App passwords

Third-party apps or sites that need to access your Yandex data sometimes ask you to enter your password to log in to your account. To control whether third-party apps can access your account, you can use app passwords. For example, a password that you create for your mail client doesn't allow access to Yandex.Disk using the WebDAV protocol.

No app password grants access to your account.

Attention. Official Yandex apps and software require a regular Yandex ID password or a one-time password from the Yandex Key app, if you have this login method enabled.

You can create a separate password for each app type:

  • Windows, macOS, Android, or iOS email client, such as Microsoft Outlook, The Bat!, and more.
  • WebDAV client for Yandex Disk
  • CardDAV client for syncing Yandex Mail contacts with a mobile device
  • CalDAV client for Yandex Calendar
  • mail importers for other mail services (Mail.ru, Gmail, Outlook.com and others)
  1. Create an app password
  2. Delete an app password
  3. Resetting application passwords

Create an app password

  1. Open the Security tab.
  2. In the Access to your data section, select App passwords.
  3. Under Create an app password, choose the app type.
  4. Come up with a name for the password. For example, you can use the name of the app you're creating a password for. The password will be shown with this name in the list.
  5. Click Next. The app password will appear in a new window. Copy and save it.

You can only see the generated password once. If you entered the password incorrectly and then closed the window, delete the current password and generate a new one.

Delete an app password

  1. Open the Security tab.
  2. In the Access to your data section, select App passwords.
  3. Choose the password you want to delete.
  4. Click Delete password and confirm the action.

    The app that uses this password will no longer have access to your account.

Resetting application passwords

All application passwords that you created get reset in the following cases:

  • You used the standard password to log in and then changed it.
  • You have enabled or disabled logging in with a one-time password.
  • You restored access to your account by yourself or with the help of our support staff
  • You followed the Log out on all devices link in the Devices section.

After that, you'll have to create each password you use.