Learn How AT&T Is Making Your Email More Secure With Oauth & Secure Mail Key

[ATTHelpForums]

AT&T and Yahoo are making your email more secure. The new security implementation, also known as Open Authentication(OAuth), works by encrypting your credentials to better protect them from hackers. During this change, you may have trouble logging into some email applications. Not to worry, there is a solution.

When Will This Happen? 

Very soon!.

 (You can make the changes now by reviewing our online support page for information and assistance.)

What You Need to Do 

If using the web to access your email, there is nothing you need to do as our web experience is already OAuth compatible (check below). If you are already using the OAuth settings within mail you may be directed to re-sign in, and if you are using a non-OAuth compatible application, you will need to upgrade to one of the OAuth compatible apps listed below and select Yahoo as your service provider when you sign in. If you do not remember your password, reset it now. 

Or

Create A Secure Mail Key

What is a Secure Mail Key? it is a 16-character one-time password used in email applications in lieu of an OAuth flow.  Create your key now.

To verify your Application is compatible or for additional FAQs and information, visit our support page.

Compatible vs. Non-Compatible OAuth Applications 

OAuth Compatible	Non-OAuth Compatible
The applications listed below are OAuth compatible. Note that you are using OAuth only if you selected Yahoo as your provider when you set up your account in the application. If you are unsure if you selected Yahoo during account setup, see “How do I know if I used OAuth/selected Yahoo to set up my account?” below.	If you use one of the applications below, you need to upgrade to an OAuth compatible application.   If you prefer to continue using your current application, you’ll need to create a secure mail key to use with it.
·         Apple Mail, Outlook Mobile, and the Yahoo Mail app on iPhones and iPads running iOS 9.0 and above ·         Gmail, Outlook Mobile, and the Yahoo Mail app on Android devices running Lollipop/5.0 or above ·         Apple Mail on Mac running OS 10.11/El Capitan or above  ·         Windows Mail on PCs running Windows 10	·         Outlook 2010, 2013, 2016 ·         Mozilla Thunderbird ·         Windows Mail on personal computers running Windows 8 or older ·         Apple Mail/Mac Mail on macOS 10.10/Yosemite or older

ChrisZ, AT&T Community Specialist 

[LindaSTefano]

I have not been able to log into my email account for a while now, very frustrating!! I have changed my password, asked that a temporart be sent by snail mail (never received it) Nothing I do helps ! Keep getting a message that I need to update my email sitting but I can't. People are getting upset with me for not answering email when I never get it. I only use my desk top for email so it has nothing to do with my phone. 

[Paulabbee]

I’m having a problem not being able to access my email. So I got a new phone number but still have the old phone (not for long) and when I try to login to my email on my new phone or desktop or wherever (except my old phone)  it sends a text message to my old phone asking to verify. When I lose the old phone, how am I supposed to get into my email when i can’t verify it.

I LITERALLY spent 6 hours with them and they have not fixed it. They said maybe in 10 days what they have done will work. 

[_xyzzy_]

@Paulabbee 

Did you set up two-factor authorization (2FA)?  It sounds like what you are describing.  You must have set it up previously through your myAT&T.   So it's up to you to correct it to text your new phone number again through your myAT&T.

[Paulabbee]

I don’t recall setting it up, but maybe awhile back. However, I cannot remove it. Do you know how to remove it?  The ATT people do not know I guess since they helped me and it still didn’t take care of it. 

[_xyzzy_]

Since I haven't set up 2FA with an att account I can't help on how to correct it.  But I assume you have to do it through myAT&T.  If you try to log in there and it calls your old phone as part of the log in why doesn't it log in?  You said you still have the old phone to receive the text message as part of the log in.

[cnorby]

Hello --

I have an _____@pacbell.net yahoo account that I am not able to log into on my laptop. (I am still able to login on my iPhone.  (My laptop is a PC - not a Mac.) Is there a way to remedy this so I can again login on my laptop.

Thanks,

-C

[cnorby]

I cannot log into my "pacbell.net" account using my PC laptop, and I am not really understanding the instructions. Can you explain them again? 

I am able to login in on my iPhone. (I am no longer am an ATT customer.)

[_xyzzy_]

@cnorby 

You don't say how you are accessing your email on your laptop.  Is it through the webmail (i.e., through your browser) or do you use a email client app (e.g., Thunderbird, Outlook, etc.) like I assume you are using on your iPhone?

Certainly with the iPhone it is highly recommended you use a secure mail key in place of the account password.  Do the same with the email client app in the laptop if you are using a email client there too.  But on the laptop you should still make sure your webmail is also working.  That requires your account (email address) and password to log in.  If you you cannot log in there then try changing the account password (e.g., Forgot ID/Password) as indicated in the announcement near the op right of this page.

Creating a secure mail key is fairly straightforward and that article I referenced shows the step-by-step instructions.  It's recommended for email client apps to get some additional security.

[defran]

This has been going on far to long 

[MTB1956]

No they are not and don’t have any plans to restore these legacy email accounts.  I spoke with IT tech support through my AT&T wireless service and ATT Internet Tech Support.  Both say the problem is a result of the change in servers from ATT/Yahoo! To the Currently.ATT.com platform.

 If I’m wrong I’ll be happy however, I’m doubting they plan to restore our now “Inactive And Unrecognized” email accounts. 

[Gdsullivan1]

 Chris Z any updates on the email problem would be appreciated!!!!!!!

When try to reset. I am asked  security question from 16 years ago that I don't know the answer to.

Step 1. I log in to yahoo mail like I have done for years

Step 2. I am transferred to an AT&T email login

Step 3. I enter my user id and password

Step 4. I get this message "For your security, your AT&T Access ID has a temporary protection lock." 

            "To unlock it,reset your password (FL001)"

Step 5. I click the rest your password hyperlink

Step 6. Then I see a dialog box that says"You are being redirected to ATT.com  where you can recover your password.

Step 7. I am transferred to https://www.att.com/.   On this site I see  nothing about resetting a password. Only retail items like wireless, internet ,  and TV  services etc....

This time I did not get to a place that asked for security questions.. This is a dead end.  Does anyone have any answers!!!!!!!!!!!!!!!!!!! THANKS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[Laurajhv]

I got a Free Msg from AT&T that read like this:  AT&T Free Msg: Action Required:  Please update your AT&T email app settings to maintain access to your account.  AT&T takes data security seriously and need you to make this update to meet our current security standards.  Learn More at att.com/emailclient

I called customer service but they said it was a fishing scheme.  However, I see information in the forums re: a security key which is what the link asks me to set up. For good measure I reset my passwords but want to make sure I am not overlooking something I am supposed to do. 

[march1980]

Looking for a clear, concise and non-technical answer to what is necessary regarding the emails I've received from Yahoo about establishing a Secure Mail Key. I have Outlook 2010 on my PC, don't ever have to sign in with a user name or password to get my emails. I also have these emails delivered to my iphone. My email domain is: ----@bellsouth.net. The information on all of the sites I've looked at is old and/or confusing - at least to me. Several questions: will I be required to set up the Mail Key just to get emails on my PC via Outlook? Or is the Secure Key only required if I log into my att.net via the Yahoo Site? Has anyone established the Secure Key with a similar configuration? any problems?

If I establish a Secure Key, when will it be used? How? Every time I check my Outlook? or only when I log in to get email via Yahoo?

Will I have to change anything on my iphone to continue getting my Outlook emails?

Please provide my options with as much detail as possible vs. a 1 sentence reply.

Thank you very much - I can't believe that I'm the only one who is confused!

[BLdbfW]

Is the text message I received 1 Oct at 10:19 pm, on my phone from  "55496, AT&T Free msg. stating Action Required. Please update your AT&T mail app settings to maintain access to your account. AT&T takes data security seriously and need you to make this update to meet our current security standards. Learn more at

att.com/emailclient?"

[NewName]

@ laurajhv - Here's the email message I've been receiving for several weeks, which is definitely a scam:

"Dear -Yahoo Mail User,

Your -Yahoo Mail version is outdated, Failure to Upgrade to the newest Yahoo Mail Basic Version.

Will result to a permanent account closure.

To upgrade click the link below and accept our new terms and conditions."

I did not fall for it and did not click the link, so not sure what happens if someone does.  The message you received is a bit different, but looks like it could be referring to the OAuth security protocol.  

@ March1980 - I had a problem with my alias bellsouth account in February because, for some unexplained reason, ATT deactivated alias legacy accounts, but things got straightened out after a couple of weeks.  I also use MS Outlook as my email client on the PC.  So, during the process of trying to diagnose the problem, I read about the new OAuth security key requirements and did change the password on my Outlook alias@bellsouth.net account to the new secure mail key and everything has been working smoothly (knock on wood) since April 2019.  You do not have to use the secure mail key to log into your webmail account.  Hope that helps,