Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I decided to opt for Google's 2-step authentication for increased security.

After setting up my Android device with the Google Authenticator and also configuring backup phones and printing out the list of backup verification codes (and putting that in a safe place ;-) ), I was presented with a screen, asking me to generate (optionally) application specific passwords.

Which apps should these application specific passwords be used in?

I'm guessing the Talk desktop client and any email client that uses the Google credentials are what these will be used for.

Do I need to create multiple passwords for every app or will a common one work across all?

share|improve this question
up vote 3 down vote accepted

At present, it's pretty much anything that accesses your Google account and doesn't go through the web interface -- chat clients, email clients, etc. You'll need a different password for each one -- they're one-time passwords.

share|improve this answer
Are you certain these are one-time pwds? If they were, wouldn't I have to generate new ones each time my email client decides to login to the IMAP server to check for email? – Sparx Feb 19 '11 at 5:53
The following blog post from the Google security team states that they are one-time: googleonlinesecurity.blogspot.com/2011/02/… – Mike Scott Feb 19 '11 at 9:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.