Connecting a third-party application, website, or desktop mail client to your Google account requires the official Google mail smtp server address, which is smtp.gmail.com. Getting your mail to deliver reliably without throwing authentication errors depends entirely on matching the correct port, encryption type, and password requirements set by Google.
Whether you're setting up Microsoft Outlook, Apple Mail, or a custom contact form on a content management system, default passwords won't work if your account has security protections enabled. Knowing the exact parameters saves you hours of troubleshooting failed message queues and blocked delivery reports.
Official Google Mail SMTP Server Settings
To route outgoing messages through your Google account, input these precise parameters into your mail client or application configuration panel.
- SMTP Server Address:
smtp.gmail.com - Port (TLS/STARTTLS):
587(Recommended) - Port (SSL):
465(Alternative secure option) - Authentication: Required (Yes)
- Username: Your full Google email address (e.g.,
you@gmail.com) - Password: Your standard Google account password or a 16-character App Password
Authentication requires your full email address as the username. Do not use an abbreviated version or just your account handle.
Choosing the Right Port and Encryption Protocol
Google supports two distinct secure ports for outgoing mail traffic. Selecting the right one depends on network restrictions and what your third-party software prefers.
Port 587 uses STARTTLS technology. It begins as an unsecured connection before upgrading to a fully encrypted channel once communication with Google's servers starts. This port represents the modern industry standard for client submissions and rarely encounters blocking rules on standard Internet service provider networks.
Port 465 uses direct SSL encryption from the very first byte transmitted. While older protocols sometimes phase this out, it remains a reliable fallback option if port 587 gets blocked by corporate firewalls or strict router configurations. Avoid port 25 entirely, as most consumer and business networks block it to prevent outbound spam.
Why Your Standard Password Fails
Most connection failures happen because people type their normal Google account password into an external mail client. If your account uses 2-Step Verification—which Google enforces for the vast majority of active profiles—standard authentication requests get rejected instantly for security reasons.
Bypassing this block requires generating a unique App Password from your Google Account security settings.
- Navigate to your Google Account management page.
- Select the Security tab from the left-hand navigation menu.
- Locate the 2-Step Verification section and ensure it's turned on.
- Scroll down to find App passwords and click it.
- Type a custom label—like "Outlook Desktop" or "Website Contact Form"—to remember where you used it.
- Click Generate to reveal a 16-character code.
- Copy this code and paste it directly into your mail client's password field, omitting any spaces.
Keep this code secure. Treat it just like a master key to your mailbox, because anyone who has it can send mail from your address.
Sending Limits and Restrictions
Google restricts outbound volume to protect network reputation and stop automated spam rings. Exceeding these thresholds temporarily locks your ability to send messages.
Free consumer Gmail accounts cap out at 500 recipients per day. Paid Google Workspace business accounts raise that threshold to 2,000 recipients daily. Furthermore, single messages cannot exceed a total recipient count of 100 people across the "To", "Cc", and "Bcc" fields combined.
Hitting these caps triggers a temporary suspension lasting between 12 and 24 hours. High-volume marketing campaigns require dedicated email service providers rather than standard Google mail routing.
Frequently Asked Questions
What is the incoming mail server for Google?
Retrieving mail alongside sending it requires configuring your incoming server settings. For IMAP access, use imap.gmail.com on port 993 with SSL/TLS encryption. For POP3 access, use pop.gmail.com on port 995 with SSL enabled.
Can I use Google's SMTP server for my custom domain?
Yes, if your domain utilizes Google Workspace. The server address remains smtp.gmail.com, but your username must be your full business email address ending in your custom domain name rather than @gmail.com.
Why am I getting an authentication error despite using an app password?
Double-check that you removed all blank spaces from the 16-character app password when pasting it into your software. Also verify that IMAP or POP access is enabled within your main webmail settings under the forwarding and access tab if you are connecting an external email reader.
What is smtp-relay.gmail.com?
smtp-relay.gmail.com is a separate endpoint meant exclusively for Google Workspace enterprise environments that require static IP whitelisting or advanced routing rules across an entire organization. Standard consumer accounts and basic apps should always use smtp.gmail.com.
