[vel0city]

> Oh and even better, apparently Gmail is starting to lock down access to your emails with only a username and password in the interest of "security", so you have to go through convoluted hoops in order to check your email in something that isn't the gmail web UI. It is literally impossible for me to check my work mail in something like Aerc.

Application specific passwords. If you have 2FA enabled on your Google account, you can create an app password for your account to use a client like Aerc or whatever.

https://support.google.com/accounts/answer/185833?hl=en

Note, an organization may configure policies to disable this access.

[andreareina]

You also need to have 2fa set up. And they don't have totp as an option unless you also set up either a security key or any number of options (sms, mobile push, others?) that involve getting entangled with google again.

Google really prefers you'd use sms 2fa over totp.