Real-Time Exam Monitoring and Detection System for Suspicious Activity and AI Tool Usage

GOOGLE APP PASSWORD

An app password is a 16-digit passcode that gives a less secure app or device permission to access your Google Account. App passwords can only be used with accounts that have 2-Step Verification turned on.

Important: App passwords aren’t recommended and are unnecessary in most cases. To help keep your account secure, use "Sign in with Google" to connect apps to your Google Account.

When to use app passwords?

Tip: iPhones and iPads with iOS 11 or up don’t require app passwords. Instead use “Sign in with Google.”

If the app doesn’t offer “Sign in with Google,” you can either:

Use app passwords
Switch to a more secure app or device

Key Features of Google App Passwords:

1. One-Time Setup: Once generated, the app password can be entered in place of your normal Google account password in the app or device.

2. Limited Use: The app password is tied to the app or device for which it was generated and does not provide broader account access.

3. Extra Security: It works in conjunction with 2SV, ensuring that even if an app password is compromised, your main Google account remains secure with the second verification step.

Important Considerations:

Security Risk: App passwords bypass 2SV for the app/device they're used with. Be cautious where and how you use them.
Revocation: You can revoke an app password at any time via your Google account settings if you suspect misuse.
Device-Specific: Each app password is tied to the specific device or app; generating a new one is needed for other apps/devices.

CREATE YOUR APP PASSWORD:

1. Sign in to your Google Account.

2. Click Security.

3. Under Signing in to Google, click App Passwords. You may need to sign in. If you don't have this option, it might be because:

· 2-Step Verification is not set up for your account.

· 2-Step Verification is only set up for security keys.

· Your account is through work, school, or other organization.

· You turned on Advanced Protection.

4. Click Select app and choose the app.

5. Click Select device and pick the device you're using.

6. Click Generate.

7. Follow the instructions to enter the app password. The app password is the 16-character code in the yellow bar on your device.

8. Tap Done.

The app password will be displayed on the screen.

How App Passwords Work?

When you enable 2-Step Verification (2SV) for your Google account, any app or device that doesn’t support the additional verification step will fail to authenticate. App Passwords resolve this issue by acting as a one-time password that allows the app or device to bypass the second verification step.

Authentication Simplified: Instead of asking for your regular Google password, legacy apps or devices use the App Password to connect to your Google account.

Restricted Access: The App Password provides access to specific services (like email or calendar) but doesn’t allow full access to your account settings or other sensitive areas.

Where You Might Use App Passwords:

1. Legacy Email Clients:

o Applications like Microsoft Outlook or Mozilla Thunderbird that do not support OAuth authentication.

2. Third-Party Apps:

o Calendar apps, contact managers, or task managers that integrate with Google but don’t support modern authentication protocols.

3. Smart Devices:

o Older smart TVs, gaming consoles, or IoT devices that need Google account access for features like YouTube or Gmail integration.

Best Practices for Using App Passwords:

1. Generate Unique Passwords for Each App/Device:

o Avoid reusing the same password across multiple devices or services.

2. Revoke Unused Passwords:

o Regularly review and revoke App Passwords that are no longer needed.

3. Secure Devices:

o Ensure that devices using App Passwords are secured with a PIN or password to prevent unauthorized access.

4. Be Wary of Phishing:

o Never share your App Password. Google will never ask for it.

5. Monitor Activity:

o Keep an eye on your Google Account activity for suspicious logins.

In this project we are going to use this app password for sender email in order to send the alerts to receiver email. This app password will be used along with SMTP & MIME which are discussed in the further chapters.