Skip to main content

Function: generateAppPassword()

generateAppPassword(): string

Defined in: auth/src/auth/shared.ts:553

Generates a single, high-entropy plaintext app password (see SecretType.APP_PASSWORD) - a standing, individually-revocable credential a user creates on demand for one legacy Basic-auth client (e.g. an old mail client) that can't complete an MFA challenge. Unlike generateRecoveryCodes(), this returns exactly one value rather than a batch - the right shape for a credential meant to keep working indefinitely (until explicitly revoked) rather than be spent on first use. Shown to the user exactly once, at creation time (see BaseSecretRoute.validateAppPasswordCreate()) - only its argon2 hash is ever persisted.

Returns​

string