An app password is a 12-character passcode that gives an app permission to access your Zoho mail from various email clients (such as Microsoft Outlook, Mozilla Thunderbird etc.), Jabber clients, and standalone applications.
If two factor authentication (TFA) is enabled for your account:
You cannot use your password directly to access POP/IMAP email clients.
You must use an App Password to access those applications.
If TFA is not enabled for your account:
You can use either your Zoho account password or an App password to access POP/IMAP email clients.
If the email client faces a security breach, your account will also be compromised.
Using an app password will shield your Zoho account from the breach.
To generate an app password for your email client:
Navigate to Security > App Passwords.
Enter your Zoho password
Enter the app name in the given field
The app password is generated and shown in bold font. Copy and note down or save the password as it will not be displayed again.
You can also delete existing app passwords:
Navigate to Security > App Passwords.
Enter your Zoho password.
Click Show Generated Passwords.
You can delete an app password using the Revoke button.
Note: Enter the app password without spaces in your email clients.