Is it risky to enter gmail password in 3rd party app - Galaxy Note Pro 12.2 Themes and Apps

Hello, some apps such as Trello, Wrike, Project Planning, etc., require the user to enter their gmail userid and password within these app. Is it risky to do it? I don't know if such 3rd party developer could access such info as they are entered from the app.

Once they get your username and password they can do anything you can do in Gmail. They could read all of your emails and maybe even send out spam using your ID. I never give out that kind of info to anyone or app.

I agree. It's one thing if the application requests access through Google's own API whereby you are redirected to a Google login but it's another to have to enter in your login information into a 3rd party app.
I use 2-factor authentication and keep track of what applications I give access to. It's helpful to do so so that one can be made aware immediately if an unauthorized login occurs.
Sent from my SM-P900 using Tapatalk

Thanks. I just go a strange event called "Analogy game" on my google calendar. Don't recall entering that event. Scary! I changed my password immediately. Is that OK from now on?

Luckily Google is very helpful when it comes to security.
Here you can view every device that has accessed your account in the last 28 days. Useful to see if anyone's logged in to your account without your knowledge:
https://security.google.com/settings/security/activity?pli=1 Click on the device and hit remove to revoke access.
And here you can see which permissions every app and device has, and what they're allowed to do:
https://security.google.com/settings/security/permissions
Click on one and hit Revoke Access on the right to revoke their access to your account. (Also useful for old or missing devices) “access to basic account info” means you've logged in to the device using your Google ID.
Logging into an app via the Google Framework login (The official Google login page) grants the app access to exactly what it says on the screen when you log in. If an app says 'Basic Info', all it gets is your public Google+ profile and your email adress. (Not your inbox.) If an app says it syncs data, that's what it'll do.
Apps which display your activity, emails, calendar items etcetera require a sync between your account and the app. This means that yes, the app can see all your emails. That's the price you pay for using an app like that.
A quick lookup of Trello lists it as both an Editor's Choice and a Top Developer in Google Play. That should be safe.
Wrike only has about 1700 users. I'm not so optimistic about that one.
Not all 3rd party apps are evil. K9 mail requires your Gmail account because it's an email app and it's perfectly safe.

Related

Googlemail and gmail - warning and advice

A slightly lengthy attempt to summarise the (often contradictory) advice on this issue.
The problem: Google is allowing UK users to change from @googlemail addresses to @gmail. Many users report persistent messages that google talk authentication has failed and downloads from the market are freezing.
How to make the change (READ the rest of this before you do!): Login to your Google mail account and go to settings/account. You will see a small link offering the option. Some users report a need to do this twice before it 'sticks'. (Baed on my experience, I suspect the change takes some time to propagate - see final note here). You can reverse this change in the same way.
Solutions (or not!)
1. There is no 100% reliable way to change the gmail account details on your phone without a factory reset.
Some users recommend clearing the Google Apps data from within Apps Manager which then prompts you to set up the account details again. This option is grayed out for many
Some have recommended changing your account password. For me this did not allow me to change all the account details on the phone​
2. You can set up a second gmail account on the phone with the @gmail details. However this may not allow you to delete the @googlemail account although some have suggested it does. You will recieve copies of all emails on both accounts!
3. Do a factory reset. Back up all your data, take a deep breath and go for it! Seriously, this did not actually result in a lot of work for me as I don't have a truckload of apps on the phone. You have the choice of reverting to the @googlemail account (which is what I did) or setting up with the new @gmail details. From what I can gather the latter approach does not result in problems with re-installing paid for apps - but no promises!
NOTE: You will receive email sent to either @googlemail or @gmail on your old @googlemail account so you could just start using @gmail as your address and forget about the problem!
...and finally. Having gone through all of the work associated with a factory reset to @googlemail, I discover that Google has reset my account to @gmail anyway and everything seems to be working OK! I do wonder if changes to accounts are propagating very slowly. (I also wonder if Google knows what it is doing, but that's another story)
Hope this is some help
I had this problem and corrected it by reverting back to @googlemail.
But what gets me is that considering how widespread this problem is, is the overwhelming silence from Google.
NineToTheSky said:
I had this problem and corrected it by reverting back to @googlemail.
But what gets me is that considering how widespread this problem is, is the overwhelming silence from Google.
Click to expand...
Click to collapse
Probably because most UK Desire owners have phones from Orange, and they've removed Google Talk (although they've handily left the service running!), so this isn't going to be a problem for them. Also, a lot of people have always known that you could always ignore the `googlemail` thing and use gmail.
Why bother?
Any email sent to [email protected] is received by [email protected] anyway..
Fon22
Why bother? Because, as the OP says, if, in the UK, you change you address from googlemail to gmail, you won't be able to download anything from the App Market.
is there anywhere we can ask google to provide android switchover instructions?
You know you don't have to put the @ when setting up an account.
When I set up both my G1 and my Desire I just signed in with the Google user name.
Just to add my bit, I'm a Google apps account owner, my domain is not gmail or googlemail its simply hosted by Google and even though I've done nothing its stopped working for me also on my desire. I get the same googletalk auth error and can't download anything from the apps store either.
Interestingly, even from my pc, if I goto googletalk it won't let me in either, yet email and other Google apps like docs and calendar work no bother. Selecting Google talk gives a 404 unauthorized.
Plus side:
Picasa web albums now sync
Just to add my bit, I'm a Google apps account owner, my domain is not gmail or googlemail its simply hosted by Google and even though I've done nothing its stopped working for me also on my desire. I get the same googletalk auth error and can't download anything from the apps store either.
Interestingly, even from my pc, if I goto googletalk it won't let me in either, yet email and other Google apps like docs and calendar work no bother. Selecting Google talk gives a 404 unauthorized.
Click to expand...
Click to collapse
I got exactly the same as this, after everything working brilliantly for 3 days!! I have now setup a gmail account to sign the phone up with and the turn all sync off for it, thrn setup my Google for domains and setup the calendar through exchange and everything is working fine...its a big faff, but it will works well: )
I did do a lot of reading and apparently Google for domains doesn't work with Google talk full stop... BUT why work for days with no problems!! Stupid!!
-------------------------------------
Sent via the XDA Tapatalk App

[Q] Can not Get Email from Exchange Server

I am having problem to see anything in the inbox from my company's exchange server. I have the same setup with my HeroC without any issue. Does anyone have this kind of problem. I am able to sent email from the account.
Thanks
zilla1000 said:
I am having problem to see anything in the inbox from my company's exchange server. I have the same setup with my HeroC without any issue. Does anyone have this kind of problem. I am able to sent email from the account.
Thanks
Click to expand...
Click to collapse
More account info required. I have one real exchange account and 4 google accounts syncing through exchange on the email app without issue. So it's not a fundamental issue with the app.
I will say that setting up exchange between droids, HTC and samsungs can be a pain because they all want the setup info entered differently. I wish the gmail app would handle exchange accounts, it would be so nice to have one process work on all Android phones.
You are doing the manual setup. Sometimes outsourced exchange services can b funky to setup. I had one that weird.
Example:
Email was [email protected]
Sever address was west.ex145.server.net
Domain was ex145
Username was ex145\goober_newdomainname
If you do not use manual config the app assumes the server is bigco.com. I have also seen issues if you have the accept all ssl certificates checked. You would think you would want it checked in something like the example above because all the redirects an domains but checking that created issues.
Thanks for the response; I am using manual setup with the following info (using a generic name as example)
Email was [email protected]
Sever address was exchange.company.com
Domain was company
Username was company\username
There is no problem for the account setup, and I can see the inbox and the sub folders under it; however, all are empty. I can also send email from the email apps. I tried manual refresh, push, it all shows 0 mail. From the Exchange web access, I can see the mobile device sync status; but the last sync time was not updating.
Any suggestion on what else I should try.
Thanks.
delete the account on the phone, and recreate it using the correct settings, after you click save or something after configuring it, it should bring you to your email app inbox with no messages. now wait, after a few minutes it should alert you about needing additional security rights or something. it will either pop up and tell you about it, accept it, or it might just pop up a notification so you'll have to expand your notification bar menu then click the notification to accept it. your miles my vary, but that is what worked for me.
ELSE, this is the full processes I had to do (I'm the exchange admin at my work)
Open Active Directory Users and Computers, enable Advanced Features (View > Advanced Features). Go to the properties of the user you are trying to enable, go to the security tab, click Advanced, Then select Exchange Server (******\Exchange Servers) and click the checkbox for Include inheritable permission from this object’s parent.
Clear the cache for the email program on the Android phone (Settings > Applications > Manage applications > All > Email > Clear data) THIS WILL DELETE ALL E-MAIL ACCOUNTS AND EMAIL ON THE PHONE!!!!!!!!
Add the account as you usually would, it will, do a refresh and it will show no e-mails. In a few seconds you should get an alert that the program needs extra permissions, select that notification and accept it.
Also for anyone who is getting some kind of certificate error or something (i forget the exact error) after flashing a new rom, before flashing the rom wipe everything.
Thanks for all the suggestions; I was not able to get our Exchange Admin to change anything on the server side. I end up of getting "Exchange for Android" apps, and it works without any issue. I am not sure what was the issue on the stock email client. I just like to update this in case anyone else run into the same problem, at least there is a alternative (it is free with 30 day trial, kind of expensive but it works).
Depending on what version of exchange and the policies you may have received a notice to allow the exchange server to enforce policies on your phone. I missed it last time - have to swipe down and look at your notices.
zilla1000 said:
Email was [email protected]
Sever address was exchange.company.com
Domain was company
Username was company\username
Click to expand...
Click to collapse
I see one flaw in your setup right there. You're listing your domain twice. You're listing it in the domain field, and then apparently listing it again in the username field. That can cause some confusion, as it will essentially report to the server to authenticate "domain\username" against the domain you listed. Normally it's one or the other. The \ implies that anything before it is the domain.
Step by step instructions
Hello,
I posted some step by step instructions for setting up MS Exchange on your Android phone you may find helpful.
http://www.completesystemsdesign.co...d-tablet-to-ms-exchange-for-email-sync-2.html
It all depends on your work exchange. for me it was mail.[domain].com but I had to go to touchdown anyways since the stock email app wouldn't let me respond to signed messages.
Has anyone seen a fix for this. I had mine setup correctly and it was displaying incoming emails, but it was not syncing contacts back and forth so i deleted the account and set it back up. Now, i can see all email boxes, send emails, view sent emails, update calendar appts, and contacts. The only issue i am having is seeing emails in my inbox, so i know it is connecting. It just wont sync the inbox for some reason. I got the update to 2.3.6 on the GS2.

Sender name in Exchange email settings

In the normal email app (not Gmail) I can set up my email as POP and everything is fine but when I set up as Exchange, the option for 'sender name' is gone. The only thing I can do is name the account which has no affect on the senders name that shows up when I email someone. When I send an email my name shows as the first part of my email address (the part before the @ symbol).
When I send email from my providers web mail it shows correctly. The problem only exists when setting up my phone to use Exchange.
Many thanks in advance!
Hi!
I believe this is tied to the way an Exchange server works. The Email app will use the name set by the Exchange administrator.
Alexandre-P said:
Hi!
I believe this is tied to the way an Exchange server works. The Email app will use the name set by the Exchange administrator.
Click to expand...
Click to collapse
Who is the Exchange administrator? So how can I change the name setting?
The Exchange administrator is your email provider.
It's possible your sender's name is automatically updated in Exchange when you modify your name in a web interface from your provider -- usually a "Settings" or "Account info" or something like that setting page. You may want to try this, if your email provider offers you a webmail interface and you can cange your account's info.
If your sender's name does not get updated or if you don't have access to that kind of settings from your webmail -- for example, it is usually the case for an enterprise email account --, then you might want to talk directly to your email provider's administrators to see what they can do for you.
Alexandre-P said:
Hi!
I believe this is tied to the way an Exchange server works. The Email app will use the name set by the Exchange administrator.
Click to expand...
Click to collapse
Alexandre-P said:
The Exchange administrator is your email provider.
It's possible your sender's name is automatically updated in Exchange when you modify your name in a web interface from your provider -- usually a "Settings" or "Account info" or something like that setting page. You may want to try this, if your email provider offers you a webmail interface and you can cange your account's info.
If your sender's name does not get updated or if you don't have access to that kind of settings from your webmail -- for example, it is usually the case for an enterprise email account --, then you might want to talk directly to your email provider's administrators to see what they can do for you.
Click to expand...
Click to collapse
As I mentioned, when I send email from the web interface (Webmail) it shows my name fine. I can access my account name and info on my web provider's site (Shaw) and change it to whatever I want but email sent from every account set up with Exchange on my phone strips the name and adds the first part of the email address before the @ symbol. I've spent a long time talking to their 'tech' guys with no help. They say it is a setting in my phone.
Anyone?
Does anyone have any other thoughts on how to fix this?
Anyone?
Nobody has ever seen this?
According to Google, I'm not the only one who has experienced this but it seems that nobody has figured out a solution...
johnny340 said:
Does anyone have any other thoughts on how to fix this?
Click to expand...
Click to collapse
Have you tried deleting the account and then reentering the account? I think you may be presented this when you set up the account but not later (I have three accounts and I remember being prompted for something like name you want to appear, etc.
Yes, I've deleted and recreated that account. I never had an option to enter a name; only a name for the account which doesn't show up in sent emails...
johnny340 said:
Yes, I've deleted and recreated that account. I never had an option to enter a name; only a name for the account which doesn't show up in sent emails...
Click to expand...
Click to collapse
Too bad ( it was just a thought). I just checked my exchange account and, if I go in to settings, I get an option for "Your Name" and another for " Signature." Not sure why yours does not give you the same options. Have you tried a third-party app that can handle exchange server accounts? I had to use one when my office switched their software and it wouldn't connect to Android devices.
good luck.
captican said:
Too bad ( it was just a thought). I just checked my exchange account and, if I go in to settings, I get an option for "Your Name" and another for " Signature."
Click to expand...
Click to collapse
Based on Google reading, if you're quick enough, you should be able to see this "Your Name" setting in your Exchange's email preferences. And if you're very quick, you might be able to access this setting and modify it. I myself did not succeed in this operation.
How to alternative
The only way (as of now and to my knowledge) to change the "sender name" in the stock android mail app while still using the exchange setup (Hotmail service, or any other mail service that dont sync your correct sender name with the mail server) is as follows (requires root):
- Set up your account and assure yourself that all basic features function properly (sending-, receiving mails, etc.)
- get a SQLite editor app (of your choice, Google Play is your 'friend')
- launch the SQLite editor and find the stock android mail app (com.android.email) and explore its databases (*.db)
- navigate and open "EmailProvider.db"
- open the "Account" table and change the "senderName" string to your desired "sender name" and save
- at this point you are done, and its advised to reboot your phone or completely restart the mail app
Voilà!
Alexandre-P said:
Based on Google reading, if you're quick enough, you should be able to see this "Your Name" setting in your Exchange's email preferences. And if you're very quick, you might be able to access this setting and modify it. I myself did not succeed in this operation.
Click to expand...
Click to collapse
No matter how 'quick' I am I can't see something that is NOT there.
ImproAptoVictum said:
The only way (as of now and to my knowledge) to change the "sender name" in the stock android mail app while still using the exchange setup (Hotmail service, or any other mail service that dont sync your correct sender name with the mail server) is as follows (requires root):
- Set up your account and assure yourself that all basic features function properly (sending-, receiving mails, etc.)
- get a SQLite editor app (of your choice, Google Play is your 'friend')
- launch the SQLite editor and find the stock android mail app (com.android.email) and explore its databases (*.db)
- navigate and open "EmailProvider.db"
- open the "Account" table and change the "senderName" string to your desired "sender name" and save
- at this point you are done, and its advised to reboot your phone or completely restart the mail app
Voilà!
Click to expand...
Click to collapse
Thanks for this suggestion! I will use this method.

[Guide] Adding Gmail Accounts to Mail on 14393.5 and higher If Google OAuth is broke

If you all haven't noticed by now, you are greeted by a nice "Your browser isn't supported" message when trying to add a Gmail account in the Mail app by using the Google option after a hard reset or a first time use. Fear not, a simple workaround exists.. Upon inspecting my Gmail settings on my Windows 10 machine, I noticed that it simply adds the account by setting it up as IMAP.
I tried the following and it worked flawlessly on my phone:
Open the Account settings in the Mail app
When you see the "Choose an account" menu, click "Other account" which is right above Advanced setup
Enter your full gmail email address and password. IF YOU HAVE 2-FACTOR AUTH ENABLED, YOU MUST CREATE AN APPLICATION PASSWORD AND USE THAT INSTEAD
From there you should start getting e-mail
There are a few caveats to this approach though. It seems that this method will ONLY allow you to sync Email.. No Calendar or contacts (If someone figures out some voodoo to make that happen, I will update the OP).
Thanks Google.
snickler said:
If you all haven't noticed by now, you are greeted by a nice "Your browser isn't supported" message when trying to add a Gmail account in the Mail app
Click to expand...
Click to collapse
The Outlook app should send the correct User-Agent, it's a simple fix from Microsoft.
Till then
To add your Google account on your Lumia 950, please follow the steps below:
01. Go to "Settings".
02. Tap on "Accounts".
03. Tap on "Your email and accounts".
04. Tap "Add an account".
05. Tap "Other accounts POP, IMAP".
06. Enter your Email address and Password.
07. Tap the Sign in button.
08. Once you're signed in Open the Edge browser.
09. Visit gmail.com and log in to your Google account.
10. Open the message with the subject "Blocked sign-in attempt for security reasons"
11. Tap on the Allow Access button.
12. You will be forwarded to the Google security setting page. "Under the Access for less secure apps", select "Turn on".
Wait for the settings on the phone to update, and your Google account will work on your phone.
Click to expand...
Click to collapse
from http://answers.microsoft.com/en-us/...umia-950/c8b3d2e3-fdee-4c72-a93a-6e33788564f3
w.bogdan said:
The Outlook app should send the correct User-Agent, it's a simple fix from Microsoft.
Till then
from http://answers.microsoft.com/en-us/...umia-950/c8b3d2e3-fdee-4c72-a93a-6e33788564f3
Click to expand...
Click to collapse
I've had the enable security for less secure apps enabled for a few years now (as that's why I don't get the e-mail message). That won't work for me. From looking at the post, it looks like it's doing the same exact thing I'm doing... Adding a Gmail account using IMAP.
I don't use Gmail, and no one should because Outlook.com is way better, but you could try adding the account using Advanced setup and Google's setting from Step 2: Set up your client https://support.google.com/mail/troubleshooter/1668960?hl=en
w.bogdan said:
I don't use Gmail, and no one should because Outlook.com is way better
Click to expand...
Click to collapse
-_-
Realize, that this STILL puts us at the same exact steps to add Gmail using IMAP.
Set my mail as IMAP too... for now, until google decides to fix authentication.
Until then no calendar, and bookmarks.
I exported google contacts to outlook contacts. I can check my calendar on my nexus 7, but I am writing new events to outlook calendar. and for bookmarks I don't know why I can't import bookmarks from chrome to edge on windows 10 pc to sync them between pc and mobile
Also heard some people using iCloud to sync their data from google servers to windows mobile
snickler said:
-_- Realize, that this STILL puts us at the same exact steps to add Gmail using IMAP.
Click to expand...
Click to collapse
Yes, but there might be a difference in the server settings.

Cannot configure the default email app

I am trying to setup the default email app but it does not work. I need to configure my gmail account there. I tried both automatic and manual setup (IMAP, imap.gmail.com, port 993, SSL/TSL). But I always receive this message: "Problem with account setup. Username or password is incorect." But I am completely sure that I type my usernam (= my gmail address) and password correctly.
Babovka said:
I am trying to setup the default email app but it does not work. I need to configure my gmail account there. I tried both automatic and manual setup (IMAP, imap.gmail.com, port 993, SSL/TSL). But I always receive this message: "Problem with account setup. Username or password is incorect." But I am completely sure that I type my usernam (= my gmail address) and password correctly.
Click to expand...
Click to collapse
It might be a silly thing to ask, but do you have two step authentication enabled?
Actually, I believe the issue is to do with allowing less secure applications to access your GMail account - there is more about this here: https://www.ghacks.net/2014/07/21/gmail-starts-block-less-secure-apps-enable-access/ and for security reasons, I do *not* advise you to allow less secure applications to access your account. Instead, get a better application.
I repeat, I advise you NOT to allow less secure applications to access your account.
marco-v said:
Actually, I believe the issue is to do with allowing less secure applications to access your GMail account - there is more about this here: https://www.ghacks.net/2014/07/21/gmail-starts-block-less-secure-apps-enable-access/ and for security reasons, I do *not* advise you to allow less secure applications to access your account. Instead, get a better application.
I repeat, I advise you NOT to allow less secure applications to access your account.
Click to expand...
Click to collapse
I guess you're right. But the problem is that if the OP doesn't use GApps in LineageOS, only the default email and some others you can install from F-Droid will be available, but they're all the same (unless you know some alternative I don't). I'm trying to setup ProtonMail, but the developers said it is impossible to be done outside the browser or the Play Store app right now.
It would help if the people who made the email service created an open source app that could be included in F-Droid. Very few care about free software

Categories

Resources