ConceptApp Password
App-Specific Password
An alternative authentication scheme offered by some services that generates a dedicated password for each application, independent of the primary password. If compromised, it can be revoked individually without affecting the primary password or other applications.
Timeline (last 90 days)
Oct 17
The principle of least privilege includes: limiting token scope (read-only or restricted to a single repository), setting expiration times, preferring OAuth and app-specific passwords over master passwords, and keeping 2FA and payments in human hands.
Unverified50%