Connect Gmail or Google Workspace

Of all the providers, Gmail is the easy one.

Google offers a sign-in flow built for exactly this, Google has assessed us for it, and you won't have to generate or copy anything.

The video shows the whole thing. Below it, each step has its own screenshot, and after that comes what each permission on Google's screen lets us do.

How to connect Gmail to MorningZero

Start in MorningZero

1. Click Add inbox on the "Got another inbox?" bar at the top of your list. + Add new inbox in the inbox switcher, or Settings, Add account, gets you to the same place.

   

2. In Connect a mailbox, pick Gmail. The small "sign-in" next to it means there's no password form for this one.

   

3. Click Continue with Gmail. As the dialog says, you'll sign in with Gmail and come straight back. In the desktop app, Google's page opens in your system browser.

   

Sign in with Google

4. Pick the Google account you want to add. If it isn't listed, choose Use another account.

   

5. Google shows what it will share with us to sign you in: your name, profile picture and email address. Click Continue.

   

6. Next is the screen that matters: Select what MorningZero can access. Tick Select all, so both boxes are ticked, then click Continue. What each box allows is in the table further down.

   

Set up the inbox

Back in MorningZero, Zero asks seven short questions, one at a time.

It starts reading your mail while you answer, and every answer saves as you go, so there's no Save button to look for at the end. Number keys work too, if you'd rather not click.

7. What should I call this inbox? We suggest names from your address. The name becomes the tag on every email from this inbox.

   

8. Pick its colour, then And an icon. Both just help you tell inboxes apart at a glance.

   

9. What's this inbox for? Work, My business, Client work or Personal. Zero reads every email here with this in mind when it decides what needs you.

   

10. Here's what I found. You'll see how many emails it has read so far and a one-line summary of how it'll read the inbox. You can edit that line. Click Looks right.

    

11. When you mark something Done, archive it in Gmail too? Pick Yes, clear it from my Gmail inbox or No, leave it in Gmail. Nothing is deleted either way, and we add a MorningZero/Done label in Gmail so you can find what you cleared from any app.

    

12. Should your labels show up in Gmail too? With Yes, keep them in sync, labels you make in MorningZero appear as Gmail labels. With No, they stay in MorningZero.

    

13. That's it. The new mail arrives already sorted, each message carrying the inbox's tag. Mail from the last three days sorts first, in about a minute, and the rest of your import window fills in behind it.

    

Steps 5 and 6 are two different Google screens, and it's worth knowing which is which. The first is Google's standard sign-in summary: your name, picture and address, which every Sign in with Google app sees. The second is the real mailbox access, and it's the one you can come back to later and revoke.

What each line on the consent screen means

Permission	What it lets us do
See your name and email	Identify you and keep your mailboxes attached to one account
Read, compose, and send emails from your Gmail account	Read and label mail, archive, mark read, send the replies you press Send on. This is Google's wording for the gmail.modify scope. It excludes permanent deletion, which we never ask for
View and edit events on all your calendars	Show your agenda, create events you ask for, RSVP

That's the whole list. If you untick the calendar box, mail still comes in, and the inbox shows "Calendar access isn't authorized" with a Reconnect button for whenever you want it.

There's no contacts scope, no Drive and no settings, and the security page describes the same scopes.

If the screen shows an "unverified app" warning, please stop there and tell us. Our verification is on record with Google, so that warning shouldn't appear.

If Workspace says the app is blocked

Some Workspace organisations only let people use apps an admin has approved. If yours is one, Google stops you on the consent screen and says the app is blocked or needs admin approval.

Nothing on our side gets past that. Your admin allows MorningZero once, and then everyone they chose can connect.

What to send your admin

MorningZero, by Serveka Technologies, requests gmail.modify and calendar.events for the connecting user only. It has completed Google's CASA security assessment for those scopes.

Access is per user and revocable by the user or the admin at any time. Data handling is described at morningzero.com/security.

How your admin allows MorningZero

It takes about a minute in the Google Admin console.

1. Sign in at admin.google.com and open Security in the left menu.

   

2. Under Access and data control, click API controls.

   

3. In the App access control box, click Manage app access.

   

4. Next to Configured apps, click Configure new app.

   

5. Search for MorningZero and pick it from the results. It should carry Google's Verified badge, and its client ID starts with 570281944676.

   

6. Choose who it's for. All in your organisation covers everyone; Select org units limits it to some teams. Click Continue.

   

7. Under Access to Google Data, pick Specific Google data. Google fills in exactly what we ask for: Gmail, Calendar and Google Sign-in. Click Continue.

   

   Trusted works as well, but it lets an app ask for any Google service. Specific Google data keeps MorningZero to the three it uses, which is usually what a security review wants to see.

8. Check the summary and click Finish.

   

9. MorningZero now shows in Configured apps, and Google confirms "Access setting configured for MorningZero". Tell your team to try connecting Gmail again.

   

Taking access back

You can do this from either side. In MorningZero, go to Settings, the mailbox, Disconnect. Its messages, labels, rules, drafts, conversations and learned preferences are deleted in one transaction, and our token is revoked at Google.

At Google, open your Google Account, Security, then the third-party apps and services connections page. Find MorningZero and remove its access. We lose access at once, and you don't have to ask us.

When another app wants a Gmail app password

You don't need one for MorningZero, and Google says you rarely need one at all:

App passwords aren't recommended and are unnecessary in most cases. To help keep your account secure, use "Sign in with Google" to connect apps to your Google Account.

Some apps can't do Sign in with Google, though.

If one of them asks you for an app password, here's how to make one.

1. Turn on 2-Step Verification for the account first. App passwords don't exist without it.
2. Go to myaccount.google.com/apppasswords, name the app, and generate.
3. You get a 16-digit passcode, shown once. Paste it into the app as its password.

Google won't offer app passwords if the account has Advanced Protection, if 2-Step Verification uses only security keys, or if it's a work or school account and the admin has disabled them.

And if you type a Gmail address into one of our app-password forms, we refuse it and point you at the Gmail tile.

Sources

• App password prerequisites, format and exclusions, and the "not recommended" guidance: Google Account Help, "Sign in with app passwords", read 20 September 2026.
• Consent-screen wording for gmail.modify: Google's Gmail API scopes reference, read 26 September 2026.
• Admin console steps and access levels: Google Workspace Admin Help, "Control which third-party and internal apps access Google Workspace data", read 1 October 2026.