Connect Gmail and Google Workspace via OAuth

OAuth is the simplest and most reliable way to connect a Gmail or Google Workspace mailbox. BrandJet AI never sees your password, the token is scoped to mail send and read, and either you or your Workspace admin can revoke it at any time.

Before you start

You can use a personal Gmail or any Google Workspace mailbox.
If your domain belongs to a Workspace tenant, an admin may need to enable third-party apps for your organization.
Have the email address and the password handy in case Google asks you to re-verify.

Connect a Gmail or Workspace mailbox

Go to Accounts → Email → Connect.
Choose Google.
Pick the Google account in the consent screen, review the permissions, and click Allow.
You will land back in BrandJet with the inbox listed. Warmup defaults to off until you turn it on.

Permissions we request

BrandJet asks for the minimum Gmail scopes needed for outreach:

Send mail as you
Read replies to your campaigns
Modify labels (for read state and to file warmup conversations)

We do not read or store mail unrelated to a campaign or to warmup.

Google did not let me sign in

This is the most common error. Causes and fixes:

Workspace admin policy — your admin has restricted third-party app access. Ask the admin to allow BrandJet AI from the Workspace admin console under Security → API controls.
Wrong account on the consent screen — Google sometimes pre-fills your personal account when you wanted a Workspace one. Click Use another account.
2-step verification newly required — Google forced re-verification after the OAuth grant. Open Gmail in another tab, finish 2-step, then retry the connect.
Suspended or locked mailbox — Google will not return a token for suspended accounts. Resolve in Workspace admin first.

OAuth granted but unable to launch campaign

Sometimes the connect succeeds but the first campaign launch returns unable to send. Walk through this checklist:

Open the mailbox in Accounts → Email and click Verify. We send a small test message to ourselves to confirm SMTP works end to end.
If verification fails with insufficient permissions, the OAuth scopes did not stick. Disconnect and reconnect — the consent screen must include the Send scope checkbox.
If you increased your Workspace sending limit in admin, allow up to an hour for Google to apply it.

Switching from App password to OAuth

If you previously connected with an app password and want to move to OAuth, remove the old inbox first, then reconnect via Google. Reusing the same email address is fine, but the internal inbox ID changes — update any campaign that was sending from the old reference.

Revoking access

You can revoke BrandJet anytime from myaccount.google.com/permissions. Removing the mailbox in BrandJet also revokes the token automatically.

Google did not let me sign in

This is the most common error. Causes and fixes:

Workspace admin policy — your admin has restricted third-party app access. Ask the admin to allow BrandJet AI from the Workspace admin console under Security → API controls.

Wrong account on the consent screen — Google sometimes pre-fills your personal account when you wanted a Workspace one. Click Use another account.

2-step verification newly required — Google forced re-verification after the OAuth grant. Open Gmail in another tab, finish 2-step, then retry the connect.

Suspended or locked mailbox — Google will not return a token for suspended accounts. Resolve in Workspace admin first.

OAuth granted but unable to launch campaign

Sometimes the connect succeeds but the first campaign launch returns unable to send. Walk through this checklist:

Open the mailbox in Accounts → Email and click Verify. We send a small test message to ourselves to confirm SMTP works end to end.

If verification fails with insufficient permissions, the OAuth scopes did not stick. Disconnect and reconnect — the consent screen must include the Send scope checkbox.

If you increased your Workspace sending limit in admin, allow up to an hour for Google to apply it.