Move your email from Yandex Mail to FranklyMail
Yandex needs three things lined up: IMAP switched on, an app password, and the right username — which is the part before the @ on a personal account and the whole address on a business one. Every one of those failing produces the same error message, so it is worth doing them in order.
Which password Yandex Mail wants
An app password from Yandex ID. Yandex’s own setup instructions treat this as a required step and never offer the account password as an option, so make one regardless of what you have used before. It is not tied to two-factor authentication — Yandex’s current instructions do not ask for 2FA first.
Getting it, step by step.
Written against Yandex Mail's current screens — the words in quotes are the words on the buttons.
If you would rather skip the menus: https://id.yandex.com/security/app-passwords opens the right screen directly, in whatever language your account is set to.
- 1
Sign in to Yandex Mail in a browser first, then open mail.yandex.com/?dpda=yes#setup/client — the "Email clients" settings.
Signing in first matters: that address is a page fragment, so opening it while logged out just bounces you to a landing page.
- 2
Turn on "Use a mail client to retrieve your Yandex mail", pick "From the imap.yandex.com server via IMAP", and make sure "App passwords and OAuth tokens" is on. Save.
Both settings are on that one screen. Save before leaving it.
- 3
On a business account, an administrator also has to switch the protocol on for the whole organisation: admin.yandex.com, then Mail → Settings → "Use these protocols" → IMAP.
A regular user cannot do this and there is no deep link to that screen. Yandex recommends organisations keep the protocols off by default, so on a company account expect this to be the step that is missing.
- 4
Create the app password at id.yandex.com/security/app-passwords — find the App passwords section and make one of type Mail.
Yandex describes this screen two different ways in its own help, so look for the App passwords section rather than a particular button.
- 5
Wait. Yandex states the new password becomes active in two to three hours.
This is the single most likely reason an import fails minutes after you set it up. Nothing is wrong; the password is simply not live yet.
- 6
Then use imap.yandex.com, port 993, and the username rule for your kind of account — see the note below, because they are opposites.
What to put in the import form.
In the FranklyMail panel, open Mailboxes and find "Bring your old mail across".
imap.yandex.com- IMAP server
imap.yandex.com- Port
- 993 — TLS from the first byte.
- Username
- Your full address at Yandex Mail, not just the part before the @.
- Password
- An app password, from the steps above.
For the technically curious: on 24 August 2026 this server answered AUTH=PLAIN, AUTH=XOAUTH2 to a CAPABILITY command on port 993. That is what it accepts on the wire; which password it accepts from you is the separate question the section above answers.
What goes wrong with Yandex Mail.
- The username differs by account type and Yandex documents both. On a personal @yandex.com or @yandex.ru address it is the part before the @ — just the name. On Yandex 360 for Business with your own domain it is the full address. Getting this wrong looks exactly like a wrong password.
- One error covers five causes. The server answers "invalid credentials or IMAP is disabled" whether the password is wrong, the app password has not activated yet, IMAP is off for your account, or IMAP is off for the whole organisation. It cannot tell you which, so work down the steps above in order rather than guessing.
- On a business account every mailbox has to sign in to Yandex Mail on the web once before IMAP will work at all, because each person has to accept Yandex’s user agreement themselves. Yandex says plainly there is no way to do this for a whole domain at once — for a twenty-person migration that is twenty logins.
- Clicking "Log out on all devices" in Yandex resets every app password you hold. Doing it during a copy stops the copy.
- Yandex empties Trash after 30 days and Spam after 10. We skip both anyway, but if something you meant to keep is sitting in either, move it out before you start.
- The app password is shown once. If you lose it, delete that entry and make another — there is no way to read it back.
Then the part that is the same for everyone.
Getting the password is the only step that differs by provider. The order of the move, what does and does not come across, and the one decision that stops you ending up with two copies of every message are on the main migration page.
How the move worksMoving from somewhere else?
$9/yr, and your archive comes with you.
Unlimited mailboxes and aliases on your own domain, 10 GB pooled across the account, 30 days to change your mind.