Yandex Mail Login and Access Problems

Applies to: Yandex Mail web, Yandex Mail app, Yandex Mail in third-party clients

Quick answer: Use "call me" instead of SMS if a verification code isn't arriving, enable IMAP access under Settings before connecting a third-party app, and generate an app password if two-factor authentication is on.

1. Stuck in a verification loop on sign-in

Yandex often adds an extra step — an SMS code or security question — when you sign in from a new device, browser, or location. If the code isn't showing up:

  1. Confirm the recovery phone number on file is current, checked from a device you're already signed into.
  2. Wait a few minutes before requesting a new code rather than spamming requests, which triggers a cooldown.
  3. Try "call me" instead of SMS if that option's there and the text isn't arriving.

2. Third-party app access blocked

Yandex restricts IMAP/SMTP access for third-party apps by default on a lot of accounts, as an anti-spam measure.

  1. Sign in on the Yandex Mail website.
  2. Settings → Email clients → confirm IMAP access is enabled.
  3. Two-factor on? Generate an app password specifically for the third-party client rather than using your main one.

Two specific settings need to both be turned on for a third-party app to actually work, not just one — "Use a mail client to retrieve your Yandex mail → From the imap.yandex.com server via IMAP" and, separately, "App passwords and OAuth tokens." Missing either one produces a login failure that looks identical to a plain wrong-password error, which makes it easy to miss which setting is actually the problem.

If you've done all of that and it still fails, and you're logged in fine through the web interface with no error shown there: this specifically means you haven't yet accepted Yandex's User Agreement, which happens automatically on your first web sign-in but is required before third-party client access works at all. On a business/organization domain, this has to be done individually for every single mailbox — there's no way to accept it in bulk for a whole domain. If several people on the same company domain are all hitting this, each of them needs to sign in through the Yandex Mail website once themselves.

3. "Suspicious activity" account lock

A protective measure, not necessarily a sign of a real breach — commonly triggered by signing in from a new country or unfamiliar network. Follow the account recovery flow on the sign-in page; it usually restores access within minutes once identity's confirmed.

4. Language confusion while troubleshooting

A lot of Yandex Mail settings pages default to Russian depending on your account region. Look for a language selector, often near the bottom of the page or in account settings, to switch to English if that makes things easier to navigate.

Be wary of any message urgently asking you to "confirm" your Yandex account via a link. Go directly to mail.yandex.com instead of clicking through from an email.
Signed in fine but mail won't send or arrive? See our guide on Yandex Mail not sending or receiving emails.