App-specific passwords are set to become a mandatory requirement for third-party apps that access iCloud user data, according to Apple Support.
The policy change basically means that users who want to continue using third-party apps with their iCloud account will have to enable two-factor authentication and generate individual passwords for each app.
As of June 15, app-specific passwords will be required to access your iCloud data using third-party apps such as Microsoft Outlook, Mozilla Thunderbird, or other mail, contacts and calendar services not provided by Apple.
If you are already signed in to a third-party app using your primary Apple ID password, you will be signed out automatically when this change takes effect. You will need to generate an app-specific password and sign in again.
Two-factor authentication ensures that you’re the only person who can access your Apple account, even if someone knows your password.
How to generate an app-specific password
- Navigate to Appleid.apple.com from your web browser and sign in with your Apple ID and Password. Verify your identity with two-factor authentication.
Under the Security section, select Generate Passwords.
If you don’t see the option to generate app-specific passwords, you’ll need to enable two-factor authentication.
Sign in to Appleid.apple.com, then select Generate Password
Enter a label for the password related to the app for which you are generating the password.
After entering a password label, select Create.
Copy the app-specific password you generated.
Copy the newly generated password
Launch the app for which you need the app-specific password.
Paste the app-specific password into the password field that is asking for your iCloud password.
From now on, the app you just generated the app-specific password for will use this specific password in order to access iCloud. If you every have to re-enter your iCloud password, use this app-specific password again.
How to revoke app-specific passwords
If you have any app-specific passwords for apps that you no longer use, you can revoke the password, which will also revoke access for that third-party app to iCloud. If you want to use that third-party app again, you’ll need to generate a new app-specific password.
- Navigate to Appleid.apple.com from your web browser and sign in with your Apple ID and Password. Verify your identity with two-factor authentication.
Under the Security section, select Edit.
Sign in to Appleid.apple.com, then select Edit
Under the App-Specific Passwords section, select View History. Select the Remove icon next to the password you want to revoke. It looks like an X. Select Revoke to confirm that you want to revoke access to the app-specific password.
Select Done when you are finished.
You can also select Revoke All to revoke access to all app-specific passwords you’ve created.
How to view a list of your app-specific passwords
Apple lets you store up to 25 active app-specific passwords at one time. You can view a list of passwords you’ve generated for apps to ensure you still need them. You won’t be able to see the actual password, but you can view the label you entered and the date it was created.
- Navigate to Appleid.apple.com from your web browser and sign in with your Apple ID and Password.
Verify your identity with two-factor authentication.Sign in to Appleid.apple.com, then select Edit
Under the Security section, select Edit.
Under the App-Specific Passwords section, select View History.
You’ll be able to see the label for every app-specific password you’ve created. Take a look at the list to make sure you’re still using iCloud with those third-party apps.