When you connect ONYX to BlueSky, you should not use your main BlueSky password. You use an app password instead.
An app password is a separate password made for a specific app or integration. It lets that app do the thing you approved, while keeping your main account password private.
BlueSky's user FAQ tells people to generate app passwords from Settings > Advanced > App Passwords for third-party apps.
Why BlueSky app passwords matter
Your main password is the key to your whole account. An app password is more limited and easier to revoke. If you ever stop using a tool, you can remove that app password from your BlueSky settings without changing your main login.
BlueSky and AT Protocol are also moving toward OAuth as the long-term authentication path. Until a specific app uses that flow, app passwords remain the practical setup for many third-party publishing tools.
BlueSky's OAuth update explains that OAuth is expected to replace app-password-based flows over time.
That is why ONYX asks for an app password instead of your real password. It is the cleaner way to connect a scheduler to your BlueSky account.
What ONYX uses it for
ONYX uses your BlueSky app password to publish the posts you schedule, load account information needed for the scheduler, and keep your posting workflow connected.
It does not mean ONYX owns your account. You are authorizing ONYX to help publish your own scheduled posts.
How to create one
- Open your BlueSky account settings.
- Go to the app passwords area.
- Create a new app password for ONYX.
- Copy it once and paste it into ONYX during connection.
- Store your main BlueSky password separately and do not enter it into schedulers.
If the password is shown only once, create it when you are ready to connect. That keeps the setup simple.
Use the BlueSky app password setup checklist before connecting a scheduler.
When to revoke an app password
Revoke an app password if you stop using a tool, suspect the password was shared somewhere it should not be, or want to rotate access as part of normal account hygiene.
After you revoke it, ONYX will no longer be able to publish until you connect again with a new app password.
The practical rule
Use app passwords for apps. Keep your main password for signing in. That one habit makes connected tools much easier to manage.
Connect BlueSky to ONYX and start with the free scheduler.