Community Support
•
2.7K Messages
Learn How AT&T Is Making Your Email More Secure With Oauth & Secure Mail Key
AT&T and Yahoo are making your email more secure. The new security implementation, also known as Open Authentication(OAuth), works by encrypting your credentials to better protect them from hackers. During this change, you may have trouble logging into some email applications. Not to worry, there is a solution.
When Will This Happen?
Very soon!.
(You can make the changes now by reviewing our online support page for information and assistance.)
What You Need to Do
If using the web to access your email, there is nothing you need to do as our web experience is already OAuth compatible (check below). If you are already using the OAuth settings within mail you may be directed to re-sign in, and if you are using a non-OAuth compatible application, you will need to upgrade to one of the OAuth compatible apps listed below and select Yahoo as your service provider when you sign in. If you do not remember your password, reset it now.
Or
Create A Secure Mail Key
What is a Secure Mail Key? it is a 16-character one-time password used in email applications in lieu of an OAuth flow. Create your key now.
To verify your Application is compatible or for additional FAQs and information, visit our support page.
Compatible vs. Non-Compatible OAuth Applications
| OAuth Compatible |
Non-OAuth Compatible |
| The applications listed below are OAuth compatible. Note that you are using OAuth only if you selected Yahoo as your provider when you set up your account in the application. |
If you use one of the applications below, you need to upgrade to an OAuth compatible application. |
| · Apple Mail, Outlook Mobile, and the Yahoo Mail app on iPhones and iPads running iOS 9.0 and above · Gmail, Outlook Mobile, and the Yahoo Mail app on Android devices running Lollipop/5.0 or above · Apple Mail on Mac running OS 10.11/El Capitan or above · Windows Mail on PCs running Windows 10 |
· Outlook 2010, 2013, 2016 · Mozilla Thunderbird · Windows Mail on personal computers running Windows 8 or older · Apple Mail/Mac Mail on macOS 10.10/Yosemite or older |
ChrisZ, AT&T Community Specialist
AT&T Help
Need help with an account specific question? Post a new question here on the forums by clicking the "Ask a Question" button.
For additional support, please visit us at our AT&T services hub.
*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.
Accepted Solution
Official Solution
ATTHelpForums
Community Support
•
2.7K Messages
5 years ago
There are some email changes coming, those changes may affect how you sign in. Not to worry, we have the solution for you above!
ChrisZ, AT&T Community Specialist
0
0
Accepted Solution
Official Solution
ATTHelp
Community Support
•
210.6K Messages
3 years ago
Hey, @jerrythroc!
Thanks for reaching out! We'd be glad to tell you about our new OAuth security!
To clarify, you only need to set up a secure mail key if you plan on accessing your email through an app or program that doesn't use Open Authentication, or OAuth. OAuth encrypts your username and password to protect your info from hackers and fraudsters.
For a list of apps and programs that use OAuth, along with more information about the topic, please check out our article on Using OAuth or Secure Mail Keys for email apps.
Let us know if you have anymore questions!
Ramses, AT&T Community Specialist
0
0
lem3
Guru
•
496 Messages
5 years ago
My copy of Thunderbird, version 52.6.0 (current) has an "OAuth2" option for password authentication. Are you saying that won't work?
0
0
keithelwin
Contributor
•
1 Message
5 years ago
I can get on the ATT.net home page. But cannot sign in to the email.
When I try it the diagnostic says cannot connect to web server 'cprodmasx.att.com'
What should I try?
0
0
mgmau64
Tutor
•
1 Message
5 years ago
I have been locked out of my Yahoo email for a week...repeated C/S calls have not helped..very angry...can access att.net, however, att.com login does not recognize my user ID. tried resetting PW several dozen times...same non result. Is anyone at ATT listening???? mgm
0
individual2
Tutor
•
1 Message
5 years ago
I am NOT a tech and do not understand all of the things to do. I will visit my local AT&T Store but once again am disappointed in AT&T for its changes requiring the user to fix their problems. All I am trying to do is get my login accepted on my laptop and I do not understand why there is a problem when it is accepted on my phone and tablet...
0
NewName
Mentor
•
72 Messages
5 years ago
Does AT&T plan to announce or send notifications directly to its users about the April 1st email security upgrade requiring them to take action if they use an email client without OAuth? Posting a "solution" article on the AT&T site and this forum only gets to a handful of users such as myself who stumble on this accidentally while searching for a solution to another issue (the inability to send from alias@bellsouth.com problem). It would be helpful if AT&T would send an email notice to all of its users/customers with @ATT.com or @Bellsouth.com or @sbcglobal.com and all other email accounts potentially affected by the requirement to sign in to their email client using a new "secure mail key", rather than customers having to call ATT or search online when they are no longer able to receive email after April 1st. Please AT&T, do a better job of enabling your customers to take necessary action to prevent lock out of their email accounts which will create more bad press for you and customer calls.
0
_xyzzy_
Expert
•
15K Messages
5 years ago
This article is basically the same as the original announcement. It goes through all this crap about using OAuth and slips in you don't need it with older email clients if you switch them to using a secure mail key (basically a password with a fancy name where you still use your account password just to create it).
Further it still doesn't clarify which OAuth they are talking about. In other words is it OAuth1 or OAuth2? Since the original announcement I've never gotten a clarification of that. OAuth2 is not compatible with OAuth1 and most (all?) email clients only support one or the other and even then there may be problems in the protocol exchanges between the client and server.
(edited)
0
0
sdarca22
Mentor
•
30 Messages
5 years ago
I, too, have been locked out of my email account. I cannot find support for solving it. Changing the password only resulted in changing the password to the ATT website. I still cannot login to my email account.
Then when you click "help" it offers a link to "contact us". There is no "email" option on the contact page, only choices for the other services (TV, wireless, internet, etc.).
1
_xyzzy_
Expert
•
15K Messages
5 years ago
If you can log into the att website (myAT&T, start.att.net, or webmail through start.att.net) you can log into the webmail since you use the same account and password.
Since you should be able to log into the webmail as I just said is it an email client app (Thunderbird, Outlook, etc.) that's having the problem? You are posting in this thread whose main post addresses accessing email through an email client. If so, as suggested in that first post, try using a secure mail key instead of your account password in your client.
0