Bitbucket app passwords removal: what breaks

Key takeaways In the final brownout week app passwords worked for only four one-hour gaps a day — 05:00, 11:00, 17:00 and 23:00 UTC. Anyone reporting that theirs still works was living in those gaps. The REST API returns 401 and git-over-HTTPS returns 410. Two different codes for the same dead credential, which is why the two halves of an integration fail differently. There are three usernames, not one: your account email for REST, x-bitbucket-api-token-auth for git with an API token, and x-token-auth for git with an access token.