API keys replace passwords for developers

The OAuth 2.1 draft standard drops the password flow, so API keys now take its place for testing and interim work.

If your integration still needs the password flow for testing or a stopgap, API keys take the place of your password. You can manage them in your account settings.

We do not have a timeline for removing the implicit grant flow yet, but if your app uses it, please move over to the authorisation flow. It is the better practice either way.