FAQ

If 2-step verification is already enabled, you may skip this section.

1. Open the following link and then make sure you're signed into the correct account (on the top-right):
   https://myaccount.google.com/security
2. Find "2-Step verification" (in the "How you sign in to Google" section) and it should say "2-step Verification is off" (otherwise, you can skip this section)
3. Click on "2-Step verification"
4. It's possible that you've already added a 2nd step (e.g. if you previously added your phone number); in which case, you may just be able to enable 2-step by going to the next step. Otherwise, scroll to the bottom of the webpage to find multiple ways of enabling 2-step verification (you do not need to give your phone number). If you're familiar with these options, choose the option that works best for you. If you don't know where to start, here is some unofficial information collected by myself and other users:
   • Authenticator: This may be the best choice for most users; you'll need an authenticator app installed on your phone or PC. Google will recommend their Google Authenticator app, but most any generic authenticator app should work; there are authenticator apps available through the Microsoft Store if you prefer a Windows-based authenticator. Additionally, you can install authenticator add-ons for your webbrowser. When 2FA is necessary, you access the authenticator app on your phone/PC and enter the provided 6 digit number into the web form.
   • Google Prompt: To use this method, you need to add the account to your Android phone; you'll get a popup on that device when 2FA is required
   • Phone number: This method is probably the most straight-forward method if you don't want to deal with the previous choices. It should be noted that this is probably the least secure of these methods, but still much more secure than not having 2-step enabled.
   • Passkey: In my test, enabling a passkey (on an Android device) was not sufficient to enable 2-step verification. Further, it prevented me from accessing the /apppassword/ link after adding a valid Authenticator method. Removing the passkey allowed the Authenticator. As such, this method is not recommended solely for the purpose of creating an app password.
5. Once you have added a second step, click the "Turn on 2-step verification" link
6. It may still ask you to add a phone number, but if you have added a valid 2nd step, you can press the "Skip" button (otherwise, "skip" won't be visible)
7. Now that 2-step verification is enabled, you can proceed to the next section to "create the app-password"

1. Open the link:
   https://myaccount.google.com/apppasswords
2. You may be asked for the account -- make sure you select the correct Gmail account and sign in
3. Provide an app name (e.g. POP Peeper) and press the "Create" button
4. Follow the instructions Google provides -- copy the app password; edit the account in POP Peeper and paste it into the "Password" field; press "Update". If you have other accounts using the same login (ie. folders), then you should edit those accounts in POP Peeper and paste the same app password.
   It is not necessary to record the app password; if you have multiple installations of POP Peeper, you can create a different app password for each install. You can delete old app passwords that are no longer in use (or that may be compromised) from the same link above.

Google help for "Sign in with app passwords" -- https://support.google.com/accounts/answer/185833