Connecting Gmail with an app password

Effective 8 October 2026

How it works

You create an app password in your Google Account and enter it in Reyolk with your Gmail address. Google offers app passwords once 2-Step Verification is turned on.
Reyolk uses it to read your primary inbox and your sent mail, to keep what's read in step with Gmail, and to send replies from your Gmail address, connecting directly to Google's mail servers.

Reyolk reads the mail Gmail shows in your primary inbox and the mail you send. It leaves out Promotions, Social, drafts and chats.
When you connect, Reyolk brings in your latest 100 emails. It brings in older ones, 100 at a time, only when you ask. After that it reads new mail as it arrives.
When you read an email in Reyolk, Reyolk marks it read in Gmail, and an email you read in Gmail shows as read in Reyolk. This is the only change Reyolk makes to your mailbox. It never deletes, moves or archives your mail, and never changes your labels.
Emails show as their senders formatted them. Pictures in a formatted email load from the sender's servers, as they do in most mail apps, so a sender can tell that an email was opened.
It sends only the replies and messages that follow your approval rules. A reply goes to the person who wrote, with everyone else on the email copied, and appears in your Gmail Sent folder.

Reyolk offers this way of connecting during its testing phase, while it applies for Google's official Gmail access.
Google recommends its official sign-in where an app supports it, because an app password can't be limited to particular permissions. That's why Reyolk protects your app password in the ways below.
When Google approves Reyolk's official access, you'll be able to switch with a click and keep your conversations.

Your app password is encrypted with AES-256-GCM before it is stored. The encryption key is kept on Reyolk's application servers, separate from the database.
It is used only on Reyolk's servers. It is never shown again after you connect, never sent back to your browser, and never written to logs or the activity record.
Every connection to Google's mail servers is encrypted, and Reyolk checks their security certificates.
Your workspace data, including imported email, is stored in a database encrypted with AES-256. Files and the formatted versions of emails are kept in private storage that only Reyolk's servers can read. Only members of your workspace can access them.
A formatted email is shown in an isolated frame that is not allowed to run the sender's scripts or send forms, and is kept apart from your Reyolk account.
All traffic between your browser and Reyolk uses HTTPS.

Only the workspace owner can connect or disconnect Gmail. Each change is recorded in your workspace's activity log.
Disconnecting Gmail in Reyolk deletes the stored app password straight away.
Deleting the app password on your Google Account app passwords page stops Reyolk's access straight away.
Changing your Google account password cancels all your app passwords automatically.
Reyolk doesn't sell your data or use it for advertising.

See the privacy policy for how Reyolk handles Google and Gmail data.