Skip to content

G Suite notice about SMS Backup+ becoming restricted #959

@ghost

Description

@ghost

[Note added by @kurahaupo, 2020-07-08]

  1. This thread does have useful information but it is somewhat buried because the thread is so long. Please read through it before adding more comments.
    If you're just looking for a quick fix, there's an explanation at the top of Google IMAP error fixed on Android #972.
  2. Although this report dates from June 2019, in July 2020 G-suite users are being notified (again) that new installations of SMS Backup+ won't get Gmail sensitive scope access; it's the same problem, just different timing.
  3. This policy change should not affect access to Calendars. If you have a problem with calendars, raise a separate ticket. (Note: do not enable Connect your Gmail account (unsupported), as that's only for Gmail, not for Calendars.)
  4. The changes to sensitive scope access are explained at https://developers.google.com/terms/api-services-user-data-policy#additional-requirements-for-specific-api-scopes
    A major use-case is being able to read SMS & MMS alongside email & hangouts messages, and that ought to be sufficient justification under term 3 of the rules "Applications that enhance the email experience for productivity purposes", but it's hard to argue that case when the name says "Backup".

[Original report follows]

I received the attached email from Google that your app will become restricted on 7/8. Thought you'd like to know.
SMS Backup.pdf

Activity

MarkMessinger

MarkMessinger commented on Jun 25, 2019

@MarkMessinger

A similar email is being sent to ordinary users of Gmail. This one refers to a restriction commencing July 15, 2019.
SMS+ Backup.pdf

B150n

B150n commented on Jun 25, 2019

@B150n

I had the same experience as @MarkMessinger. Very worried that we'll lose THE best SMS backup app around.

WebAddict

WebAddict commented on Jun 25, 2019

@WebAddict

Same - July 15 will stop working if "unable to meet the deadline to comply with our updated data policy requirements"

AEFeinstein

AEFeinstein commented on Jun 25, 2019

@AEFeinstein

I have also received this email

bwwestbrook

bwwestbrook commented on Jun 25, 2019

@bwwestbrook

Same email.

Hi,

Although you don’t need to do anything, we wanted to let you know that the following apps may no longer be able to access some data in your Google Account, including your Gmail content. If these apps are unable to meet the deadline to comply with our updated data policy requirements, they'll lose access to your Account starting July 15th, 2019.

SMS Backup+
We are making this change as part of ongoing efforts to make sure your data is protected and private.

You can always view, manage and remove apps you’ve given access to your account by visiting your Google Account.

Thanks,
The Google Accounts team

malversan

malversan commented on Jun 25, 2019

@malversan

It seems that the app must pass a verification process to continue accessing GMail accounts the way it does.

The Google API scopes to create and read GMail messages (used by SMS Backup+ to backup and restore SMS messages) are now restricted scopes, and apps that use them need to be audited by Google to verify that they comply with the OAuth security policies and to verify that they do not make an ilegitimate use of that APIs.

And for the app to be verified, the developer must apply for that verification. There are limit dates for that too. The too-late deadline is July 15th, when the app will loose access to that APIs if nothing is done.

About restricted API scopes:
https://developers.google.com/terms/api-services-user-data-policy#additional-requirements-for-specific-api-scopes

About the verification process:
https://support.google.com/cloud/answer/9110914#restricted-scopes

We need the developer urgently.

malversan

malversan commented on Jun 25, 2019

@malversan

Please, do not clutter this thread by repeating the same information a hundred times. We all have received the same message today, Jun 25th, so there is no need to post it more than once nor repeating ”me too” once and again.

Let's try to get a solution, not to make a whinning cry of this.

jpellman

jpellman commented on Jun 25, 2019

@jpellman

It's worth pointing out that, while it will be a bit obnoxious, you don't need to use the default OAuth-based mechanism to back up your texts. As stated in the docs here you can configure the app to use plain old vanilla IMAP.

jason-mehmel

jason-mehmel commented on Jun 25, 2019

@jason-mehmel

It's worth pointing out that, while it will be a bit obnoxious, you don't need to use the default OAuth-based mechanism to back up your texts. As stated in the docs here you can configure the app to use plain old vanilla IMAP.

We can keep backing up to gmail, just through IMAP? Would it still track the same SMS label that we've applied to the texts?

malversan

malversan commented on Jun 25, 2019

@malversan

I think using GMail IMAP is subject to the same restrictions that require the aforementioned verification process.

Asides, using another IMAP server is a no go for me. This app is not only a backup utility, it also allows to search for specific SMSs using GMail and search for calls you issued using Google Calendar. It's not just a backup, it's much more when combined with a Google account.

The fact is that I think the app already complies with the OAuth security requirements claimed by the Google verification process. So we only need the developer to apply the app for that verification process. I have just emailed him asking for his help. I hope he has a bit of time and interest in keeping his awesome creature alive.

KyleSanderson

KyleSanderson commented on Jun 25, 2019

@KyleSanderson

@jberkel send help

pingu8007

pingu8007 commented on Jun 25, 2019

@pingu8007

It's worth pointing out that, while it will be a bit obnoxious, you don't need to use the default OAuth-based mechanism to back up your texts. As stated in the docs here you can configure the app to use plain old vanilla IMAP.

Yes, we can fallback to vanilla IMAP. And no, Gmail won't let it happen.
According to experience from K-9 mail, Gmail will do its best to prevent you access IMAP even with "less secure apps ON" or "2-factor-authentication OFF". (See thunderbird/thunderbird-android#655)

jberkel

jberkel commented on Jun 25, 2019

@jberkel
Owner

Hello everyone. I'm sorry about this situation, SMS Backup+ will no longer have access to Gmail, mainly because it's not an email reading app.

I applied for an exception but it was declined, as expected. Vanilla IMAP might work, but for how long I wonder. And it's very tricky to set up for a casual user. Unfortunately the Android platform is getting more and more closed.

I'm not sure what to do at this point, either remove the app from the store or release a new version which removes the automatic account setup, since that is broken / will be broken soon.

Hobart

Hobart commented on Jun 25, 2019

@Hobart

Off topic: I took the opportunity to hit Donate in the app, thanks for years of great software @jberkel & the other committers.

Screenshot_20190625-162200

351 remaining items

eohrnberger

eohrnberger commented on Apr 7, 2022

@eohrnberger

I confirm the information above. Testing procedure:

1. Created a test Gmail account
2. Enabled MFA
3. Created an app password for all the apps that need access, Outlook on Windows and SMS Backup on phone
	a. This is a one-time password, so no sense in storing it
	b. It will be a 16 characters like:	tkvgrjxatvgwprzw
	c. Established an actual connection with the app, provide the app password, otherwise, Google won't remember it, and it'll be denied later
4. Connected with Outlook 2016 - works
	a. Send / Receive through the Gmail account
	b. When prompted, enter the app password
	c. Validate the email did send through the Gmail account
5. Disabled MFA
6. Test that sending in Outlook through the Gmail account would still work

This was configured and tested on 3/3/22. I tested again on 4/7/22, Outlook still has IMAP access to Gmail using the app password. Apparently, they never expire.

skrosen1

skrosen1 commented on Dec 11, 2022

@skrosen1

I have been using SMSBackup+ for many years.  I switched over to 2 factor authentication when it became necessary to do so a few years ago.  It has worked perfectly ever since.  However, I recently installed Android 13 and, while the app still works with manual backups, it will no longer backup anything automatically.  I unchecked battery optimization as was suggested but that hasn't helped.  I even used a new password in the hope that it would help, but it did not.

Any suggestions on how to fix this would be appreciated.

Thanks,

Susan

kurahaupo

kurahaupo commented on Dec 28, 2022

@kurahaupo
Collaborator

@skrosen1 some devices now have separate permissions for "auto launch", "run services in the background", and "access the internet from the background".

On my phone those are accessible from the app settings (tap+hold on the Messages app icon, then:

  • App Info → Battery Usage → Allow auto launch
  • App Info → Battery Usage → Allow background activity
  • App Info → Data Usage Details → Background data
waldyrious

waldyrious commented on Dec 28, 2022

@waldyrious

For me, the options have different names:

  • App Info → Battery Usage → Allow auto launch

I don't seem to have any option corresponding to this one 🤔

  • App Info → Battery Usage → Allow background activity

In my phone this is at App info → App battery usage → Unrestricted.

  • App Info → Data Usage Details → Background data

For me this is found at App info → Mobile data & Wi-Fi → Background data

I also have the following turned off: App info → Permissions → Pause app activity if unused.

Of the above, App battery usage → Unrestricted is the only one I hadn't toggled yet. I'll report back if that does the trick, but I suspect it won't 😞

B150n

B150n commented on Jan 4, 2023

@B150n

For me, the options have different names:

  • App Info → Battery Usage → Allow auto launch

I don't seem to have any option corresponding to this one 🤔

  • App Info → Battery Usage → Allow background activity

In my phone this is at App info → App battery usage → Unrestricted.

  • App Info → Data Usage Details → Background data

For me this is found at App info → Mobile data & Wi-Fi → Background data

I also have the following turned off: App info → Permissions → Pause app activity if unused.

Of the above, App battery usage → Unrestricted is the only one I hadn't toggled yet. I'll report back if that does the trick, but I suspect it won't 😞

I tried every option listed and looked everywhere else I could think of to allow any unrestricted option but Auto Backup is still not working. Still hoping for a workaround.

Thanks for all of the suggestions.

Update to add: Using Android 13, Samsung Galaxy Z Fold 4, Pulse SMS

B150n

B150n commented on Feb 2, 2023

@B150n

Last night I tried using a yahoo email but couldn't get it to work. It was late & I might have entered something wrong. I go back to my orig Gmail email, enter my app-specific password & still wouldn't work at all. Grrrr.

Went to my Gmail account & created a new app-specific password & entered all info. Manually backed up & went to bed.
A few minutes ago I went to manually backup & all of my texts were already backed up!

So, try creating a New app-specific password & see if it works for you too!

kurahaupo

kurahaupo commented on Feb 16, 2023

@kurahaupo
Collaborator

@B150n Gmail has made a habit of suggesting that I turn off app passwords to improve the security of my account; I keep having to make a point of saying "no".

It's possible that some folk are following this recommendation and inadvertently disabling SMS-Backup+.

B150n

B150n commented on Feb 17, 2023

@B150n

@kurahaupo

That’s a good suggestion for people to check within their GMAIL accounts. I haven’t received any notifications or suggestions to stop using App-specific passwords but will keep any eye out for it.

Some things that I’ve noticed and had to do since I last posted.

  1. Within the Auto backup settings, it is a must that you ENABLE/check off the “Old backup scheduler” to get SMS Backup+ to Auto-backup whatsoever. Without it being enabled, none of my SMSs were being backed up.
  2. Only the “Regular schedule” (when to backup SMS seems to be working. I set it at 30 minutes and it has been pretty consistent with the backups.
  3. The “Incoming schedule” (when I set to 1 or 3 minutes) does not work. I miss this feature.
    I’ve been playing around with various settings and nothing will get it working.

I think I messed some setting up last night because I just looked at my gmail and SMS Backup+ had not backed anything up since yesterday. UGH! I probably forgot to re-enable the use old backup scheduler.
I just found what I believe is the last version made (1.6.0-Beta) and installed in on my phone. Testing now to see if it works. I did not do a completely clean install. I installed over version 1.5.1.1 but I did clear the app cache (not app data) and also cleared the phones system cache.

waldyrious

waldyrious commented on Feb 17, 2023

@waldyrious

It's possible that some folk are following this recommendation and inadvertently disabling SMS-Backup+.

For the record, I do get these prompts and I have always responded "no" to them, to keep the SMS-Backup+ app password. So that's not the reason it's not working. (In fact, if I had disabled the app password, manual backups wouldn't work either.)

Within the Auto backup settings, it is a must that you ENABLE/check off the “Old backup scheduler” to get SMS Backup+ to Auto-backup whatsoever. Without it being enabled, none of my SMSs were being backed up.

Huh! I didn't have this checkbox marked! I have now enabled it, and will report if it makes the automatic backups start happening for me again.

apsstudio

apsstudio commented on Dec 15, 2023

@apsstudio

Hi, Has anyone figured out how to get SMS Backup+ working again? I still keep getting the App is blocked window.

ldboehm

ldboehm commented on Dec 15, 2023

@ldboehm
apsstudio

apsstudio commented on Dec 15, 2023

@apsstudio

Hi I've attempted this several times and set up a new gmail to test it as well. Once I click on security, I don't see an option for App passwords. How do I locate this?

dobrin

dobrin commented on Dec 15, 2023

@dobrin

See this link https://support.google.com/accounts/answer/185833 .
To create an app password, you need 2-Step Verification on your Google Account.
Go to your Google Account.
Select Security.
Under "Signing in to Google," select 2-Step Verification.
At the bottom of the page, select App passwords.

apsstudio

apsstudio commented on Dec 16, 2023

@apsstudio

Thank you, I finally got it to work! 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    helpfulprovides information that may be useful to other usersxoauthproblems caused by lack of approval to use "sensitive" Gmail API

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @jberkel@schultzter@sshaikh@mhofman@arran4

        Issue actions

          G Suite notice about SMS Backup+ becoming restricted · Issue #959 · jberkel/sms-backup-plus