IT Admin Change Calendar Atlassian
Bitbucket Cloud app passwords stopped working on June 9, 2026
Bitbucket Cloud app passwords ceased functioning on June 9, 2026. Integrations, CI pipelines, and scripts must use scoped API tokens instead.
Product
Bitbucket Cloud
Announced
9 June 2025
Effective from
9 June 2026
Who is affected
Developers, CI/CD pipelines, and integrations authenticating to Bitbucket Cloud repositories with app passwords over HTTPS or the REST API.
Admin roles to involve: Atlassian admin, DevOps/CI owners, Repository admins
What administrators should do
Replace every remaining Bitbucket Cloud app password with a scoped API token (Atlassian account settings > Security > Create API token) and update Git credentials, CI/CD pipelines, backup tools, and integrations that authenticate with them. Creation of new app passwords was already disabled on September 9, 2025; existing app passwords ceased to function on June 9, 2026.
What happens if this is ignored
Clones, pushes, API calls, and integrations that still authenticate with app passwords fail, breaking builds, deployments, and backups.
Official source
Bitbucket Cloud transitions to API tokens: enhancing security with app password deprecation
Published by Atlassian · Source dated 9 June 2025 · Checked 24 August 2026
Last verified 24 August 2026
Related changes
- Atlassian Data Center is being retired — new sales ended March 30, 2026 (30 March 2026)
- Atlassian Server products reached end of support on February 15, 2024 (15 February 2024)
- Confluence Cloud legacy editor is fully deprecated from April 2026 (21 January 2026)