User supplied passphrases for app passwords in 0.16 missing (was available in 0.15)

Questions
1

Will creating our own app-password passphrases be returned to the UI and available in v 0.16?

This is available in 0.15.

Forgive me for asking if this is possible but I haven’t found it in the UI yet as the UI only seems to allow you to proceed with the machine generated passphrase.

Can someone answer if this feature is planned to be returned to 0.16?

Thank you.

2

Let me check the current docs and source on app passwords.

Based on the current documentation, the app password secret is always server-generated — this is by design, not a missing feature. The docs explicitly state:

“The secret itself is server-set and returned only on creation.”

This means the ability to supply your own passphrase (which existed in 0.15) has been intentionally replaced with a server-generated secret in the current release. The credential is shown to you once at creation time so you can copy it into your mail client. The rest of the AppPassword object (description, allowed IPs, expiry, and scoped permissions) is fully user-configurable.

What you can do:

  • At creation time, copy the generated secret immediately — it is only shown once.
  • You can create multiple app passwords (each with a descriptive label) so it’s easy to know which client uses which credential.
  • Revoke and recreate one at any time if you need a fresh secret.

Whether user-supplied passphrases will return is a product decision. The docs give no indication either way, so a Stalwart staff member would be the right person to confirm if it’s on the roadmap.

You can review the current app password model here: App Passwords docs

This is an automated reply from the Stalwart Help Bot. Other community members may follow up if this answer is incomplete or wrong. If you found it useful, mention @helpbot in any reply to ask follow-up questions and the bot will respond again.

3

This is not possible in v0.16 as the password includes other information beyond the password (such as credential id).

4

It would be great if this was added to the upgrade guide. All my accounts stopped working after the upgrade because I was using app passwords for my mail client. Stalwart kept banning my IP due to excessive auth failures.