Need to update email settings?
ATTHelpForums's profile
Community Support

Community Support

 • 

2.7K Messages

Thursday, February 8th, 2018 7:21 PM

Learn How AT&T Is Making Your Email More Secure With Oauth & Secure Mail Key

Email_Security_.pngAT&T and Yahoo are making your email more secure. The new security implementation, also known as Open Authentication(OAuth), works by encrypting your credentials to better protect them from hackers. During this change, you may have trouble logging into some email applications. Not to worry, there is a solution.

 

When Will This Happen? 

Very soon!.

 (You can make the changes now by reviewing our online support page for information and assistance.)

 

What You Need to Do 

If using the web to access your email, there is nothing you need to do as our web experience is already OAuth compatible (check below). If you are already using the OAuth settings within mail you may be directed to re-sign in, and if you are using a non-OAuth compatible application, you will need to upgrade to one of the OAuth compatible apps listed below and select Yahoo as your service provider when you sign in. If you do not remember your password, reset it now

 

Or

 

Create A Secure Mail Key

What is a Secure Mail Key? it is a 16-character one-time password used in email applications in lieu of an OAuth flow.  Create your key now.

 

To verify your Application is compatible or for additional FAQs and information, visit our support page.

 

Compatible vs. Non-Compatible OAuth Applications 

OAuth Compatible

Non-OAuth Compatible

The applications listed below are OAuth compatible. Note that you are using OAuth only if you selected Yahoo as your provider when you set up your account in the application.

If you are unsure if you selected Yahoo during account setup, see “How do I know if I used OAuth/selected Yahoo to set up my account?” below.

If you use one of the applications below, you need to upgrade to an OAuth compatible application. 

 If you prefer to continue using your current application, you’ll need to create a secure mail key to use with it.

·         Apple Mail, Outlook Mobile, and the Yahoo Mail app on iPhones and iPads running iOS 9.0 and above

·         Gmail, Outlook Mobile, and the Yahoo Mail app on Android devices running Lollipop/5.0 or above

·         Apple Mail on Mac running OS 10.11/El Capitan or above 

·         Windows Mail on PCs running Windows 10

·         Outlook 2010, 2013, 2016

·         Mozilla Thunderbird

·         Windows Mail on personal computers running Windows 8 or older

·         Apple Mail/Mac Mail on macOS 10.10/Yosemite or older

 

ChrisZ, AT&T Community Specialist 

AT&T Help

Need help with an account specific question?  Post a new question here on the forums by clicking the "Ask a Question" button.
For additional support, please visit us at our AT&T services hub.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

1 Attachment

Accepted Solution

Official Solution

Community Support

 • 

2.7K Messages

6 years ago

There are some email changes coming, those changes may affect how you sign in. Not to worry, we have the solution for you above!

 

ChrisZ, AT&T Community Specialist 

Accepted Solution

Official Solution

Community Support

 • 

230.7K Messages

4 years ago

Hey, @jerrythroc!

 

Thanks for reaching out! We'd be glad to tell you about our new OAuth security!

 

To clarify, you only need to set up a secure mail key if you plan on accessing your email through an app or program that doesn't use Open Authentication, or OAuth. OAuth encrypts your username and password to protect your info from hackers and fraudsters.

 

For a list of apps and programs that use OAuth, along with more information about the topic, please check out our article on Using OAuth or Secure Mail Keys for email apps.

 

Let us know if you have anymore questions!

 

Ramses, AT&T Community Specialist

Guru

 • 

498 Messages

6 years ago

My copy of Thunderbird, version 52.6.0 (current) has an "OAuth2" option for password authentication.  Are you saying that won't work?

Contributor

 • 

1 Message

6 years ago

I can get on the ATT.net home page. But cannot sign in to the email. 

When I try it the diagnostic says cannot connect to web server 'cprodmasx.att.com'

What should I try?

Tutor

 • 

1 Message

6 years ago

I have been locked out of my Yahoo email for a week...repeated C/S calls have not helped..very angry...can access att.net, however, att.com login does not recognize my user ID.  tried resetting PW several dozen times...same non result. Is anyone at ATT listening????   mgm

Tutor

 • 

1 Message

6 years ago

I am NOT a tech and do not understand all of the things to do. I will visit my local AT&T Store but once again am disappointed in AT&T for its changes requiring the user to fix their problems.  All I am trying to do is get my login accepted on my laptop and I do not understand why there is a problem when it is accepted on my phone and tablet...

Mentor

 • 

72 Messages

6 years ago

Does AT&T plan to announce or send notifications directly to its users about the April 1st email security upgrade requiring them to take action if they use an email client without OAuth?  Posting a "solution" article on the AT&T site and this forum only gets to a handful of users such as myself who stumble on this accidentally while searching for a solution to another issue (the inability to send from alias@bellsouth.com problem).  It would be helpful if AT&T would send an email notice to all of its users/customers with @ATT.com or @Bellsouth.com or @sbcglobal.com and all other email accounts potentially affected by the requirement to sign in to their email client using a new "secure mail key", rather than customers having to call ATT or search online when they are no longer able to receive email after April 1st.  Please AT&T, do a better job of enabling your customers to take necessary action to prevent lock out of their email accounts which will create more bad press for you and customer calls. 

 

Expert

 • 

15K Messages

6 years ago

This article is basically the same as the original announcement.  It goes through all this crap about using OAuth and slips in you don't need it with older email clients if you switch them to using a secure mail key (basically a password with a fancy name where you still use your account password just to create it).

 

Further it still doesn't clarify which OAuth they are talking about.  In other words is it OAuth1 or OAuth2?   Since the original announcement I've never gotten a clarification of that.  OAuth2 is not compatible with OAuth1 and most (all?) email clients only support one or the other and even then there may be problems in the protocol exchanges between the client and server.

(edited)

Mentor

 • 

30 Messages

6 years ago

I, too, have been locked out of my email account.  I cannot find support for solving it.  Changing the password only resulted in changing the password to the ATT website.  I still cannot login to my email account.

Then when you click "help" it offers a link to "contact us".  There is no "email" option on the contact page, only choices for the other services (TV, wireless, internet, etc.).

New Member

 • 

2 Messages

This describes my current situation to a T. I have not been able to find a resolution to it.

Expert

 • 

15K Messages

6 years ago

Changing the password only resulted in changing the password to the ATT website.

If you can log into the att website (myAT&T, start.att.net, or webmail through start.att.net) you can log into the webmail since you use the same account and password.

 

I still cannot login to my email account.

Since you should be able to log into the webmail as I just said is it an email client app (Thunderbird, Outlook, etc.) that's having the problem?  You are posting in this thread whose main post addresses accessing email through an email client.  If so, as suggested in that first post, try using a secure mail key instead of your account password in your client.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.