-
Notifications
You must be signed in to change notification settings - Fork 501
Open
Labels
helpfulprovides information that may be useful to other usersprovides information that may be useful to other usersxoauthproblems caused by lack of approval to use "sensitive" Gmail APIproblems caused by lack of approval to use "sensitive" Gmail API

Description
[Note added by @kurahaupo, 2020-07-08]
- This thread does have useful information but it is somewhat buried because the thread is so long. Please read through it before adding more comments.
If you're just looking for a quick fix, there's an explanation at the top of Google IMAP error fixed on Android #972.- Although this report dates from June 2019, in July 2020 G-suite users are being notified (again) that new installations of SMS Backup+ won't get Gmail sensitive scope access; it's the same problem, just different timing.
- This policy change should not affect access to Calendars. If you have a problem with calendars, raise a separate ticket. (Note: do not enable
Connect your Gmail account (unsupported)
, as that's only for Gmail, not for Calendars.)- The changes to sensitive scope access are explained at https://developers.google.com/terms/api-services-user-data-policy#additional-requirements-for-specific-api-scopes
A major use-case is being able to read SMS & MMS alongside email & hangouts messages, and that ought to be sufficient justification under term 3 of the rules "Applications that enhance the email experience for productivity purposes", but it's hard to argue that case when the name says "Backup".[Original report follows]
I received the attached email from Google that your app will become restricted on 7/8. Thought you'd like to know.
SMS Backup.pdf
BitPopCoin, PGScully, ryqryq, giampaolo44, garnetsunset and 5 morejonnypjohnston and caueregokwinz, olea, imnotminkus, tkmcmaster, TazUk and 30 moreYMJH, sdkkds and cauerego
Metadata
Metadata
Assignees
Labels
helpfulprovides information that may be useful to other usersprovides information that may be useful to other usersxoauthproblems caused by lack of approval to use "sensitive" Gmail APIproblems caused by lack of approval to use "sensitive" Gmail API
Projects
Milestone
Relationships
Development
Select code repository
Activity
MarkMessinger commentedon Jun 25, 2019
A similar email is being sent to ordinary users of Gmail. This one refers to a restriction commencing July 15, 2019.
SMS+ Backup.pdf
B150n commentedon Jun 25, 2019
I had the same experience as @MarkMessinger. Very worried that we'll lose THE best SMS backup app around.
WebAddict commentedon Jun 25, 2019
Same - July 15 will stop working if "unable to meet the deadline to comply with our updated data policy requirements"
AEFeinstein commentedon Jun 25, 2019
I have also received this email
bwwestbrook commentedon Jun 25, 2019
Same email.
Hi,
Although you don’t need to do anything, we wanted to let you know that the following apps may no longer be able to access some data in your Google Account, including your Gmail content. If these apps are unable to meet the deadline to comply with our updated data policy requirements, they'll lose access to your Account starting July 15th, 2019.
SMS Backup+
We are making this change as part of ongoing efforts to make sure your data is protected and private.
You can always view, manage and remove apps you’ve given access to your account by visiting your Google Account.
Thanks,
The Google Accounts team
malversan commentedon Jun 25, 2019
It seems that the app must pass a verification process to continue accessing GMail accounts the way it does.
The Google API scopes to create and read GMail messages (used by SMS Backup+ to backup and restore SMS messages) are now restricted scopes, and apps that use them need to be audited by Google to verify that they comply with the OAuth security policies and to verify that they do not make an ilegitimate use of that APIs.
And for the app to be verified, the developer must apply for that verification. There are limit dates for that too. The too-late deadline is July 15th, when the app will loose access to that APIs if nothing is done.
About restricted API scopes:
https://developers.google.com/terms/api-services-user-data-policy#additional-requirements-for-specific-api-scopes
About the verification process:
https://support.google.com/cloud/answer/9110914#restricted-scopes
We need the developer urgently.
malversan commentedon Jun 25, 2019
Please, do not clutter this thread by repeating the same information a hundred times. We all have received the same message today, Jun 25th, so there is no need to post it more than once nor repeating ”me too” once and again.
Let's try to get a solution, not to make a whinning cry of this.
jpellman commentedon Jun 25, 2019
It's worth pointing out that, while it will be a bit obnoxious, you don't need to use the default OAuth-based mechanism to back up your texts. As stated in the docs here you can configure the app to use plain old vanilla IMAP.
jason-mehmel commentedon Jun 25, 2019
We can keep backing up to gmail, just through IMAP? Would it still track the same SMS label that we've applied to the texts?
malversan commentedon Jun 25, 2019
I think using GMail IMAP is subject to the same restrictions that require the aforementioned verification process.
Asides, using another IMAP server is a no go for me. This app is not only a backup utility, it also allows to search for specific SMSs using GMail and search for calls you issued using Google Calendar. It's not just a backup, it's much more when combined with a Google account.
The fact is that I think the app already complies with the OAuth security requirements claimed by the Google verification process. So we only need the developer to apply the app for that verification process. I have just emailed him asking for his help. I hope he has a bit of time and interest in keeping his awesome creature alive.
KyleSanderson commentedon Jun 25, 2019
@jberkel send help
pingu8007 commentedon Jun 25, 2019
Yes, we can fallback to vanilla IMAP. And no, Gmail won't let it happen.
According to experience from K-9 mail, Gmail will do its best to prevent you access IMAP even with "less secure apps ON" or "2-factor-authentication OFF". (See thunderbird/thunderbird-android#655)
jberkel commentedon Jun 25, 2019
Hello everyone. I'm sorry about this situation, SMS Backup+ will no longer have access to Gmail, mainly because it's not an email reading app.
I applied for an exception but it was declined, as expected. Vanilla IMAP might work, but for how long I wonder. And it's very tricky to set up for a casual user. Unfortunately the Android platform is getting more and more closed.
I'm not sure what to do at this point, either remove the app from the store or release a new version which removes the automatic account setup, since that is broken / will be broken soon.
Hobart commentedon Jun 25, 2019
Off topic: I took the opportunity to hit Donate in the app, thanks for years of great software @jberkel & the other committers.
351 remaining items
eohrnberger commentedon Apr 7, 2022
I confirm the information above. Testing procedure:
This was configured and tested on 3/3/22. I tested again on 4/7/22, Outlook still has IMAP access to Gmail using the app password. Apparently, they never expire.
skrosen1 commentedon Dec 11, 2022
I have been using SMSBackup+ for many years. I switched over to 2 factor authentication when it became necessary to do so a few years ago. It has worked perfectly ever since. However, I recently installed Android 13 and, while the app still works with manual backups, it will no longer backup anything automatically. I unchecked battery optimization as was suggested but that hasn't helped. I even used a new password in the hope that it would help, but it did not.
Any suggestions on how to fix this would be appreciated.
Thanks,
Susan
kurahaupo commentedon Dec 28, 2022
@skrosen1 some devices now have separate permissions for "auto launch", "run services in the background", and "access the internet from the background".
On my phone those are accessible from the app settings (tap+hold on the Messages app icon, then:
waldyrious commentedon Dec 28, 2022
For me, the options have different names:
I don't seem to have any option corresponding to this one 🤔
In my phone this is at App info → App battery usage → Unrestricted.
For me this is found at App info → Mobile data & Wi-Fi → Background data
I also have the following turned off: App info → Permissions → Pause app activity if unused.
Of the above, App battery usage → Unrestricted is the only one I hadn't toggled yet. I'll report back if that does the trick, but I suspect it won't 😞
B150n commentedon Jan 4, 2023
I tried every option listed and looked everywhere else I could think of to allow any unrestricted option but Auto Backup is still not working. Still hoping for a workaround.
Thanks for all of the suggestions.
Update to add: Using Android 13, Samsung Galaxy Z Fold 4, Pulse SMS
B150n commentedon Feb 2, 2023
Last night I tried using a yahoo email but couldn't get it to work. It was late & I might have entered something wrong. I go back to my orig Gmail email, enter my app-specific password & still wouldn't work at all. Grrrr.
Went to my Gmail account & created a new app-specific password & entered all info. Manually backed up & went to bed.
A few minutes ago I went to manually backup & all of my texts were already backed up!
So, try creating a New app-specific password & see if it works for you too!
kurahaupo commentedon Feb 16, 2023
@B150n Gmail has made a habit of suggesting that I turn off app passwords to improve the security of my account; I keep having to make a point of saying "no".
It's possible that some folk are following this recommendation and inadvertently disabling SMS-Backup+.
B150n commentedon Feb 17, 2023
@kurahaupo
That’s a good suggestion for people to check within their GMAIL accounts. I haven’t received any notifications or suggestions to stop using App-specific passwords but will keep any eye out for it.
Some things that I’ve noticed and had to do since I last posted.
I’ve been playing around with various settings and nothing will get it working.
I think I messed some setting up last night because I just looked at my gmail and SMS Backup+ had not backed anything up since yesterday. UGH! I probably forgot to re-enable the use old backup scheduler.
I just found what I believe is the last version made (1.6.0-Beta) and installed in on my phone. Testing now to see if it works. I did not do a completely clean install. I installed over version 1.5.1.1 but I did clear the app cache (not app data) and also cleared the phones system cache.
waldyrious commentedon Feb 17, 2023
For the record, I do get these prompts and I have always responded "no" to them, to keep the SMS-Backup+ app password. So that's not the reason it's not working. (In fact, if I had disabled the app password, manual backups wouldn't work either.)
Huh! I didn't have this checkbox marked! I have now enabled it, and will report if it makes the automatic backups start happening for me again.
apsstudio commentedon Dec 15, 2023
Hi, Has anyone figured out how to get SMS Backup+ working again? I still keep getting the App is blocked window.
ldboehm commentedon Dec 15, 2023
apsstudio commentedon Dec 15, 2023
Hi I've attempted this several times and set up a new gmail to test it as well. Once I click on security, I don't see an option for App passwords. How do I locate this?
dobrin commentedon Dec 15, 2023
See this link https://support.google.com/accounts/answer/185833 .
To create an app password, you need 2-Step Verification on your Google Account.
Go to your Google Account.
Select Security.
Under "Signing in to Google," select 2-Step Verification.
At the bottom of the page, select App passwords.
apsstudio commentedon Dec 16, 2023
Thank you, I finally got it to work! 👍