I decided to opt for Google's 2-step authentication for increased security.

After setting up my Android device with the Google Authenticator and also configuring backup phones and printing out the list of backup verification codes (and putting that in a safe place ;-) ), I was presented with a screen, asking me to generate (optionally) application specific passwords.

Which apps should these application specific passwords be used in?

I'm guessing the Talk desktop client and any email client that uses the Google credentials are what these will be used for.

Do I need to create multiple passwords for every app or will a common one work across all?

1 Answer 1


At present, it's pretty much anything that accesses your Google account and doesn't go through the web interface -- chat clients, email clients, etc. You'll need a different password for each one -- they're one-time passwords 1.

1: http://googleonlinesecurity.blogspot.com/2011/02/advanced-sign-in-security-for-your.html

  • Are you certain these are one-time pwds? If they were, wouldn't I have to generate new ones each time my email client decides to login to the IMAP server to check for email?
    – Sparx
    Commented Feb 19, 2011 at 5:53
  • The following blog post from the Google security team states that they are one-time: googleonlinesecurity.blogspot.com/2011/02/…
    – Mike Scott
    Commented Feb 19, 2011 at 9:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.