No offense, but if you're writing them down or typing them, you're probably doing it wrong. (not to discount the fact that yes, applications are still storing i

No offense, but if you're writing them down or typing them, you're probably doing it wrong. (not to discount the fact that yes, applications are still storing it somewhere) No really, I have a dozen application specific passwords and I've never, ever written them down or typed them in by hand. Hey guys, Google's 2-factor-auth is not oAuth. The functionality that everyone is clamoring for... is the exact technologies used when using Google Accounts properly. Google, behind the scenes, uses OpenID and oAuth to authorize access to parts of your account... But the application specific passwords are for the "legacy" applications that don't support oAuth properly. The sad thing is that Chrome is one of my biggest users for App-specific-pws.