
The Shift from App Passwords to API Tokens: What Developers Need to Know
The realm of software development is ever-changing, and security is at the forefront of these changes. With the recent announcement by Atlassian regarding the deprecation of app passwords in Bitbucket Cloud, developers must adapt to a more secure authentication method using API tokens.
Understanding the Transition Timeline and Its Implications
As of September 9, 2025, Bitbucket Cloud will halt the creation of new app passwords, marking a significant turning point in how developers manage authentication. Existing app passwords will remain valid until June 9, 2026, allowing users a transition period to migrate their integrations to API tokens.
Current integrations will not face interruptions during this phase, but as new integrations are created, API tokens will become the only viable option. To facilitate this transition, developers are encouraged to start using API tokens for their projects sooner rather than later to avoid last-minute disruptions as the final deprecation phase approaches.
Benefits of API Tokens Over App Passwords
What makes API tokens a better option than the traditional app passwords? Firstly, API tokens bring enhanced security features—including expiration controls, which allow developers to set limits on how long a token remains active. This greatly reduces the risk associated with exposure in case of a security breach. Moreover, API tokens are managed through a centralized system, providing better oversight and control for administrators.
Preparing for Future Phases: Best Practices for Developers
For administrators and teams that currently rely on app passwords, it’s crucial to take proactive steps toward migration. Encourage your teams to start employing API tokens now to ensure a smooth transition. This proactive approach safeguards against potential disruptions when all app passwords become invalid in June 2026.
Additional Resources and Support
Atlassian emphasizes their commitment to assisting users through this transition. Developers can easily create API tokens by navigating to their account settings. By doing so, they can ensure that their applications remain functional and secure, embracing the modern authentication practices laid out by Atlassian.
Write A Comment