When connecting email accounts to Thunderbird, I've checked remember this password option.
But after a few weeks of password reentering-free life, it asks for the passwords yet again, out of the blue.

Is this sort of expiration a normal thing and can I safely re-enter the passwords?
Or perhaps it is some form of Man-in-the-middle attack?

The accounts I've been asked to re-authenticate to are Gmail.
Other work just fine.

I'm using Ubuntu-ish OS, haven't changed a thing, haven't moved to a different location (IP change), haven't even unplugged my setup. The only change is installing updates on a daily basis.

migrated from security.stackexchange.com Jul 9 '17 at 15:27

This question came from our site for information security professionals.

  • 1
    Potentially relevant after Googling "Thunderbird gmail remember this password": support.mozilla.org/en-US/questions/1086835 – schroeder Jul 7 '17 at 14:57
  • So, yes, MitM: but it's Gmail – schroeder Jul 7 '17 at 14:57
  • 1
    Thanks for the link. The clue is "The token will expire at some point, so you'll have to renew it in the future.". If I got it right, that is the reference confirming this, along with expiration cause: "The user account has exceeded a certain number of token requests." – vucalur Jul 9 '17 at 11:04
  • Do you want to convert it to an answer somehow, or should I do that? – vucalur Jul 9 '17 at 11:07
  • If that's the case, this is actually off-topic here. I'll migrate to SuperUser and you should answer yourself. – schroeder Jul 9 '17 at 15:27

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.