How app passwords keep your primary password private

Apple Mail, Thunderbird, and Outlook need a password. If you give them the same password you use to sign in on the web, every device that stores that password can open the account. Revoking one client then means changing the password everywhere.

What we generate

ZanonMail creates app passwords through the mail server’s own account-management API. The secret is shown once. We do not write it to logs, analytics, or URLs. The list later shows the name you chose and the created date when the server provides one. Last-used is omitted unless the server actually stores it — today it does not.

What this is not

An app password is not OAuth for Outlook or Apple. Those vendors would have to treat ZanonMail as a third-party identity provider. They do not. Use the app password. Prefer the web client when you can: it stays on JMAP and does not copy the mailbox onto someone else’s desktop stack.