Create app password (needed to connect to apps and devices)
Your WebOké Nextcloud always asks for an extra code when you log in (two-factor authentication). Some apps can't enter that code. For those apps you create an app password: a separate, long password that is only for that one app.
When do you need an app password?
| App or device | App password needed? |
|---|---|
| Nextcloud Files on your computer | No, you log in through your browser and the app takes care of it. |
| Nextcloud app on your phone or tablet | No, you log in through the login screen in the app. If that doesn't work, you can scan an app password as a QR code. |
| Calendar and contacts on your iPhone, iPad or Mac (CalDAV and CardDAV) | Yes |
| DAVx5 on Android | Usually not: choose to log in through the browser. If that doesn't work, use an app password. |
| Thunderbird and Outlook with CalDav Synchronizer | Yes |
| Your Nextcloud as a network drive (WebDAV) and other programs, such as backup software on a NAS | Yes |
An app password is also secure: if you lose your phone, for example, you only delete the app password for that device. Your regular password and your other devices keep working.
Creating an app password
Step 1 - On your computer, go to your Nextcloud and log in. Click your profile picture or your initials in the top right.
Step 2 - In the menu, click Settings.
Step 3 - On the left, click Security.
Step 4 - Scroll down to Devices & sessions. Under App name, enter a name you'll recognise the app by later, for example Calendar iPhone Anne, and click Create new app password.
Step 5 - You'll see your username (under Login) and the new app password (under Password). Copy the password and enter it in the app, where it asks for your password. As the username, use your regular Nextcloud username. If you're setting up the Nextcloud app on your phone, you can also click Show QR code for mobile apps and scan the code with the app.
TIP: Do you have a Mac and an iPhone with the same Apple account? Copy the password on your Mac and paste it straight onto your iPhone.
Good habits
- Create one app password per app per device. If you lose one device, you only revoke that password.
- If you change your regular password, your app passwords keep working. Want to lock an app out? Delete its app password.
- Does an app get error 401, or does it keep asking for your password? Then it's usually trying your regular password. Create an app password and enter that instead.
Detailed explanation with screenshots and a short video: App passwords: when and how in the Nextcloud manual.