This question already has an answer here:

When using Google's two-step verification with services that can't use it, such as mail clients on smartphones and desktops, the solution is to create application-specific passwords for those services.

Does that make things less secure than just using one password as this opens up the account to more that one password?

marked as duplicate by Ayrx, Adi, tylerl, Rory Alsop Mar 3 '14 at 10:52

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 1 down vote accepted

Google's application specific passwords are random and quite long. Those passwords don't occur in any dictionary and cannot be brute forced. So, they are very strong, typically stronger than any password chosen by humans.

Using different passwords for different applications usually increases security. Since, if a password is leaked for one application it cannot be used for another appliation.

Not the answer you're looking for? Browse other questions tagged or ask your own question.