

In place of a password, Tbird’s password vault stores some long cypher text or “token”, not the actual Google account passwords, despite the OAuth2 process prompting for passwords for the accounts that use a password for signing in. In ALL Gmail cases, Tbird doesn’t store the passwords. For those configured to use my phone, I’m not prompted for a password. I have multiple Gmail accounts configured on Tbird, some of them use a password for signing in while others use my phone to sign in. If you’ve configured your Google account for signing in using your phone (password-less), then you won’t be asked for a password during the OAuth2 process on Tbird. If your Google account is configured for signing in using a password, then you will be asked for the password during the OAuth2 process on Tbird. In addition, you can request for offlineaccess scope. Whether the OAuth2 process asks for your password or not, depends on which sign in method you’ve configured for your Google account. OAuth2 device authorization grant flow OAuth2 client credentials grant flow Make sure to specify the full scopes, including Outlook resource URLs, when authorizing your application and requesting an access token. Once you’ve entered your name and Gmail address, it automatically populates the incoming and outgoing server settings with Gmail’s imap and smtp settings. These instructions are for version of Thunderbird 77.0b1 or later, which supports OAuth2 modern authentication.

In Tbird’s case, when setting up a Gmail account, you need not provide a password. Click to expand.That’s not correct for Tbird and Gmail OAuth2.
