Bluesky users who want to use third-party apps should avoid sharing their main account password. Instead, Bluesky offers App Passwords — scoped credentials that work like API tokens and can be individually revoked without affecting the main account. While OAuth support is being rolled out, App Passwords are the current practical solution for safely authorizing third-party apps.
1 Impression