Bitbucket app passwords removal: what breaks

Atlassian fully removes app passwords in Bitbucket Cloud on 28 July 2026. In the final week they worked only four hours a day, with REST API returning 401 and git-over-HTTPS returning 410. Migration to API tokens is mandatory, but tokens last at most one year and cannot be extended.

• Full app password removal is set for 28 July 2026
• REST API returns 401, git-over-HTTPS returns 410
• In the final week passwords worked only 4 hours a day
• API tokens last at most one year and cannot be extended