Connect a personal Gmail mailbox

Use this guide for a private @gmail.com account that will send as its own mailbox. This is a Personal / single mailbox connector: Lunar Paper locks the From address to the registered Gmail address.

For a Google Workspace organization that must send as several directory users, use a Workspace corporate connector instead. See Outbound email connectors.

Before you begin

You need:

• access to the Gmail account;
• Google 2-Step Verification enabled on that account; and
• permission for the Lunar Paper server to reach smtp.gmail.com on TCP port 465.

Do not enter the account’s ordinary Google password in Lunar Paper. Google SMTP authentication uses a dedicated app password for this setup.

Create the Google app password

1. Open Google Account Security and enable 2-Step Verification if it is not already enabled.
2. Open Google App Passwords.
3. Sign in again if Google requests it.
4. Enter an app name such as Lunar Paper.
5. Select Create.
6. Copy the generated 16-character password. Google shows it only once.

If App Passwords is unavailable, check whether:

• 2-Step Verification is disabled;
• the account uses Advanced Protection;
• 2-Step Verification is configured only with security keys; or
• a work, school, or other managed-account administrator has disabled app passwords.

Google documents these restrictions in Sign in with app passwords.

Configure Lunar Paper

Open Administration → Integrations → Email Configuration, then add or edit the connector with these values:

Field	Value
Connector type	Custom SMTP
Connector use	Personal / single mailbox
Sender address	The full Gmail address
SMTP host	smtp.gmail.com
Port	465
Connection security	Implicit TLS
Authentication	Password or API key
Username	The full Gmail address
Password or API key	The generated Google app password, without spaces

The sender address and username normally match. A friendly sender name and Reply-To address are optional.

Save the connector, select Verify authorization, and then send a test email. Provider acceptance confirms that Gmail accepted the submission; it does not prove that the recipient delivered or retained the message.

Corporate proxy testing

When the connector’s network route uses an HTTP proxy, the proxy must permit a raw CONNECT smtp.gmail.com:465 tunnel. A normal web-only policy often allows only destination port 443; in that case its HTTPS profile test can pass while Gmail SMTP returns a connection error.

Allow only the required Gmail destination and port, and do not perform HTTP or TLS-content inspection inside the SMTP tunnel. In Lunar Paper, keep the connector’s smtp:{connector-id} route assigned to the reviewed proxy profile. See Network proxy administration.

If the proxy cannot permit port 465, use Gmail submission on port 587 with STARTTLS required only when that port is allowed by the same reviewed proxy policy. Do not change the configured port merely because another port is on the proxy allowlist.

Rotate or revoke access

Create a new Google app password, replace the password in Lunar Paper, save, and verify before revoking the old app password. Google also revokes app passwords when the main Google Account password changes. Remove unused app passwords from the Google Account security settings.

Never place an app password in documentation, screenshots, logs, support tickets, workflow fields, or proxy configuration.