Desktop email clients need your login credentials etc. Security risk?

[shmu26]

When you install an email client, and it gets a whole long list of permissions to Gmail or other email provider, what security risks are involved?
For instance, if you uninstall the program and move on, maybe they still have your gmail password?

 

[Aleeyen]

Gmail and most other email provides now use OAuth. Using OAuth is much more secure as passwords are not stored by the email client, OAuth just allows the client to access the emails etc. But all email providers donot use this, so there is a problem. Also, email clients have a database file stored in the system, if you ever uninstall an email client then, don't forget to delete this database file.

 

[Daljeet]

When you allow any app to access your Gmail they can view our email no doubt. Afer you revoke access than app no more able to see your Gmail. Any type of app which has authority can store your information they can use your information as well. The app which is allowed by the user doesn't know how they store information (encrypted or not). Gmail gives some authentication to a particular app and allowing untruthful app is a big security risk. Whenever your revoke access than Gmail doesn't allow the particular app anymore.
Some app needs less account info and some apps like email client need full access to your account. I suggest if you're using any app revoke especially email client apps. Note: email client has authority to send delete and read your emails your contacts and maybe google drive.

 

[shukla44]

Best way for gmail is (this is the way i do it) to enable 2-step authentication & enable app passwords for email clients. That way when you remove your email client & revoke their access, all they got left with is your email address & some random password.