb von 5 Minuten wieder. Oder ich melde mich mit google an, was ich aber nicht möchte.

Danke für Ihre Hilfe.

Eva Langenberger

Not so newbee here. Very long career in S/W, but 20 years as a Luddite so now trying to catch up.

3 gmail accs - all good. 3 hotkey accs - receive ok, but cannot send - broken recently. These old legacy accs were taken over by iPrimus but are still visible/SameSameBroken at hotkey webmail.

1 of the 3 hotkey is set to Default. It is MORE broken than the other 2. How do I remove this Default? I will choose a gmail account to be the Default. But how exactly do i unDefault the hotkey acc.

No, I don't need nor want, to use iPrimus pop/smtp settings. Yes, the broken hotkey smtp issue is probably no biggy - just work in hand.

Thanks for any assistance... I see this thread is very busy. ps, I remain committed to the goals of Open (free) Software. If only the worldview was as committed, how good it would be for everyone!

I have just completely reinstalled Thunderbird v115.11.1 after uninstalling the previous installation. There are two problems, possibly linked to a faulty or missing setting.

Remote images will not display, even after specifically enabling remote images for each email, or after turning on "display remote content" as a default. Also it claims there is a potential security threat with Thunderbird's own web addresses: "live.thunderbird.net." and "addons.thunderbird.net.".

I have attached screen-shots of the error messages, and of a thunderbird email that fails to display its images.

My wife & I have the same PCs running Windows 10 & Thunderbird 115.11.0 (32bit).

We have a hosted web-site that also supports email, and we each have an email account (eg neddy@goon.com.au & minnie@goon.com.au). I've checked that both our POP server configurations are identical but despite that about once a week minnie@goon.com.au receives a warning to add security exception but neddy doesn't. This started happening two weeks ago after a years error free running.

The host has checked that goon.com.au has a valid SSL certificate, so what could be causing the discrepancy and how do I set about fixing it please?

I installed Thunderbird and downloaded the mail (IMAP server) to the mailbox, but at the same time the program deleted all the mail from the server!!! I can't find anywhere in Thunderbird how to turn it off so that the program doesn't delete messages from the server. Someone suggested that you should turn off "the selected folder will be available in offline mode" in the Synchronization tab. I did it, but it didn't help and I turned it on again. Now I don't have my messages anywhere, neither on my computer nor on the server. Rescue news from ten years - where are they????