Which Apps Have Access to Your Google Account and Gmail?
The short answer
Open myaccount.google.com/permissions while signed in. It lists every app you have linked to your Google account, with the access each one holds. Select an app to read its permissions and remove any you no longer use. Apps that connect with an App Password are listed separately at myaccount.google.com/apppasswords.
Open myaccount.google.com/permissions to see every app connected to your Google account and Gmail, what each permission allows, and which to remove.
On this page
To see which apps have access to your Google account and Gmail, open myaccount.google.com/permissions while signed in. Google's help pages link the same list as myaccount.google.com/linkedapps, so if one address does not load, try the other. Most people approve these apps during a signup flow and never look again, so a review of about five minutes usually turns up a few that should go.
Quick check: the address is myaccount.google.com/permissions, the row to open is Access to your Google Account, and the first things to remove are apps you no longer use that hold full or modify access to your mail.
How do I check which apps have access to my Google account?#
- 1
Open myaccount.google.com/permissions
Type the address into any browser. You do not need to be in Gmail first. If you are signed into more than one Google account, check which one is active in the top-right corner before you start: the list belongs to that account only, and it is easy to audit the wrong one.
- 2
Choose the right list
Google splits linked apps into sections. In Google's current help, apps that can see or change your account data sit under Access to your Google Account, and apps you only log into with a Google button sit under Sign in with Google. Start with Access to your Google Account: that is where any app with Gmail permissions appears. Scroll to the bottom, because apps you connected years ago sit further down.
- 3
Select each app and read its access
Select an app, then See details. The detail view lists what the app can do with your account in plain English. Compare it with the permissions table below to judge whether that access fits what the app does for you.
- 4
Flag the ones to remove
Flag apps you no longer use or do not recognise, apps holding more access than their job needs (a summarizer with send access is a common one), and apps from a company that has since been acquired or shut down.
- 5
Remove access
Under Access to your Google Account, select Remove access, then Confirm. Some screens word the button differently, for example Delete all connections. Removing access stops the app from reaching your account from then on. It does not delete data the app already copied, so for that you contact the app's provider.
- 6
Check App Passwords too
Apps that log in with a Google App Password do not appear in the linked-apps list. Open myaccount.google.com/apppasswords to see them (the page asks for 2-Step Verification to be on), and remove any you do not recognise. See the section on missing apps below.
What do Gmail app permissions allow?#
The access an app holds depends on the scope it asked for. The labels below follow Google's Gmail API scope documentation, and the wording on your screen can vary by app and by how its developer registered the request. Sign in with Google is a different, much smaller grant, so it is in the table too.
Apps can request several scopes at once, so read the whole detail view rather than the first line.
| Scope (Google's description) | What the app can do | Risk level |
|---|---|---|
| mail.google.com: Read, compose, send, and permanently delete all your email | Read and send mail, change it and permanently delete it, bypassing the trash | Highest: close to full control of the mailbox |
| gmail.modify: Read, compose, and send emails | Read every message, send mail, move and label messages, and trash them, but not delete them permanently | High: full read and send access |
| gmail.readonly: View your email messages and settings | Read every message and your Gmail settings, but not send, delete or change anything | Moderate: can see everything, cannot act |
| gmail.send: Send email on your behalf | Send messages in your name, with no access to read your existing mail | Moderate: cannot read your mail, can send as you |
| gmail.compose: Manage drafts and send emails | Create and manage drafts and send email | Moderate: can send as you |
| gmail.metadata: View email message metadata | Labels and headers only, not the message body | Low: cannot read email content |
| Sign in with Google (openid, email, profile) | Your name, email address and profile picture, used to log you in. No mailbox access | Low: not a Gmail permission |
Full-mailbox access deserves the quickest review
Which apps should I remove first?#
Work in this order. First, apps holding mail.google.com or gmail.modify that you no longer use. Second, apps that can send as you (gmail.send or gmail.compose) and that you do not recognise. Third, anything you granted more than two years ago and cannot explain. Sign in with Google entries come last: they carry no mailbox access, so removing one only stops automatic sign-in to that app.
If an app is still useful but wants more than it needs, remove it and reconnect only if its consent screen lets you approve a narrower set of permissions. Many apps ask for a fixed set and will not work without all of it.
How does the view differ on phone and work accounts?#
The web address works in any browser on any device, and it is the most reliable route. The Settings app on Android and the Google app menus lead to the same Google Account security area, but the labels change between versions, so on a phone it is simplest to open the web address in a browser. The Gmail app does not need to be involved at all.
Google Workspace accounts have two layers. The page above lists only the apps you personally authorized. Your administrator controls which apps may connect at all from the Admin console, under Security > API controls > App access control (see Google Workspace API access control). If your organization restricts third-party apps, you may see fewer apps than you expected, or find a new connection blocked before it completes.
What if the list does not show what I expect?#
Two situations come up in most audits: an app you cannot account for, and an app you know uses your Gmail that is not listed.
A missing app often connects with an App Password rather than the Google sign-in flow. Many email clients work this way over IMAP and SMTP. These credentials do not appear in the linked-apps list. Open myaccount.google.com/apppasswords and revoke any you do not recognise or no longer use.
For an unfamiliar app in the list, check three things before removing it. The name shown is sometimes the developer's internal product name rather than the brand you know. Automation tools and business apps often connect under their own developer name. And the grant date, where shown, helps place it. If none of that explains it, remove the access and watch which connected service stops working. For the full removal walkthrough, see how to revoke an app's access step by step, and for what each permission means in depth, see what Gmail OAuth permissions mean.
An app you never authorized is a security incident
Does AI Emaily show up in this list?#
Yes. AI Emaily connects Gmail through Google sign-in, so it appears under Access to your Google Account like any other app, and you can see and revoke it there at any time. To run the mailbox, it requests gmail.modify (read, compose, send, label and trash, but no permanent delete) plus calendar.events for calendar sync, along with the basic sign-in scopes. Check the consent screen on your own account for the exact list.
Treat that the way you would treat any app: it holds broad mail access, so connect it only if you want an assistant working in your mailbox. We build AI Emaily, and in Copilot mode you approve every send. If you want to see how it works, there is a 7-day free trial on Pro or Autopilot.
Frequently asked
See it in AI Emaily
Keep reading
Sources
Written by
Nafiul HasanNafiul Hasan is an entrepreneur and AI automation system builder with 10+ years of experience turning messy, manual workflows into reliable automated systems. He designs and ships AI enterprise solutions end-to-end — the agent logic, the data plumbing, and the product people actually use — and founded AI Emaily to give busy professionals their attention back. He writes here from the builder's seat: what works, what breaks, and how to put AI to work without giving up control.