Back to Community Threads
Build 9735 - regarding pswd
Question asked by Vince - 8/28/2026 at 5:29 AM
Answered
V
Hi,
If 2fa is not used and only passwords for accounts, will users be prompted via a window as described in the update notes and have to change their passwords before being able to log in? This is for the Build 9735 update
L
Luk Replied
8/28/2026 at 7:44 AM
Hi, 
For users without 2FA, nothing will change, they will log in normally after the update.
Regards, 
Luk
Derek Curtis Replied
8/28/2026 at 10:43 AM
Employee Post
Exactly as Luk said: App Passwords are only used with 2FA is enabled for a user, and they have their accounts set up in clients on desktop or mobile. Standard webmail passwords are unaffected (even WITH 2FA as that is handled, generally, by passkey, authenticator app, or recovery email address) nor are any passwords for users who do NOT have 2FA enabled. 
Derek Curtis
CCO
SmarterTools Inc.
Sébastien Riccio Replied
8/28/2026 at 11:00 AM
Not upgraded yet, but I have a small question:

  • IMPORTANT: App Passwords were regenerated to a new security scheme. Anyone using App Passwords created prior to Build 9735 will need to enter a new App Password in order to use any 2FA-enabled account in a desktop or mobile client.
If I understand correctly, after installing the upgrade the 2FA users with app passwords (most of them I guess) will have to reconfigure their desktop/mobile clients before being able to access their mail again from their devices ?

Is there a way to know easily know system-wide which users are actually using 2FA (therefore app passwords on mobile clients) ? I think we have to inform those users before doing the upgrade...
Sébastien Riccio
System & Network Admin
Brian Replied
8/28/2026 at 11:13 AM
What about 2FA for the administrator account?
Tim Uzzanti Replied
8/28/2026 at 11:23 AM
Employee Post
Sebastien,

This build should be installed immediately to protect your server.  There is another thread where one of our employees provided a script to see all the domains and users who use 2FA. 
Tim Uzzanti
CEO
SmarterTools Inc.
Tim Uzzanti Replied
8/28/2026 at 11:24 AM
Employee Post Marked As Answer
Brian,

System administrators don't have a mailbox; therefore, there are no App Passwords.
Tim Uzzanti
CEO
SmarterTools Inc.
Sébastien Riccio Replied
8/28/2026 at 11:25 AM
BTW It's seems to me that app passwords are automatically generated and that you can view them.

For the upgrade to be transparent for the users, couldn't we export the apps passwords before the upgrade for users with 2FA and set them back after the upgrade ?

That would avoid a LOT of support tickets post-upgrade...
Sébastien Riccio
System & Network Admin
Sébastien Riccio Replied
8/28/2026 at 11:27 AM
Hello @Tim Uzzanti 

Sebastien,
This build should be installed immediately to fully protect your server.
Yes, I'm working on it at the very moment but I must take everything into account to avoid a catastrophic flows of tickets and also be sure our control panel reflects the API changes introduced in previous build...

Kind regards
Sébastien Riccio
System & Network Admin
Back to Community Threads

Reply to Thread

Enter the verification text
Related Knowledge Base Articles
SmarterTools Licensing InformationGeneral Topics
Migrate SmarterMail to a Different ServerSmarterMail > Installation and Configuration
How an Email is Processed in Current SmarterMail BuildsSmarterMail > Server Configuration and Management
Key Feature and Version Milestones in SmarterMailSmarterMail
Attaching SmarterMail 16.x and Older Domains to New BuildsSmarterMail > Domain/User Configuration and Management