Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

Is there no way to restrict services for Google's application-specific passwords? Those passwords have almost full access to your account. It seems like design flaw. Eg. if I generate generate a password for a google reader app which doesn't support OAuth, I want to limit that password to the Google Reader service and not give it access to my mail.

In fact, application specific passwords could have been implemented very similar to OAuth tokens. Any suggestions?

share|improve this question
    
I have recently wondered the same. I guess that the sheer length of application specific passwords makes them somewhat safe – but having too many of them really defeats the purpose of two-factor auth it seems. –  slhck May 5 '12 at 7:32
add comment

migrated from superuser.com May 6 '12 at 21:38

This question came from our site for computer enthusiasts and power users.

2 Answers

I think I've got an idea that might help. Create another Google account and only use that one for Reader. Since you are only going to use it for Reader, you might not even care to use 2-factor auth but it should not matter either way now.

share|improve this answer
add comment

Sorry to say so, but there is no way to do what you are asking for.

I would like to say that, Application specific password is only for mobile apps where the SMS cannot be generated/is not supported.

So, if you use application specific password to log on to Google Reader App, the App must be so deigned that you cannot open your GMail e-mails within the app.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.