[GH-ISSUE #1028] How to fix XOAuth authorization error on Android #822

Open
opened 2026-02-26 01:32:00 +03:00 by kerem · 13 comments
Owner

Originally created by @flordagirl on GitHub (Jul 14, 2020).
Original GitHub issue: https://github.com/jberkel/sms-backup-plus/issues/1028

Originally assigned to: @kurahaupo on GitHub.

How do I fix this?

"XOAuth authorization error. Please make sure you enabled IMAP in your Gmail account settings."

Expected behaviour : automatic SMS backup

Actual behaviour: XOAuth authorization error

Please specify the following:

  • Android version: 9
  • Phone model / brand: LG K40
  • SMS Backup+ version installed: 1.5.11
Originally created by @flordagirl on GitHub (Jul 14, 2020). Original GitHub issue: https://github.com/jberkel/sms-backup-plus/issues/1028 Originally assigned to: @kurahaupo on GitHub. How do I fix this? "XOAuth authorization error. Please make sure you enabled IMAP in your Gmail account settings." ### Expected behaviour : automatic SMS backup ### Actual behaviour: XOAuth authorization error ### Please specify the following: * Android version: 9 * Phone model / brand: LG K40 * SMS Backup+ version installed: 1.5.11
Author
Owner

@kurahaupo commented on GitHub (Jul 15, 2020):

@flordagirl

Can you confirm that IMAP is already enabled on your Gmail account? (Use the "settings" cogwheel icon.)

As per #970.

<!-- gh-comment-id:658717202 --> @kurahaupo commented on GitHub (Jul 15, 2020): @flordagirl Can you confirm that IMAP is already enabled on your Gmail account? (Use the "settings" cogwheel icon.) As per #970.
Author
Owner

@flordagirl commented on GitHub (Jul 20, 2020):

@flordagirl

Can you confirm that IMAP is already enabled on your Gmail account? (Use the "settings" cogwheel icon.)

As per #970.

Yes, it's been enabled. Now what?
image

<!-- gh-comment-id:661274207 --> @flordagirl commented on GitHub (Jul 20, 2020): > @flordagirl > > Can you confirm that IMAP is already enabled on your Gmail account? (Use the "settings" cogwheel icon.) > > As per #970. Yes, it's been enabled. Now what? ![image](https://user-images.githubusercontent.com/53923749/87975413-9a8d9b00-ca99-11ea-82e4-727f6cad3a20.png)
Author
Owner

@flordagirl commented on GitHub (Jul 20, 2020):

Why did you close it? IMAP has always been enabled. The same error is still there and the app is unusable.


From: Martin Kealey notifications@github.com
Sent: Wednesday, July 15, 2020 9:05 AM
To: jberkel/sms-backup-plus sms-backup-plus@noreply.github.com
Cc: flordagirl brainychick79@hotmail.com; Mention mention@noreply.github.com
Subject: Re: [jberkel/sms-backup-plus] How to fix XOAuth authorization error on Android (#1028)

Closed #1028https://github.com/jberkel/sms-backup-plus/issues/1028.


You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/jberkel/sms-backup-plus/issues/1028#event-3548467766, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AM3M7JO7W4PSQM2ML4AVRODR3WSRBANCNFSM4OZ3DBQA.

<!-- gh-comment-id:661276150 --> @flordagirl commented on GitHub (Jul 20, 2020): Why did you close it? IMAP has always been enabled. The same error is still there and the app is unusable. ________________________________ From: Martin Kealey <notifications@github.com> Sent: Wednesday, July 15, 2020 9:05 AM To: jberkel/sms-backup-plus <sms-backup-plus@noreply.github.com> Cc: flordagirl <brainychick79@hotmail.com>; Mention <mention@noreply.github.com> Subject: Re: [jberkel/sms-backup-plus] How to fix XOAuth authorization error on Android (#1028) Closed #1028<https://github.com/jberkel/sms-backup-plus/issues/1028>. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://github.com/jberkel/sms-backup-plus/issues/1028#event-3548467766>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM3M7JO7W4PSQM2ML4AVRODR3WSRBANCNFSM4OZ3DBQA>.
Author
Owner

@kurahaupo commented on GitHub (Aug 23, 2020):

Sorry my previous response was too terse.
This issue is a duplicate of issue #970, where there is extensive discussion and explanation of how to correct the issue.

<!-- gh-comment-id:678719617 --> @kurahaupo commented on GitHub (Aug 23, 2020): Sorry my previous response was too terse. This issue is a duplicate of issue #970, where there is extensive discussion and explanation of how to correct the issue.
Author
Owner

@kurahaupo commented on GitHub (Aug 23, 2020):

The app can no longer user XOAUTH to get access to Gmail, so as an alternative, the user has to configure both the app and their Gmail account to use IMAP instead.

Last year Google introduced what they call "sensitive scope" access, meaning that for apps to get access to sensitive user data, they would need to be manually vetted by a Google employee. This took effect from the middle of last year for "free" (@gmail.com) users, and from the middle of this year for paying Gmail users (using their own domains). If you've only recently started having trouble, I expect you're in the latter category.

A preliminary part of that vetting is a "purpose" check, and (to cut a long story short) "backup into email" is not a valid purpose for getting access to email, so they didn't even start the in-depth code check.

I have proposed changing the name of the app to remove any implication of "backup", as many users find being able to search and read SMS and Email together within Gmail to be its key purpose, and that would pass the initial "purpose" test. And if by coincidence that also makes it useful for backing up, well that's just a bonus.

Unfortunately I no longer work for Google myself, so I don't have as much leverage as I once did.

<!-- gh-comment-id:678720202 --> @kurahaupo commented on GitHub (Aug 23, 2020): The app can no longer user XOAUTH to get access to Gmail, so as an alternative, the user has to configure both the app and their Gmail account to use IMAP instead. Last year Google introduced what they call "sensitive scope" access, meaning that for apps to get access to sensitive user data, they would need to be manually vetted by a Google employee. This took effect from the middle of last year for "free" (`@gmail.com`) users, and from the middle of this year for paying Gmail users (using their own domains). If you've only recently started having trouble, I expect you're in the latter category. A preliminary part of that vetting is a "purpose" check, and (to cut a long story short) "backup into email" is not a valid purpose for getting access to email, so they didn't even start the in-depth code check. I have proposed changing the name of the app to remove any implication of "backup", as many users find being able to search and read SMS and Email together within Gmail to be its key purpose, and that _would_ pass the initial "purpose" test. And if by coincidence that also makes it useful for backing up, well that's just a bonus. Unfortunately I no longer work for Google myself, so I don't have as much leverage as I once did.
Author
Owner

@flordagirl commented on GitHub (Aug 23, 2020):

I actually didn't just start having issues with the Google thing and this app. It did start at least 1-2 years ago and I was able to find a work around. But this time none of the work arounds are working.


From: Martin Kealey notifications@github.com
Sent: Saturday, August 22, 2020 10:20 PM
To: jberkel/sms-backup-plus sms-backup-plus@noreply.github.com
Cc: flordagirl brainychick79@hotmail.com; Mention mention@noreply.github.com
Subject: Re: [jberkel/sms-backup-plus] How to fix XOAuth authorization error on Android (#1028)

The app can no longer user XOAUTH to get access to Gmail, so as an alternative, the user has to configure both the app and their Gmail account to use IMAP instead.

Last year Google introduced what they call "sensitive scope" access, meaning that for apps to get access to sensitive user data, they would need to be manually vetted by a Google employee. This took effect from the middle of last year for "free" (@gmail.com) users, and from the middle of this year for paying Gmail users (using their own domains). If you've only recently started having trouble, I expect you're in the latter category.

A preliminary part of that vetting is a "purpose" check, and (to cut a long story short) "backup into email" is not a valid purpose for getting access to email, so they didn't even start the in-depth code check.

I have proposed changing the name of the app to remove any implication of "backup", as many users find being able to search and read SMS and Email together within Gmail to be its key purpose, and that would pass the initial "purpose" test. And if by coincidence that also makes it useful for backing up, well that's just a bonus.

Unfortunately I no longer work for Google myself, so I don't have as much leverage as I once did.


You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/jberkel/sms-backup-plus/issues/1028#issuecomment-678720202, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AM3M7JNPR6DLQC6HHYXEZLLSCB4H5ANCNFSM4OZ3DBQA.

<!-- gh-comment-id:678720422 --> @flordagirl commented on GitHub (Aug 23, 2020): I actually didn't just start having issues with the Google thing and this app. It did start at least 1-2 years ago and I was able to find a work around. But this time none of the work arounds are working. ________________________________ From: Martin Kealey <notifications@github.com> Sent: Saturday, August 22, 2020 10:20 PM To: jberkel/sms-backup-plus <sms-backup-plus@noreply.github.com> Cc: flordagirl <brainychick79@hotmail.com>; Mention <mention@noreply.github.com> Subject: Re: [jberkel/sms-backup-plus] How to fix XOAuth authorization error on Android (#1028) The app can no longer user XOAUTH to get access to Gmail, so as an alternative, the user has to configure both the app and their Gmail account to use IMAP instead. Last year Google introduced what they call "sensitive scope" access, meaning that for apps to get access to sensitive user data, they would need to be manually vetted by a Google employee. This took effect from the middle of last year for "free" (@gmail.com) users, and from the middle of this year for paying Gmail users (using their own domains). If you've only recently started having trouble, I expect you're in the latter category. A preliminary part of that vetting is a "purpose" check, and (to cut a long story short) "backup into email" is not a valid purpose for getting access to email, so they didn't even start the in-depth code check. I have proposed changing the name of the app to remove any implication of "backup", as many users find being able to search and read SMS and Email together within Gmail to be its key purpose, and that would pass the initial "purpose" test. And if by coincidence that also makes it useful for backing up, well that's just a bonus. Unfortunately I no longer work for Google myself, so I don't have as much leverage as I once did. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://github.com/jberkel/sms-backup-plus/issues/1028#issuecomment-678720202>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AM3M7JNPR6DLQC6HHYXEZLLSCB4H5ANCNFSM4OZ3DBQA>.
Author
Owner

@kurahaupo commented on GitHub (Sep 28, 2020):

When exactly do you see "XOAuth authorization error"? I ask because if SMS Backup+ is correctly configured, it won't even try to use XOAUTH to access Gmail.

Please go through your gmail settings and create an app password for IMAP (if you have not already done so), and then go through the app settings and check that it is configured to use IMAP with that app password, as explained in issue #970 .

If you initially configured SMS Backup+ a long time ago, you may need to ensure that XOAUTH is not being used, by going into SettingsAdvanced settingsLegacy settings and disable Connect.

Note: SMS Backup+ does still use XOAUTH to access calendars, if you've configured it to save your call log as calendar records, and if that's when the error appears, that's an entirely different debugging problem.

<!-- gh-comment-id:699715077 --> @kurahaupo commented on GitHub (Sep 28, 2020): When exactly do you see "XOAuth authorization error"? I ask because if SMS Backup+ is correctly configured, it won't even _try_ to use XOAUTH to access Gmail. Please go through your gmail settings and create an app password for IMAP (if you have not already done so), and then go through the app settings and check that it is configured to use IMAP with that app password, as explained in issue #970 . If you initially configured SMS Backup+ a long time ago, you may need to ensure that XOAUTH is _not_ being used, by going into **Settings** → **Advanced settings** → **Legacy settings** and _disable_ **Connect**. **Note:** SMS Backup+ does still use XOAUTH to access calendars, if you've configured it to save your call log as calendar records, and if that's when the error appears, that's an entirely different debugging problem.
Author
Owner

@cauerego commented on GitHub (Sep 30, 2020):

renaming and repurposing the app would be a great idea. indeed, being able to search messages is more important and relevant than "just" being a (good and real) backup...

but here's to an even better one, for me:

get away from google! there are very good technical reasons why: https://cregox.net/delete

by all means, keep it working with it if you can... but focus on more open things like disroot or delta chat.

<!-- gh-comment-id:701269234 --> @cauerego commented on GitHub (Sep 30, 2020): renaming and repurposing the app would be a great idea. indeed, being able to search messages is more important and relevant than "just" [being a (good and real) backup](https://cregox.net/backup)... but here's to an even better one, for me: get away from google! there are very good technical reasons why: https://cregox.net/delete by all means, keep it working with it if you can... but focus on more open things like disroot or delta chat.
Author
Owner

@kurahaupo commented on GitHub (Oct 3, 2020):

@flordagirl note that the browser work-around no longer works; you will need to use the IMAP method instead.

(My apologies, I assumed, based on the error message, that you had already configured SMS Backup+ to use IMAP.)

<!-- gh-comment-id:703040525 --> @kurahaupo commented on GitHub (Oct 3, 2020): @flordagirl note that the browser work-around no longer works; you will need to use the IMAP method instead. (My apologies, I assumed, based on the error message, that you had already configured SMS Backup+ to use IMAP.)
Author
Owner

@kurahaupo commented on GitHub (Oct 3, 2020):

@flordagirl if you upgrade to version 1.6β then the new configuration screen makes it much clearer that the old XOAUTH method is deprecated, and unlikely to work until such time as Google can be convinced to approve this app for sensitive scope access.

<!-- gh-comment-id:703040678 --> @kurahaupo commented on GitHub (Oct 3, 2020): @flordagirl if you upgrade to version 1.6β then the new configuration screen makes it much clearer that the old XOAUTH method is deprecated, and unlikely to work until such time as Google can be convinced to approve this app for sensitive scope access.
Author
Owner

@flordagirl commented on GitHub (Jun 7, 2021):

@flordagirl if you upgrade to version 1.6β then the new configuration screen makes it much clearer that the old XOAUTH method is deprecated, and unlikely to work until such time as Google can be convinced to approve this app for sensitive scope access.

I've already tried that. My reply is late because I was unable to reply until now. If you are currently still using SMS Backup+ on an android device along with the feature where it automatically backs up your texts to gmail, could you please send me the steps on how you got it to work? Like I've mentioned previously I've already spent hours looking through all the posts here and trying the steps mentioned by others. None of the work arounds are working for me anymore.

<!-- gh-comment-id:856328501 --> @flordagirl commented on GitHub (Jun 7, 2021): > @flordagirl if you upgrade to version 1.6β then the new configuration screen makes it much clearer that the old XOAUTH method is deprecated, and unlikely to work until such time as Google can be convinced to approve this app for sensitive scope access. I've already tried that. My reply is late because I was unable to reply until now. If you are currently still using SMS Backup+ on an android device along with the feature where it automatically backs up your texts to gmail, could you please send me the steps on how you got it to work? Like I've mentioned previously I've already spent hours looking through all the posts here and trying the steps mentioned by others. None of the work arounds are working for me anymore.
Author
Owner

@kurahaupo commented on GitHub (Jun 8, 2021):

Yes I'm still using it, and the last time I set it up was January 2020 when I bought this phone.

I have 2-factor authentication enabled on my Gmail account, with the authenticator app and SMS as options. I've enabled IMAP access into Gmail.

I generated an app password, then told SMS Backup+ to use it. (You should do that separately for each device where you install it, otherwise Google may object to you using the same login from multiple sources, and invalidate the app password.

That's all. No other magic required.

-Martin

<!-- gh-comment-id:856916766 --> @kurahaupo commented on GitHub (Jun 8, 2021): Yes I'm still using it, and the last time I set it up was January 2020 when I bought this phone. I have 2-factor authentication enabled on my Gmail account, with the authenticator app and SMS as options. I've enabled IMAP access into Gmail. I generated an app password, then told SMS Backup+ to use it. (You should do that separately for each device where you install it, otherwise Google may object to you using the same login from multiple sources, and invalidate the app password. That's all. No other magic required. -Martin
Author
Owner

@flordagirl commented on GitHub (Nov 1, 2021):

I have 2-factor authentication enabled on my Gmail account,
I already have that on. It's been on since 2019;

with the authenticator app and SMS as options.

I've enabled IMAP access into Gmail.

So have I.
I generated an app password, then told SMS Backup+ to use it. (You should do that separately for each device where you install it, otherwise Google may object to you using the same login from multiple sources, and invalidate the app password.
Already did that too.

NEXT!!!

<!-- gh-comment-id:955891904 --> @flordagirl commented on GitHub (Nov 1, 2021): > I have 2-factor authentication enabled on my Gmail account, **I already have that on. It's been on since 2019;** with the authenticator app and SMS as options. I've enabled IMAP access into Gmail. > **So have I.** > I generated an app password, then told SMS Backup+ to use it. (You should do that separately for each device where you install it, otherwise Google may object to you using the same login from multiple sources, and invalidate the app password. > **Already did that too.** NEXT!!!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/sms-backup-plus-jberkel#822
No description provided.