App passwords

You can control whether third-party apps can access your account using app passwords. For example, a password that you create for your mail client doesn't allow access to Yandex.Disk using the WebDAV protocol. No app password grants access to your account.

You can create app passwords on the Account management page. When two-factor authentication is enabled, app passwords are required and can't be disabled.

Attention. Official Yandex apps and software require a regular Yandex ID password if two-factor authentication isn't enabled, and a one-time password if 2FA is enabled.

You will need to create a separate password for each third-party application or program that requires you to enter your Yandex password. These include:

  • email clients (Mozilla Thunderbird, Microsoft Outlook, The Bat!, etc.);
  • WebDAV client for Yandex.Disk
  • CardDAV-client for syncing Yandex.Mail contacts with a mobile device
  • CalDAV client for Yandex.Calendar
  • Jabber client (Pidgin, Adium, etc.);
  • mail importers for other mail services (, Gmail, and others)

To create an app password:

  1. In the Passwords and authorization section, select Enable app passwords. Confirm the action and click Create new password.

    If two-factor authentication is enabled, click Create app password.

  2. Select the type of application.
  3. Come up with a name for the password. For example, you can use the name of the application that you are creating a password for. The password will be shown with this name in the list.
  4. Click Create. The app password will appear in a pop-up window.
Restriction. You can only see the generated password once. If you entered the password incorrectly and then closed the window, delete the current password and generate a new one.

Resetting application passwords

All application passwords that you created get reset in the following cases:

  • You change a password (with two-factor authentication disabled)
  • You enable or disable two-factor authentication
  • You restored access to your account by yourself or with the help of our support staff
  • You followed the Log out on all devices link on the Account management page.

Every app password you use must be re-generated following any of these events.