Fix macOS Mail After 2FA Upgrade

Upgrading your Apple ID to two-factor authentication (2FA) can leave the macOS Mail app stuck on a loop asking for your password, or showing errors like “Cannot verify account name or password.” This guide walks you through the exact steps to get Mail working again—usually by generating an app-specific password and re-entering it in Mail’s account settings. You’ll need your Apple ID password and access to your trusted device or phone number.

What You’ll Need

Your Apple ID password
Access to a trusted device or phone number for 2FA verification
macOS Ventura, Sonoma, or Sequoia (steps are similar on older versions)
Internet connection

Step-by-Step

Sign in to your Apple ID account page. Open a web browser and go to appleid.apple.com. Sign in with your Apple ID and complete the two-factor authentication prompt on your trusted device.
Generate an app-specific password. Once signed in, look for the “Sign-In and Security” section. Click “App-Specific Passwords,” then “Generate App-Specific Password.” You may be asked to enter a label (e.g., “macOS Mail”). Click “Create.” Apple will display a password in the format xxxx-xxxx-xxxx-xxxx. Copy it or keep the window open—you’ll need it in the next steps.
Open Mail’s account settings. On your Mac, open the Mail app. In the menu bar, click Mail > Settings (or Preferences on older macOS). Go to the Accounts tab.
Select the affected account. Click the account that’s failing (usually your iCloud or other email account). Look for the “Account Information” or “Server Settings” tab—this is where you’ll update the password.
Replace the password with the app-specific password. In the “Password” field, delete the old password and paste the app-specific password you generated. Make sure there are no extra spaces. If the field is grayed out, uncheck “Automatically manage connection settings” or click “Cancel” and try again after restarting Mail.
Save and restart Mail. Click “OK” or “Done” to save. Quit Mail completely (Cmd+Q) and reopen it. Mail should now connect without prompting for a password.
If the account still fails, remove and re-add it. Go back to Mail > Settings > Accounts, select the problematic account, and click the minus (−) button to remove it. Then click the plus (+) button to add it again. When prompted for a password, use the app-specific password instead of your normal Apple ID password.
Update other apps that use the same account. If you also use the account in Calendar, Contacts, or third-party email clients, repeat the same process there—each will need its own app-specific password or the same one if you reuse it.

Common Mistakes

Using your regular Apple ID password. With 2FA enabled, Mail can’t use your normal password—it needs an app-specific password. This is the #1 cause of persistent login failures.
Copying the app-specific password with spaces. The password is displayed with hyphens, but you should paste it exactly as shown. Some users accidentally add a space at the end when copying.
Forgetting to update the password in “Server Settings.” On some macOS versions, the password field is under “Server Settings” rather than “Account Information.” Check both tabs.
Not restarting Mail after saving. Mail may cache the old credentials. A full quit and reopen is necessary for the change to take effect.
Deleting the account instead of updating. Removing the account can cause you to lose local drafts or cached emails if you don’t have backups. Try updating the password first.

Tips

Use a unique app-specific password for Mail. You can generate multiple passwords for different apps. Label them clearly (e.g., “Mac Mail,” “iPhone Mail”) so you can revoke one without affecting others.
Keep a note of the app-specific password. You won’t be able to view it again after you leave the page—only regenerate a new one. Store it in your password manager.
Check for macOS updates. Apple has fixed several Mail+2FA bugs in system updates. Go to System Settings > General > Software Update and install any pending updates.
If you use iCloud Mail, try signing out of iCloud entirely. Sometimes the issue is with the iCloud account token, not just the password. Go to System Settings > Apple ID > iCloud, sign out, restart, and sign back in.

Troubleshooting

Mail still asks for a password after entering the app-specific password. This usually means the password wasn’t saved correctly. Go back to Settings, select the account, and look for a “Password” field under “Server Settings” (not just “Account Information”). Re-enter it, then restart Mail. If that fails, remove and re-add the account entirely.

You get an error saying “Cannot verify account name or password.” This can happen if the app-specific password was generated for a different Apple ID than the one used in Mail. Double-check that you’re signed into appleid.apple.com with the same Apple ID that’s configured in Mail.

The “App-Specific Passwords” option is missing. This option only appears if your Apple ID has 2FA enabled. If you haven’t enabled 2FA, you won’t see it—you may need to enable it first. If you have 2FA but still don’t see the option, sign out of the Apple ID website and sign back in, or try a different browser.

Mail works but Calendar or Contacts don’t. Those apps use the same account credentials. Update the password in each app’s settings, or sign out and back into iCloud in System Settings to refresh all services at once.

The account is an IMAP or POP account (not iCloud). For non-Apple email providers, the fix is different. You need to log into your email provider’s website and generate an app-specific password there (if they offer it), or use your regular password if the provider doesn’t support 2FA. Apple’s app-specific password only works for Apple ID–based accounts.

After removing and re-adding, Mail won’t let you add the account. This can happen if Mail’s automatic setup tries to verify with your normal password. When prompted, choose “Other Mail Account” and enter the app-specific password manually. If that doesn’t work, restart your Mac and try again.

Frequently Asked Questions

Why does Mail stop working after I enable 2FA?

When you enable 2FA, Apple stops accepting your normal Apple ID password for “non-Apple” apps like Mail, Calendar, and Contacts. They require an app-specific password—a one-time generated code that acts as a substitute for your real password.

Can I use the same app-specific password for multiple devices?

Yes, you can reuse the same app-specific password across multiple devices or apps, but it’s safer to generate a separate one for each. This way, if one device is compromised, you can revoke just that password without affecting others.

How do I revoke an app-specific password?

Go to appleid.apple.com, sign in, go to “Sign-In and Security” > “App-Specific Passwords,” and click “Revoke” next to the password you want to remove. This immediately stops that password from working.

Will I need to do this again after a macOS update?

Usually no. Once you’ve entered the app-specific password, it stays saved in your keychain. However, if you sign out of iCloud or reset your keychain, you may need to re-enter it.

Does this fix also apply to Outlook or other email clients?

Yes, the same app-specific password can be used in any email client that accesses your iCloud email. For other providers, check their own 2FA settings—most major providers (Gmail, Yahoo, etc.) also offer app-specific passwords.

What if I don’t want to use an app-specific password?

If you prefer, you can disable 2FA for your Apple ID (not recommended for security), but then you can use your normal password again. Alternatively, you can use iCloud’s “Sign in with Apple” for third-party apps that support it, which avoids the need for app-specific passwords.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →