How to Auto-Sort Gmail Into Folders Without Giving Up Mailbox Access
Last updated: August 20, 2026
Almost every tool that promises to auto-sort your Gmail into folders opens with the same screen: a Google consent dialog asking to read, compose, send and permanently delete all your email. Most people click through it. This page is about what that screen actually grants, and the two ways to get automatic sorting without ever seeing it.
What the consent screen is actually asking for
Gmail access isn't one switch. It's a set of scopes, and they differ enormously in what they permit. The four that matter:
| Scope | What it grants |
|---|---|
gmail.readonly |
Read all mail and settings. No changes. |
gmail.labels |
Create, edit and delete labels, but not read messages. |
gmail.modify |
Read everything, plus label, move, archive and mark. No permanent delete. |
mail.google.com |
Full control, including permanent deletion and sending as you. |
Here's the part worth internalising: anything that files your mail
into folders on the server needs at least gmail.modify.
That isn't a red flag or sloppy engineering; moving mail is the
product, and you cannot move mail you can't modify. When a triage service
asks for it, it's asking for exactly what it needs.
The distinction that actually matters is not how alarming the consent
screen reads. It's this: does the tool hold a live token to your mailbox,
and is your mail processed on a machine you don't control? A tool holding
gmail.modify has standing access that persists until you
revoke it, whether or not you're using the product that day.
Option 1: Gmail's own filters
The most overlooked answer. Gmail filters involve no third party at all: they run inside your account, so there's no token to grant and nothing to revoke.
Open Settings › See all settings › Filters and Blocked Addresses › Create a new filter, match on sender, subject or keyword, and combine Apply the label with Skip the Inbox. The message bypasses your inbox entirely and lives under its label. That is filing, functionally.
It's also the only option here that works on your phone, because the sorting happens in your Google account rather than in a browser. If cross-device matters at all, start here. The full walkthrough and its limits are in how to organize Gmail into folders automatically.
Where it runs out: one flat label per filter, no rule ordering, no if/then nesting, no suggestions, and no preview of what a new filter would catch. Build thirty of them and maintaining the set becomes its own chore.
Option 2: sorting in the browser, with no account access
The second approach is to sort mail where it's already been delivered, in the rendered page. Gmail has already fetched and displayed your message list in the tab; a browser extension can read that list and organise it locally without asking Google for anything.
That's how Email Elysium works. There is no OAuth grant, no scope, no consent screen; it requests nothing from Google at all, so it never appears on your Google Account permissions page, because there's nothing to appear. The rules engine, the folder tree, and the analytics all run in your browser, and the free tier makes no network requests whatsoever.
The structural consequence is worth stating clearly: because it holds no API access, it cannot send, delete or modify your mail. Not "does not" as a policy commitment, but cannot, as a matter of what it was never granted.
What you give up by sorting locally
This is the honest cost, and for a lot of people it's disqualifying.
- No mobile. Nothing is written back to your Google account, so the folder tree doesn't exist in the Gmail app on your phone. If you triage mostly on a phone, this approach is simply the wrong tool and a server-side service like SaneBox is the right one.
- No IMAP or Outlook. Same reason.
- Per-machine setup. A second computer needs the extension installed too.
- Gmail on the web only. It's a browser extension; it needs a browser.
What you get in exchange is that no third party ever holds standing access to your mailbox, and no copy of your mail is processed anywhere but your own machine.
Audit what you've already granted
Regardless of which option you pick, this is worth five minutes. Go to myaccount.google.com/permissions (opens in new tab). It lists every third-party app connected to your Google account and the access each one holds.
Most people find services they signed up for years ago and forgot, still holding read access to everything. Revoking is immediate. Note that revoking access does not delete data an app already stored. For that you need to ask the provider directly, which is a separate request.
Auto-sort Gmail into nested folders, no permission to grant.
Add to Chrome, free (opens in new tab) No Gmail permission. No account required. Privacy policy.FAQ
Can you auto-sort Gmail without giving an app access to your account?
Yes, two ways. Gmail's own filters need no third-party access because they run inside your account. And a browser extension can read the message list Gmail has already rendered in your tab and sort locally without requesting any OAuth scope. The cost in the second case is cross-device sync.
What does the gmail.modify scope actually allow?
Read access to all your mail, plus applying labels, moving messages,
marking as read and archiving. It does not permit permanent deletion;
that needs the broader mail.google.com scope. Any tool that
files mail into folders server-side needs at least this.
Is a Gmail extension safer than a web app that connects to my mailbox?
Not automatically. A Chrome extension can request the same OAuth scopes a web app does, and plenty do. The real question isn't extension versus web app, it's whether the tool holds a token to your mailbox and whether your mail is processed on someone else's server.
How do I check what access I've already granted?
Go to myaccount.google.com/permissions. It lists every connected app and the access it holds, and lets you revoke any of them immediately. Revoking doesn't delete data the app already stored.
What's the tradeoff of sorting Gmail locally?
The folder structure exists only in the browser where it's installed. It won't appear in the Gmail mobile app, Outlook, or any IMAP client, and it won't follow you to another computer unless you install it there too.