I've used gmail app password on one of my website (gmail two step auth is enabled) and I haven't experienced any issues. I guess... it could be insecure if somebody can access your web2py admin page (admin should be disabled in anyway) or somebody cracks your hosting account login (e.g. pythonanywhere) and obtain your gmail password this way. For everything else, I trust web2py can keep intruders out.
On most of my websites, I've set up my web2py app with my domain register's mail server (SMTP) settings. My domain regsiter (eurodns) provides one free email account. This email account is set up to auto-forward any emails to my main gmail address (web form over to register's mail and finaly to gmail). Also, from gmail account I have IMAP set up, it works like a charm. -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.