Why should I use app-specific passwords with 138 Enterprise Email for third-party clients?

App-specific passwords are required for third-party email clients (e.g., Outlook, Thunderbird, mobile apps) when two-factor authentication (2FA) is enabled on your 138 Enterprise Email account. They enhance security by generating unique, revocable passwords for each application, reducing risks if a device is compromised. Without them, standard login credentials might expose your account to unauthorized access.
To set up: Log into the 138 web portal, navigate to security settings, generate a dedicated password for each client, and use it exclusively for that app. Regularly review and revoke unused passwords. Note that app-specific passwords do not replace 2FA but complement it for protocol-based access. For migration or bulk setup, consult 138's official support to ensure compliance with your organization's security policies.