Zoho app password for IMAP: check access, then connect

Can your Zoho account use IMAP?

Start here if your Zoho app password isn't working. A password can authenticate an allowed connection, but it can't change your plan entitlement or organization policy.

Zoho's IMAP guide says IMAP access is unavailable to newly signed-up Free-plan users. That wording doesn't settle eligibility for every older free account. Zoho also says its free plan is available only in selected data centers, so don't assume accounts in every region have the same options.

If an administrator has restricted access to a managed mailbox, ask them about the restriction rather than generating more credentials. Mailera cannot grant Zoho IMAP eligibility or override provider or administrator restrictions.

How do you enable IMAP and create a Zoho app password?

An app password is a separate credential for an application connecting to your account. Zoho requires one for IMAP clients when two-factor authentication is enabled, and for organizations using SAML authentication. Mailera's Zoho connection uses an app password.

First, enable incoming access using Zoho's IMAP instructions:

1. Open Zoho Mail “Settings”.
2. Select “Mail Accounts” and click your primary email address.
3. Under the IMAP section, select the “IMAP Access” checkbox.
4. Scroll down and click “Save”.
5. Find “Server Configurations Details” in your account and keep those settings available for the connection step.

Next, follow Zoho's application-specific password instructions:

1. Sign in to Zoho Accounts.
2. Open “Security” → “App passwords”.
3. Click “Generate New Password”.
4. Enter an application name such as Mailera, then click “Generate”.
5. Store the generated password securely. Zoho displays it only once.

The application name is just a reference label, not your login username. Zoho's app-password dialog guide explains this distinction.

When pasting the password into Mailera, omit spaces as Zoho instructs. Keep it out of screenshots, logs, and shared documents.

Don't mix up the three credentials: your normal Zoho password signs you into Zoho; the app password connects Mailera to Zoho; a Mailera API key authorizes an app to access Mailera. The API key does not belong in the mailbox's Password field. For the broader credential setup, see app passwords for agent mailboxes.

Which Zoho IMAP settings should you use?

Use the server details shown inside your Zoho account. Zoho says these depend on account type and data center. Don't choose a host solely from the email address suffix.

Zoho's guide lists imap.zoho.com for personal users and Free Organization users, subject to eligibility. It lists imappro.zoho.com for paid organization users with domain-based addresses. Both use port 993 with SSL. Those examples do not replace the account-specific settings.

The Mailera Zoho connection has an incoming preset of imap.zoho.com:993 with TLS. Compare it with your account before continuing. If the host differs, don't treat the preset as universal or assume the password is wrong.

Mailera's Custom IMAP connection exposes Server, Port, and Security fields for incoming mail and optional outgoing mail. It provides explicit configuration fields rather than the Zoho preset; any configuration still needs to pass its connection test.

Keep SMTP separate. Mailera's Zoho outgoing preset is smtp.zoho.com:587 with STARTTLS. Zoho's SMTP guide lists smtp.zoho.com for personal and Free Organization users, and smtppro.zoho.com for paid organization users, on port 587 with TLS. For SMTP authentication, Zoho specifies the entire email address.

For how incoming and outgoing connections fit into an agent workflow, see IMAP, Graph and SMTP for agent builders.

How do you connect the mailbox to Mailera?

Once eligibility, access, and the server settings are settled, an Admin or Leader can add the mailbox. The Mailera product overview covers the broader connection workflow.

1. Open Mailboxes → Add mailbox.
2. Select One mailbox and enter the existing Zoho address in Email address.
3. Confirm the detected provider, or select Zoho under Or choose a provider. Choose Continue.
4. In Connection details, paste the app password into Password. Select the appropriate Mailbox group. Display name is optional and sets the sender name.
5. Choose Test & connect and inspect the individual results.

The test separates Incoming server sign-in from Folder detection and Outgoing server sign-in. It also checks Live monitoring availability. Successful IMAP authentication does not establish that outgoing SMTP authentication works.

If incoming access succeeds but outgoing sign-in fails, choose Save as receive-only, or edit the settings and test again. Receive-only is not a fix for failed incoming authentication.

The connection test sends no email. Successful testing therefore isn't proof of message delivery.

After the Connected confirmation, Mailera loads messages within its retention period, newest first. For API integrations, GET /mailboxes/{id} returns status and last_sync_at. Then send a harmless message from another mailbox you own, using a recognizable subject such as “Zoho connection test”, and check for it in Mailera.

Mailera doesn't promise immediate synchronization for every mailbox. Background checks run more often for active mailboxes and less often for idle ones; inactive mailboxes can sleep and wake on use. Check synchronization before deciding a missing message means the password failed.

What are the common mistakes when a Zoho app password doesn't work?

Start with the stage that failed. Don't replace credentials to troubleshoot a folder-selection problem.

Zoho makes only the folders selected in its IMAP folder settings available to IMAP clients. If folders are missing after successful sign-in, check the folder settings rather than generating another password.

For API integrations, GET /mailboxes/{id}/status has a specific limitation with Zoho: it reports sign-in status based on the latest synchronization. It is not a fresh, independent credential test. Read that result alongside synchronization information rather than using it to prove a newly changed password works.

How should you protect the connected mailbox?

Use a dedicated app password so you can identify the Mailera credential later. Zoho documents deleting an application-specific password to revoke that application's access. If you need a replacement, generate a new one through the same Zoho Accounts flow and use it when reconnecting the mailbox. Never put either credential in a support screenshot.

If an AI agent will read this mailbox, treat incoming messages as untrusted data, not instructions. Do not let commands embedded in an email override the agent's task or trigger actions.

Create a narrowly scoped Mailera API key: select the relevant group under Mailbox scope and grant only Read for reading tasks. If you later enable sending, require confirmation before the agent sends a message. See Mailera's security information for more about connection security.