Skip to main content

Tencent Mail (@qq.com / @foxmail.com) · Authorization Code

Tencent Mail (@qq.com / @foxmail.com) = one of the largest user bases in China. Binding to Laifaxin requires 2 mandatory steps:

StepContentRequired
1️⃣ Enable IMAP/SMTP in webDisabled by default — manually enable in web Settings → Account✅ Required
2️⃣ SMS-verify to generate 16-digit authorization codeFor Laifaxin (NOT QQ login password)✅ Required

→ Fill the password field with the 16-digit authorization code (NOT your QQ login password), otherwise it fails 100% of the time.

⚠️ QQ login password absolutely cannot be used

Tencent Mail mandates third-party clients to use authorization codes — binding with your QQ password directly will return 535 Authentication failed.

Authorization code = 16-digit standalone password, far more secure than the QQ main password (leak doesn't affect QQ main account).


1. Server Parameters​

TypeServer AddressSSL Port
📥 IMAP (Receive)imap.qq.com993
📤 SMTP (Send)smtp.qq.com465

Encryption: SSL / TLS

💡 @qq.com and @foxmail.com are exactly the same

Foxmail mailbox (@foxmail.com) is QQ Mail's "alias" — share the same backend:

  • Server parameters identical
  • Authorization code flow identical
  • One QQ account has both @qq.com and @foxmail.com addresses

2. Get the 16-Digit Authorization Code​

1. Go to Web Settings → Account​

Log into QQ Mail web → top Settings → switch to Account tab:

QQ Mail · Enter account settings: top Settings button → switch to Account tab

2. Enable IMAP/SMTP Service​

Scroll down to find POP3/IMAP/SMTP/Exchange/CardDAV/CalDAV Service → click Enable button:

QQ Mail · Enable IMAP/SMTP service: in Account page, find the protocol service area, click "Enable"

3. Complete Security Verification​

Tencent requires SMS verification to enable the service. Following the prompt, use your bound phone number to send the specified SMS:

QQ Mail · SMS verification: popup shows the SMS content and destination number to send

After sending, click I've sent:

QQ Mail · Confirm sent: after SMS sent, click "I've sent" to continue

Some accounts also need WeChat scan-code secondary verification:

QQ Mail · WeChat scan secondary verification: popup shows QR code, scan with bound WeChat to confirm

4. Get and Copy the 16-Digit Authorization Code​

After verification, the system generates a 16-digit authorization code → click Copy to save immediately:

QQ Mail · Authorization code generated: 16-digit code shown in popup, click Copy to save immediately

⚠️ Copy and save the authorization code immediately

Authorization code is shown only once — once you close the popup, you can never see it again. Immediately copy and save to a password manager (1Password / Bitwarden).

If lost, you can only regenerate a new authorization code on the settings page.


3. Bind in Laifaxin​

Go to Laifaxin Email Account and add QQ / Foxmail mailbox:

FieldFill With
Email addressyour@qq.com or your@foxmail.com
Password⚠️ Paste the 16-digit authorization code (NOT QQ login password!)
IMAP serverimap.qq.com · port 993 · SSL
SMTP serversmtp.qq.com · port 465 · SSL

Laifaxin binding Tencent Mail: password field with the 16-digit authorization code you just generated (NOT QQ login password)

After binding succeeds, status shows Normal:

Tencent Mail bound successfully: email account list shows this QQ mailbox status as "Normal", can send/receive normally

After binding, enable email sync + notifications (see Check New Emails).


📋 Pit-Avoidance Summary​

PitConsequenceHow to Avoid
🔴 Bind with QQ login password535 Authentication failedMust use 16-digit authorization code (generated in web settings)
🔴 IMAP/SMTP service not enabledBinding fails (disabled by default)First enable service in Settings → Account before binding
🔴 SMS verification failsCan't enable serviceUse bound phone number + content exactly as prompted (case-sensitive)
🔴 Forget to copy the generated authorization codeClosed popup, can never see againImmediately copy to password manager
🟡 Bulk-send via QQ MailRisk-controlled / throttled within 24hPersonal mailboxes are for 1-on-1 only; for bulk, use a Quality Channel
🟡 Changed QQ password / disabled IMAP/SMTPLaifaxin uses old code, send failsRegenerate authorization code, then re-sync in Laifaxin
🟡 Multiple clients share same authorization codeHard to invalidate individuallyGenerate one per client

❓ FAQ​

Q1 · What is "authorization code"? Why can't I use my QQ password?​

Authorization code = Tencent Mail's dedicated 16-digit password for third-party clients.

Dimension🔓 QQ Main Password🔑 Authorization Code
PurposeLog into QQ / QQ Mail webFor third-party clients
Quantity1Can generate multiple
Invalidation controlChange = all apps disconnected + QQ also changesCan invalidate alone, QQ main account unaffected
Leak riskMain account at riskOnly that app affected
Tencent policy❌ Not allowed for third-party clients✅ Mandatory

→ Safer + compliant, mandatory requirement.

Q2 · I previously enabled IMAP — do I need to re-fetch the authorization code?​

Depends on whether you remember the old one:

SituationAction
✅ Remember the authorization codeReuse directly, no need to regenerate
❌ Forgot the authorization codeGo to Settings → Account, disable then re-enable service → generate new code
⚠️ Suspect leakSame as above — regenerate new code (old one auto-invalidates)

Q3 · Are @qq.com and @foxmail.com configuration flows the same?​

✅ Exactly the same. Foxmail is QQ Mail's "alias":

  • Same QQ account
  • Same backend + servers (imap.qq.com / smtp.qq.com)
  • Same set of authorization codes (generate once, both mailboxes use it)
  • Same security policy

Only difference: email suffix (@qq.com vs @foxmail.com).

Q4 · How many emails can QQ Mail send per day?​

QQ Mail doesn't officially disclose its cap, but we strongly discourage heavy sending:

StageDaily VolumeNotes
🐣 Week 1 (newly bound)Start at 505-10 min between sends, avoid risk control
🐤 Weeks 2-4100-200Watch for anomalies
🦅 Stable phaseMax 300Don't max out

→ Never "bulk send" at any stage! Bulk = 100% triggers risk control — QQ Mail's risk control is especially strict.

For real bulk sending, use a Quality Channel:

  • ✅ Doesn't bind your QQ Mail, no risk of suspension
  • ✅ ¥0.007 per email, system auto-throttles + random template variations

Q5 · Do I need a VPN to send/receive QQ Mail?​

❌ No. QQ Mail is a domestic service — stable and fast access from China.

Q6 · Is QQ Mail suitable for foreign-trade development?​

ScenarioSuitabilityNotes
🤝 1-on-1 customer follow-up❌ Not recommendedOverseas customers trust @qq.com extremely low (numeric mailboxes look spammy)
📩 Inquiry replies⚠️ LowSame as above, but impact smaller when replying
🚀 Bulk cold emails❌ Not suitableOverseas mail providers often flag @qq.com as spam directly
📧 Multi-round auto follow-up❌ Not suitableUse Smart Follow-up Plan + Quality Channel

Foreign-trade verdict: QQ Mail is OK for domestic trade; for foreign trade, must use Gmail / Outlook / own-domain business mailbox.

Q7 · Lost authorization code / want to rotate — what now?​

StepAction
1️⃣Go to QQ Mail web Settings → Account
2️⃣Find the IMAP/SMTP service area → Disable service
3️⃣Re-enable service → SMS-verify → generate new authorization code
4️⃣In Laifaxin Email Account update password + verify save

⚠️ Note: Disabling service invalidates all clients immediately — you'll need to rebind everywhere after re-enabling.


💡 Learning Tips​

StageTip
🔑 One authorization code per client1 for Laifaxin, 1 for Foxmail, 1 for Thunderbird — for precise invalidation
🔐 Safeguard the authorization codeUse a password manager (1Password / Bitwarden); if lost, only regeneration works
📋 Regular auditQuarterly check QQ Mail Account → enabled clients, disable unused ones
🚫 Never share the authorization codeAuthorization code security level equals password
⚙️ Pair with Laifaxin featuresOnce bound, play with Email Tracking / Templates / Smart Follow-up
🚀 Bulk-send via Quality ChannelQQ Mail risk control is strict — for bulk always use Quality Channel
🌍 Use enterprise mailbox for foreign tradeQQ Mail not suitable for foreign trade — use own-domain business mailbox or Gmail / Outlook

TopicLinkDescription
📨 Email Account Configurationemail-accountBinding flow + error code troubleshooting table
📮 Personal Mailboxes100-gerenyouxiang-personal-mailbox16 Major Mailboxes Quick Reference
🏢 Tencent Enterprise Mailbox205-tengxun-qiyeyouxiang-tencent-enterprise-mailboxOwn-domain version (foreign-trade recommended)
NetEase Mail (@163.com)107-wangyi-163youxiang-netease-personal-emailAlso uses authorization code
Sohu Mail (@sohu.com)105-souhu-sohuyouxiang-sohu-personal-emailSimilar authorization mechanism
Apple iCloud Mail113-pingguo-icloudyouxiang-apple-personal-emailInternational mailbox (App-specific password)
📬 Check New Emailscheck-new-emailsAfter binding, enable sync + notifications
🚀 Email Mass Sendingemail-mass-sendingBulk via Quality Channel (doesn't bind QQ Mail)

📱 Issues with configuration?

Scroll to the bottom of this page, scan the support WeChat QR (in footer) for one-on-one help — immediate response during work hours, replies first thing next morning if after hours.


📖 About Tencent Mail (@qq.com / @foxmail.com)​

What is Tencent Mail?​

Tencent Mail (QQ Mail) is the free personal email service launched by Tencent in 2002 — one of the largest user bases in China. Provides large attachments, email archiving, calendar, and more.

Tencent Mail main suffixes:

Email SuffixSource
@qq.comQQ number + suffix (e.g. 123456789@qq.com) or custom English account
@foxmail.comFoxmail mailbox (Tencent acquired Foxmail and integrated)
@vip.qq.comQQ VIP users only

→ All Tencent mailboxes share the same backend, configuration flow is identical.

Why does Tencent Mail need an authorization code?​

Tencent security policy:

  • Third-party client login cannot use QQ password — must use the dedicated 16-digit authorization code
  • Enabling IMAP/SMTP requires SMS verification; some accounts also require WeChat scan secondary verification
  • Authorization codes can be generated and disabled individually — leak doesn't affect QQ main account

→ Now, binding QQ Mail to any third-party client requires a 16-digit authorization code.

Security hardening recommendations:

RecommendationNotes
Enable SMS login protection on QQEven password leaks require SMS code
Use QQ Security Center AppCritical action popup confirmation, prevents theft
Rotate QQ main password regularlyEvery 6 months
One authorization code per clientInvalidate alone, others unaffected

QQ Mail vs Foxmail Mail​

Many don't know these are actually the same mailbox:

Dimension@qq.com@foxmail.com
HistoryTencent in-house (2002)Tencent acquired Foxmail in 2005
UnderlyingSame systemSame system
Serverimap.qq.comimap.qq.com (same one!)
Authorization codeSame (generate 1, both work)Same
Address style123456789@qq.com (QQ number + suffix) / custom EnglishUsually custom English
User impressionNumeric leaningMore professional leaning

→ For a more professional impression with customers, @foxmail.com looks better than @qq.com (though technically they're the same mailbox).

Is QQ Mail suitable for foreign-trade development?​

1-on-1 follow-up / inquiry replies ❌ Not recommended:

  • Overseas customers trust @qq.com (numeric + domestic mailbox) extremely low
  • Emails frequently land in overseas spam
  • Using @qq.com to actively prospect overseas customers = very high failure rate

Bulk cold emails ❌ Completely unsuitable:

  • QQ Mail risk control is especially strict (the most aggressive anti-spam among domestic mailboxes)
  • High volume in short time → temporary suspension / permanent restriction
  • Overseas mail providers reject directly / go to spam

Foreign-trade verdict:

  • 🤝 Domestic comms / personal use → QQ Mail works
  • 🌐 Foreign-trade development → Must use Gmail / Outlook or own-domain business mailbox
  • 🚀 Heavy cold email → use a Quality Channel (doesn't bind QQ Mail)
  • 💼 B2B professional image → strongly recommend Tencent Enterprise Mailbox (own domain)

🔗 Permalink: https://laifa.xin/youxiang/106-tengxun-qqyouxiang-tencent-personal-email