A 4-minute walkthrough for getting your Yandex Mail working with Outlook, Thunderbird, Apple Mail or iPhone Mail. Yandex needs two things turned on: IMAP access in your Mail settings, and a 16-character app password generated from your Yandex ID security page. Both are covered in 7 steps.
Video Transcript
Hello and welcome. This video shows how to create an app password for Yandex Mail. You need this when you want to use your Yandex email in a third-party client like Outlook, Thunderbird, Apple Mail or iPhone Mail. The 16-character app password lets the client connect without using your main Yandex password.
Yandex requires two things to be enabled before app passwords work: IMAP access in your Mail settings, and two-factor authentication on your Yandex account. We will do both.
Step one. Open Yandex Mail in a browser and sign in. Click the gear icon at the top right and choose All Settings. In the left sidebar pick Email Clients. Tick the boxes labelled From the imap.yandex.com server via IMAP and App passwords and OAuth tokens. Click Save Changes. IMAP is now enabled on the Mail side.
Step two. Open your Yandex ID account at id.yandex.com. Go to Security and turn on Two-Factor Authentication if it is not already on. Yandex supports SMS, the Yandex Key authenticator app, and TOTP-compatible authenticators like Authy or Google Authenticator.
Step three. From the Security page, click App Passwords. The link only appears after 2FA is on.
Step four. Click Create a new password or the plus icon next to Email Address. Pick the application type Mail. Type a clear name like Outlook on Office Laptop. Click Create.
Yandex shows a 16-character app password in a popup. Copy it immediately, you cannot view it again later.
Step five. Paste this password into your email client. Use imap.yandex.com on port 993 with SSL for incoming mail. Use smtp.yandex.com on port 465 with SSL for outgoing. Username is your full email address. Test by sending yourself an email. If it arrives, the setup works. Thanks for watching.
Why Yandex Mail Needs an App Password
Yandex Mail is one of the largest email providers in Russia and serves millions of users globally, including a meaningful Indian user base who use it for international correspondence and as an alternative to Gmail. When you try to add Yandex Mail to Outlook, Thunderbird or any third-party client, Yandex blocks your regular account password and instead requires a special 16-character "app password" generated from your account security page. This is identical in spirit to Gmail's app password system and Yahoo Mail's, but the procedure is more involved because Yandex separates IMAP enablement from app password creation across two different account settings pages.
The reason for the split: Yandex Mail and Yandex ID are technically separate products inside the company. Mail handles the inbox itself (server settings, folders, spam). Yandex ID handles authentication for your entire Yandex account including Mail, Disk, Music, Maps and the search engine. Email-client access requires both: Mail must allow IMAP traffic, and Yandex ID must issue an app-specific credential. Skipping either leaves you with a setup that looks correct but fails at the connection step. The video walks through both halves cleanly.
If you are setting up multiple email accounts in one client, you may also want our guides for Zoho Mail, AOL Mail and GMX Mail. Each provider's app password procedure is slightly different, but the underlying concept is the same: 2FA on, app password generated, paste into client.
Yandex Mail Server Settings (Reference Card)
These are the official settings documented by Yandex. Save or screenshot for reference. The same settings work whether you are on yandex.com (international) or yandex.ru (Russian).
| Setting | Value |
|---|---|
| Incoming server (IMAP) | imap.yandex.com (or imap.ya.ru if you are outside Russia and the .com server is slow or blocked) |
| Incoming port | 993 with SSL/TLS required |
| Outgoing server (SMTP) | smtp.yandex.com |
| Outgoing port (SSL) | 465 with SSL/TLS |
| Outgoing port (STARTTLS) | 587. Use this if your network blocks 465 (some Indian college Wi-Fi and corporate networks do) |
| Username | Your full email address (e.g. yourname@yandex.com). Some old clients want only the part before @, try both if one fails |
| Password | The 16-character app password, never your regular Yandex password |
| Authentication | Required for both IMAP and SMTP. Tick "Server requires authentication" in your client's outgoing server settings |
| POP3 server (alternative) | pop.yandex.com port 995 SSL. Yandex notes that POP3 is no longer being updated, so IMAP is recommended |
| OAuth alternative | Modern clients (Thunderbird 115+, Apple Mail Catalina+) can use OAuth instead of app password. The Yandex OAuth flow opens a Yandex sign-in page and grants the client a temporary token |
Yandex.com vs Yandex.ru: What Changed in 2024
Yandex split into two separate companies in 2024 due to international sanctions and corporate restructuring. Both serve email but are now operationally and legally different organisations.
| Aspect | Yandex.com (international) vs Yandex.ru (Russia) |
|---|---|
| Corporate ownership | Yandex.com is operated by Nebius Group, headquartered in the Netherlands. Yandex.ru is operated by Yandex LLC, headquartered in Moscow. |
| Login URL | Yandex.com: id.yandex.com for account management. Yandex.ru: passport.yandex.ru. |
| App passwords page | Yandex.com: id.yandex.com/security/app-passwords. Yandex.ru: passport.yandex.ru/profile Security tab. |
| Email server hostname | Both still use imap.yandex.com as the public IMAP entry point. Yandex.ru also accepts imap.yandex.ru. |
| Account migration | Existing Yandex accounts created before the 2024 split mostly stayed on the original platform. New accounts go to whichever domain you sign up at. |
| Indian users | Most Indian Yandex Mail users have yandex.com addresses (signed up via the international site). The procedure on this page applies directly. |
| Sanctions and access | Yandex.ru is subject to international sanctions in some jurisdictions. Yandex.com is not. If your country blocks yandex.ru, the .com platform remains accessible. |
7 Steps to Generate the Yandex Mail App Password
-
Open mail.yandex.com in a desktop browser and sign in to the Yandex account you want to enable. Click the gear icon at the top right of the Mail interface. Pick All Settings from the dropdown.
-
In the All Settings sidebar, click Email Clients. Tick BOTH boxes: From the imap.yandex.com server via IMAP and App passwords and OAuth tokens. Click Save Changes. This is the IMAP enable half. Without it, the app password you create later will not actually let any client connect.
-
Open id.yandex.com in a new tab. Sign in with the same Yandex account. Click Security in the left sidebar (or top menu depending on layout). If Two-Factor Authentication is OFF, turn it on now. Yandex offers SMS verification, the Yandex Key authenticator app, or any TOTP-compatible authenticator like Google Authenticator, Authy or 1Password.
-
After 2FA is on, refresh the Security page. The App Passwords link now appears in the Passwords and Authorization section. Click it. Yandex may ask you to confirm by re-entering your password or completing a 2FA challenge.
-
In the App Passwords window, click Create a new password (or the plus icon next to Email Address). Pick the application type Mail. Type a clear, descriptive password name like Outlook on Office Laptop or iPhone 13 Mail at Home. Click Next.
-
Yandex shows a 16-character app password in a popup. Copy it immediately. The password is shown only once. If you close the popup before copying or paste it incorrectly, you must delete that password and create a new one. Yandex never shows the same password twice.
-
In your email client (Outlook, Thunderbird, Apple Mail, iPhone Mail, Samsung Email), add a new account. When prompted for the password, paste the 16-character app password. Use server settings imap.yandex.com port 993 SSL incoming, smtp.yandex.com port 465 SSL outgoing. Username is your full email address. Send yourself a test email to verify.
Common Errors and Fixes
| Error or symptom | Cause and fix |
|---|---|
| App Passwords link missing from Security page | Two-Factor Authentication is not enabled on your Yandex account. Turn 2FA on at id.yandex.com Security, then the App Passwords link appears. |
| App password generated but client still says "invalid login" | You skipped the IMAP enable step. Go back to Yandex Mail All Settings, click Email Clients, and confirm both checkboxes are ticked: From the imap.yandex.com server via IMAP and App passwords and OAuth tokens. Save Changes. This is the single most common Yandex setup error. |
| "Authentication required" or "Send auth command first" | SMTP authentication is not enabled in your client. In Outlook: More Settings > Outgoing Server > tick My outgoing server requires authentication. In Thunderbird this is on by default. |
| "Sender address rejected: not owned by auth user" | The From address in your email client does not match the Yandex account you authenticated with. In your client account settings, set the From address to your full Yandex email address, not a different display name without it. |
| Connection times out from India or Asia | imap.yandex.com routes can be slow from some Indian and Asian ISPs because the servers are in Europe. Yandex provides imap.ya.ru as a faster international alternative. Try that hostname if .com is slow. |
| "Username failure or POP3 disabled" | You configured POP3 instead of IMAP. POP3 requires a separate enable step (Yandex Mail Settings > Email Clients > tick "From the pop.yandex.com server via POP3"). Easier fix: switch your client to IMAP, which you already enabled. |
| "User Agreement not accepted" | Yandex requires you to log into the web Mail interface at least once before allowing IMAP. New accounts that were created via API or apps without ever opening the web inbox hit this. Open mail.yandex.com in a browser, accept any prompts, then retry the client. |
| App password kept failing despite correct paste | Spaces are silently appended on some browsers when copying. Paste into a plain-text editor first, confirm exactly 16 characters with no spaces or newlines, then paste from there into your email client. |
| Lost the app password | Cannot recover. Go to id.yandex.com Security > App Passwords, find the entry by name, click Delete to revoke, then create a new one. Update your email client with the new 16-character code. |
Comparing Yandex Mail App Password to Other Providers
| Provider | App password procedure summary |
|---|---|
| Gmail / Google Workspace | Single page, single step (after 2FA). myaccount.google.com/apppasswords. IMAP is enabled by default on personal Gmail. |
| Yahoo Mail | Single page. Account Security > Generate and manage app passwords. IMAP enabled by default. |
| Zoho Mail | Two-step: enable IMAP in Mail settings, then create app password in Account Security. Similar split structure to Yandex. |
| AOL Mail | Single page. Account Security > Generate and manage app passwords. IMAP enabled by default. |
| Yandex Mail (this guide) | Two-step: enable IMAP in Mail settings AT mail.yandex.com, then create app password at id.yandex.com. Two separate domains, two separate visits. The most procedurally complex of the major providers. |
| GMX Mail | Single combined toggle in account security. No separate app password concept, instead a per-app authorization token system. |
OAuth as an Alternative to App Passwords
If your email client supports OAuth (modern Thunderbird 115+, Apple Mail Catalina+, and some newer Outlook builds), you can skip the app password creation entirely and use OAuth instead. With OAuth, the email client opens a Yandex sign-in window in your browser, you log in normally, you grant the client access, and Yandex hands the client a temporary token. Your password is never stored in the third-party app and the token can be revoked from Yandex ID at any time. This is the more modern and more secure path. The reason the video covers app passwords rather than OAuth is that older clients and some legacy software still need basic auth, and OAuth requires the client to be specifically registered with Yandex's API. Most consumer clients are pre-registered, but custom or older software is not.
Setting Up Common Email Clients with Yandex
| Client | Setup notes |
|---|---|
| Microsoft Outlook 2024 / 365 | File > Add Account > type Yandex address > Advanced options > tick Let me set up my account manually > pick IMAP > enter server settings. Paste app password. Tick "My outgoing server requires authentication" in More Settings. |
| Mozilla Thunderbird 115+ | Tools > Account Settings > Account Actions > Add Mail Account. Thunderbird may auto-detect Yandex and offer OAuth, which works without an app password. If OAuth fails, switch to manual IMAP+app-password. |
| Apple Mail (macOS) | System Settings > Internet Accounts > Add Other Account > Mail Account. Type Yandex address, app password, server settings. Or for Catalina+ try Add Account > Other > OAuth. |
| iPhone Mail | Settings > Mail > Accounts > Add Account > Other > Add Mail Account. Enter name, Yandex address, app password, description. iOS auto-fills imap.yandex.com but verify the SMTP settings manually. |
| Samsung Email (Android) | Open Samsung Email > Add Account > Other (POP3/IMAP). Enter Yandex address and app password. Server hostnames as in the reference card above. |
| Mailbird, eM Client | Add Account flow detects Yandex and offers OAuth. If OAuth fails (rare), switch to manual IMAP with app password. |
| Custom CRM or backup tool | Use IMAP with app password. Most CRMs and backup tools do not support OAuth. The 16-character app password works as a drop-in replacement for the regular Yandex password in any IMAP-compatible software. |
đź’ˇ Pro tips for Yandex Mail third-party setup
- Enable IMAP first, app password second. The order matters because the IMAP toggle includes a tick box specifically labelled "App passwords and OAuth tokens" that must be on for app passwords to actually authenticate. Generating the password without that box ticked produces a useless 16-character string.
- Name your app passwords by device and app. "Outlook Office Laptop", "iPhone 13 Mail Home", "Yandex Backup Tool". Six months later when you need to revoke a password because the laptop was sold, the names tell you exactly which one to delete.
- One app password per device. Never reuse the same app password across multiple clients. If one device is lost, you revoke just that password without affecting the others.
- Try imap.ya.ru if imap.yandex.com is slow from your location. Yandex provides ya.ru as a faster international entry point with the same authentication.
- Use port 587 STARTTLS if your network blocks 465 SSL. Some Indian college campuses and corporate firewalls block 465 specifically.
- Open Yandex Mail web interface at least once before configuring a client. New accounts that have only been used via API hit User Agreement errors otherwise.
- For Yandex.com vs Yandex.ru: if your account was created on yandex.com, use id.yandex.com for app passwords. If on yandex.ru, use passport.yandex.ru. Mixing them up produces confusing "account not found" errors.
- Test with a sent-to-self email after setup. If your test arrives in both your Yandex web inbox AND in the new client, the IMAP+SMTP setup is fully working.
Frequently Asked Questions
What is a Yandex Mail app password and why do I need one?
A Yandex Mail app password is a 16-character one-time code generated from your Yandex ID Security page. You enter it instead of your regular Yandex password when adding the account to a third-party email client like Outlook, Thunderbird, Apple Mail or iPhone Mail. It exists because Yandex blocks the use of your main account password from third-party apps when 2-factor authentication is on, which is now the default for new accounts and strongly recommended.
Why is the App Passwords link missing from my Yandex Security page?
Two-factor authentication is not enabled. Yandex only shows the App Passwords link after 2FA is on. Go to id.yandex.com Security page, enable Two-Factor Authentication using SMS, Yandex Key or any TOTP authenticator, then refresh the security page. The App Passwords link appears.
Do I have to enable IMAP separately from creating the app password?
Yes, this is what trips up most users. Yandex requires two separate toggles. First, in your Yandex Mail settings under Email Clients, you must tick From the imap.yandex.com server via IMAP and App passwords and OAuth tokens. Second, in your Yandex ID account, you create the actual app password. Skipping the IMAP toggle is the most common Yandex setup error: the app password generates fine but the email client still cannot connect.
What are the IMAP and SMTP settings for Yandex Mail?
Incoming IMAP: imap.yandex.com (or imap.ya.ru if you are outside Russia and the .com server is slow), port 993, SSL/TLS required. Outgoing SMTP: smtp.yandex.com, port 465 with SSL or port 587 with STARTTLS. Authentication required for SMTP. Username is your full email address (yourname@yandex.com). Password is the 16-character app password, not your regular Yandex password.
Is Yandex.com different from Yandex.ru?
Yes, since the corporate split in 2024 they are separate companies. Yandex.com is the international entity (offices in Netherlands, registered as Nebius Group), Yandex.ru is the Russian entity. Mail accounts are not migrated between them automatically. The procedure on this page works for both, but the account login URL differs: id.yandex.com for international, passport.yandex.ru for Russian.
Can I revoke an app password later if I lose my phone?
Yes. Go to id.yandex.com Security, click App Passwords, find the password by the name you gave it, and click Delete. The connected device or app immediately stops working. The other app passwords on your account keep working. This is why naming each app password descriptively (Outlook Office Laptop, iPhone Mail Personal) matters: six months later you need to know which one to revoke.