Domain administrators can enable security passwords to protect third-party client access to Alibaba Mail.
Standard email protocols (IMAP/POP/SMTP) support only account-and-password authentication. Any third-party client, such as Outlook or Foxmail, can access a mailbox using these protocols.
Enable security passwords to add a dedicated credential layer when employees access mailboxes through third-party clients.
What is a third-party client security password?
A third-party client security password is a separate credential used exclusively to log on to Alibaba Mail from third-party clients.
Procedure
1. Log on to Alibaba Mail as the postmaster. In the domain management console, choose Security Management > Account Security Policy.
2. Turn on Force Enable Security Password. Set the scope to All Members or Only specified departments and accounts. To add exceptions, click Add Exception > Open Selection Box, then select the departments or accounts.
3. Click Save in the upper-left corner.

4. After you enable Force Enable Security Password, employees must generate a security password on the web client before they can log on to third-party clients. How to enable and use secure passwords for third-party clients.