By default, all new Yahoo! email accounts do not allow access via username and password over IMAP. All accounts created prior these updates have the “allow less secure” apps setting enabled (meaning it’s okay to connect via username/password). Users are able to view and modify their setting on the Account security screen: