How to securely give an AI tool access to your email account

Before you connect any AI to your inbox, get the access model right. The wrong setup hands a tool your full password forever; the right setup gives it a narrow, revocable token. This guide explains how to grant email access safely on Gmail and Outlook, and how to pull the plug if something goes wrong.

• A Gmail or Outlook account
• Two-step verification turned on (required for app passwords)
• The AI tool you plan to connect
• About 7 minutes

Step 1: Prefer OAuth over passwords

When a tool offers Sign in with Google or Sign in with Microsoft, use it. OAuth gives the app a scoped, revocable token instead of your password, and you can see and limit exactly what it can do. Only fall back to other methods when OAuth is not offered.

Step 2: Use an app password for IMAP tools

Some scripts and older tools connect over IMAP/SMTP and cannot do OAuth. For these, generate a dedicated app password. It works only for mail, can be revoked on its own, and does not expose your account password. You must have two-step verification enabled first.

Step 3: Check and minimize the scopes

During an OAuth flow, read the permission screen. If a summarizer asks for permission to send and delete email, that is more than it needs. Where the tool lets you choose, grant read-only. You can audit granted access any time on your account security page.

Step 4: Know how to revoke instantly

Keep the revoke path handy. For OAuth, remove the app from the third-party access list and its token dies immediately. For an app password, delete that specific password. Either way, the AI tool loses access at once without you having to change your real password.

Result: your AI assistant gets exactly the email access it needs through a scoped token or single-purpose app password, you can see what it can do, and you can cut it off in one click if anything feels off.