Yandex Mail Security: Yandex Key, App Passwords and Sessions
Protect your Yandex Mail with two-factor authentication, app passwords for email programs, a recovery phone and the log-out-everywhere switch.
Everything that protects Yandex Mail lives in your Yandex ID. These are the settings worth getting right, in order of how much they help.
1. A password nobody else has
Avoid common words and add numbers and special characters; above all, don't reuse a password from another site that might be breached. Yandex checks whether your password turns up in known breach databases and suggests changing it if it does. To change it: id.yandex.com/security → Update password.
2. A linked phone number
A phone number lets you restore access if you lose your password, and Yandex uses it for the text-message checks it runs when you sign in from a new location, device or VPN. Keep your security question and answer current too — Yandex uses them as a recovery method and as an alternative to the text-message check.
3. Two-factor authentication
Yandex offers login via password + SMS or via Yandex Key, its authenticator app. With Yandex Key on, someone who learns your password still can't sign in without the one-time password from your phone. Yandex Key also lets you log in with a QR code instead of typing a password.
4. App passwords for email programs
Don't put your main password into Outlook, Apple Mail or Thunderbird. Use the program's OAuth sign-in if it has one, or create an app password:
- Open id.yandex.com/security/app-passwords.
- Click Create an app password and choose Mail.
- Name it after the program, then click Next.
- Copy the password into the program straight away — it's shown only once. If you lose it, delete it and create a new one.
In Yandex Mail, Settings → Email clients controls whether programs can connect at all. Programs need the IMAP option and App passwords and OAuth tokens enabled there. Full setup: Yandex Mail server settings.
5. Sign-in alerts and log out everywhere
Yandex notifies you when your account is accessed from a new computer, phone or tablet. If that wasn't you — or you left yourself signed in somewhere — open Yandex ID, go to Logins and devices and click Log out on all devices. Then change your password.
6. Recognising fake Yandex emails
Yandex never emails you a link asking for your password or personal data. In a genuine Yandex address, yandex.com is followed by a slash, not a dot — hover over links to check. If you entered your password on a fake page, scan your computer for viruses, then change your password, link a phone number and change your security question.
Locked out already? See resetting your Yandex password.
How this guide was checked · October 2026
Verified against 6 official sources
Every step, setting and limit in this guide was checked against the provider’s own documentation on yandex.com. Anything we couldn’t confirm was left out.
Questions
Frequently asked questions
How do I turn on two-factor authentication for Yandex Mail?
Yandex offers login via password + SMS or via Yandex Key. Set it up from the security settings of your Yandex ID.
How do I create a Yandex app password?
Open id.yandex.com/security/app-passwords, click Create an app password, choose Mail, name it and click Next. Copy it at once — it's shown only once.
How do I see if someone else is in my Yandex account?
Yandex notifies you of access from a new device. If it wasn’t you, open Yandex ID, go to Logins and devices, click Log out on all devices and change your password.
Is the Yandex Key app required?
Not for a basic login. It's needed only if you turn on two-factor authentication with Yandex Key, or want to log in with a QR code.
Related guides
Keep reading
Yandex Mail Troubleshooting
Yandex Mail Not Working? Fixes for Login and Email App Errors
Fix Yandex Mail problems: email app errors like Authentication required and not owned by auth user, constant password prompts, frozen mailboxes and blocked sending.
3 min read
Yandex Mail Sign Up
How to Create a Yandex Mail Account
Register a free Yandex ID and mailbox, choose a username you'll keep for good, and set up the phone number and mail collector you'll want later.
2 min read
Yandex Mail Login
How to Log In to Yandex Mail
Sign in to Yandex Mail with your Yandex ID, use a Yandex Key code or QR code, sign out of every device at once, and fix the usual login problems.
2 min read
Yandex Mail Password Reset
How to Reset or Change Your Yandex Mail Password
Recover a forgotten Yandex ID password with your security question, phone or backup email, change a password you know, and avoid fake reset messages.
2 min read
Yandex Mail Settings
Yandex Mail Server Settings: IMAP, SMTP and POP3
Yandex Mail IMAP, SMTP and POP3 settings, authentication requirements and provider-specific connection fixes in one verified guide.
3 min read
Mailfence Security
Mailfence Security: 2FA, Service Passwords and Connection History
Lock down a Mailfence account with two-factor authentication and backup codes, service-specific passwords for email programs, and the connections history log.
3 min read